209.38.214.42

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
258 reports
164 reporters · latest 4 days ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
258 from 164 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 67 🇺🇸 United States of America 43 🇩🇪 Germany 32
Most common categories Port Scan 103 Brute-Force 76 Web App Attack 76 Hacking 59 Bad Web Bot 36
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 chronos
Brute-Force Email Spam Spoofing Phishing Hacking
Anonymous
SSH tarpit (endlessh) connection from 209.38.214.42
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 10 hits on ports [4891, 11434] (automated)
Port Scan
🇪🇸 librebit
Brute force
Brute-Force
🇫🇷 pm33
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇫🇷 uthul
T-Pot honeypot: 14 hits on ports [993, 11434] (automated)
Port Scan
🇺🇸 rscott.us
Brute force SSH login attempts.
Brute-Force SSH
🇩🇪 sebi
Brute-Force
🇫🇷 Kejult
Honeypot Finding: Telnet brute-force on TCP/23; 6 failed login attempts.
Brute-Force
🇵🇱 nfsec.pl
Email Spam Open Proxy
🇩🇪 s@ch@
Jail: plesk-modsecurity | Web application attack (Plesk ModSecurity)
Web App Attack
🇫🇷 cereal57
Unsolicited connection to a honeypot (zipbomb). Automated scan/probe.
Web App Attack Bad Web Bot
🇩🇪 mailox
2026-11-07T02:42:58.465603+02:00 REDACTED postfix/postscreen[2866021]: DNSBL rank 3 for [209.38.214.42]:36118 ...
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 4 application-level events across 2 target ports and 4 source port(s). Ports: 2525/service, 23/Telnet. Sensors: Honeytrap, Cowrie.
Port Scan
🇺🇸 RazaXML
143281 Invalid SMTP connection
Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇪 149.100.145.213
🇰🇷 141.101.85.36
🇺🇸 91.230.168.152
🇩🇪 84.19.182.20
🇯🇵 223.134.89.104
🇨🇳 220.154.3.142
🇸🇬 194.233.86.65
🇺🇸 130.211.236.135
🇺🇸 91.132.125.67
🇫🇷 5.39.125.103
🇯🇵 153.122.19.153
🇧🇩 103.77.253.248
🇸🇪 89.233.203.159
🇳🇱 185.224.128.16
🇮🇩 158.140.180.112
🇪🇸 88.148.126.166
🇬🇧 35.203.211.209
🇺🇸 198.199.78.180
🇱🇹 194.165.16.26
🇬🇧 193.176.29.13
feedback