209.38.231.242

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
43% Elevated
24 reports
19 reporters · latest 6 days ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
24 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇧🇪 Belgium 1 🇧🇷 Brazil 1
Most common categories Web App Attack 8 Bad Web Bot 2 Hacking 1 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇿 Tripwire
Scanning for exploits - /wp-json/batch/v1
Web App Attack
🇩🇪 abuse-detection
Security detection: http-cve-probing
Web App Attack
Anonymous
Automated web scanner. Requested suspicious paths: /wp-login.php. UTC: 2026-11-02 03:56:00.
Web App Attack
🇫🇷 masterguru
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-197)
Hacking
🇳🇱 i-turnradio.nl
2026-11-02 @ 04:53:02 (CET) ~ Blocked for trying to access: /wp-login.php
Web App Attack
🇩🇪 abuse-detection
Security detection: http-missing-auth-endpoint
Brute-Force Web App Attack
🇧🇷 borbolla
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /wp-login.php HTTP/1.1"
Web App Attack Bad Web Bot
🇩🇪 lespbaj
209.38.231.242 - - [02/Nov/2026:03:47:18 +0000] "GET /wp-login.php HTTP/2.0" 301 162 "-" "Mozilla/5.0" ...
Bad Web Bot Web App Attack
🇧🇪 voormedia
Accessed trap at '/wp-login.php'
Web App Attack
🇧🇷 diego
Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds
DDoS Attack
🇫🇷 ingrowrook
Unauthorzed connection attempts
Hacking
🇧🇷 diego
Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds
DDoS Attack
🇺🇸 drewf.ink
[10:00] Tried to connect to SSH on port 22 but didn't have a valid header (port scanner?)
Brute-Force SSH
🇺🇸 gu-alvareza
Nmap.Script.Scanner
Port Scan
🇳🇱 chilibi.ch
2024-11-24 03:23:05 albla IMAP
Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 169.58.80.127
🇺🇸 34.11.244.116
🇯🇵 8.216.17.176
🇧🇬 213.91.182.247
🇳🇱 195.178.110.228
🇿🇦 105.244.87.227
🇧🇩 103.199.109.12
🇸🇰 90.64.150.183
🇸🇬 85.203.21.92
🇧🇷 69.6.221.18
🇺🇸 48.217.235.68
🇮🇱 20.217.186.29
🇺🇦 194.44.161.219
🇨🇳 118.145.239.129
🇨🇳 115.55.131.243
🇳🇱 109.160.32.110
🇷🇴 81.181.129.218
🇳🇱 45.148.10.152
🇭🇰 34.92.168.145
🇳🇱 20.160.86.7
feedback