JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.38.252.155

209.38.252.155 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.38.252.155

Whois 209.38.252.155

IP Abuse Reports for 209.38.252.155:

This IP address has been reported a total of 41 times from 31 distinct sources. 209.38.252.155 was first reported on July 31st 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-01-25 04:35:35 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2026-01-25 03:57:33 (4 months ago)	Blocked by UFW (TCP on 8090) Source port: 61007 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8090) Source port: 61007 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 209.38.252.155) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇸 Scan	2026-01-25 03:47:00 (4 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇳🇱 Study Bitcoin 🤗	2025-05-22 12:38:48 (1 year ago)	Port probe to tcp/4000 (terabase) [srv134]	Port Scan
🇰🇷 Seohyun-DC	2024-10-23 05:26:00 (1 year ago)	SSH brute force (fail2ban)	Brute-Force SSH
Anonymous	2024-09-17 12:01:36 (1 year ago)	Failed SSH login from 209.38.252.155 (DE/Germany/-): 5 in the last 3600 secs	Hacking Brute-Force SSH
🇺🇦 llighthunter	2024-09-13 23:03:03 (1 year ago)	Sep 7 11:42:12 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 ... show more Sep 7 11:42:12 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=209.38.252.155, lip=192.168.1.80, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<beL+f4MhL+HRJvyb> Sep 7 11:42:18 mail dovecot: imap-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=209.38.252.155, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low, session=<AnVcgIMhxxzRJvyb> Sep 7 11:42:19 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=209.38.252.155, lip=192.168.1.80, TLS handshaking: Connection closed, session=<xQd3gIMh+w7RJvyb> show less	Port Scan Hacking Spoofing
🇺🇦 llighthunter	2024-09-12 12:06:32 (1 year ago)	Sep 7 11:42:12 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 ... show more Sep 7 11:42:12 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=209.38.252.155, lip=192.168.1.80, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<beL+f4MhL+HRJvyb> Sep 7 11:42:18 mail dovecot: imap-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=209.38.252.155, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low, session=<AnVcgIMhxxzRJvyb> Sep 7 11:42:19 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=209.38.252.155, lip=192.168.1.80, TLS handshaking: Connection closed, session=<xQd3gIMh+w7RJvyb> show less	Port Scan Hacking Spoofing
🇩🇪 BCC_DE_KI	2024-09-10 10:39:00 (1 year ago)	Nmap Aggressive Option Print Detection; 2024/09/07 18:53	Hacking
🇪🇸 el-brujo	2024-09-09 21:51:04 (1 year ago)	09/09/2024-23:51:04.002265 209.38.252.155 Protocol: 6 ET SCAN Behavioral Unusually fast Terminal Ser ... show more 09/09/2024-23:51:04.002265 209.38.252.155 Protocol: 6 ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound) show less	Hacking
🇺🇦 llighthunter	2024-09-09 11:22:38 (1 year ago)	Sep 7 11:42:12 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 ... show more Sep 7 11:42:12 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=209.38.252.155, lip=192.168.1.80, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<beL+f4MhL+HRJvyb> Sep 7 11:42:18 mail dovecot: imap-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=209.38.252.155, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low, session=<AnVcgIMhxxzRJvyb> Sep 7 11:42:19 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=209.38.252.155, lip=192.168.1.80, TLS handshaking: Connection closed, session=<xQd3gIMh+w7RJvyb> show less	Port Scan Hacking Spoofing
🇺🇸 gu-alvareza	2024-09-08 07:05:12 (1 year ago)	Nmap.Script.Scanner	Port Scan
🇫🇷 Kraften	2024-09-08 04:53:22 (1 year ago)	Dovecot imap-login 2 ...	DDoS Attack Brute-Force
🇫🇷 geeek	2024-09-07 21:51:42 (1 year ago)	Port scanning: 554 TCP Blocked	Port Scan
🇸🇬 Cloudkul Cloudkul	2024-09-07 18:18:05 (1 year ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:9e77:1

🇩🇪 213.209.159.235

🇷🇺 212.3.154.183

🇲🇾 183.171.96.232

🇨🇭 107.189.3.148

🇺🇸 207.90.244.26

🇮🇳 182.95.103.110

🇭🇰 152.32.209.166

🇺🇸 147.90.234.116

🇷🇴 142.111.250.77

🇲🇾 118.101.168.208

🇻🇳 103.90.234.13

🇳🇱 94.102.49.125

🇹🇷 78.173.130.133

🇦🇺 45.132.224.97

🇹🇼 220.132.139.128

🇵🇱 195.116.145.127

🇨🇱 190.114.40.16

🇳🇱 185.93.89.79

🇺🇸 142.111.152.62