JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 9.234.42.9

9.234.42.9 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 9.234.42.9

Whois 9.234.42.9

IP Abuse Reports for 9.234.42.9:

This IP address has been reported a total of 91 times from 47 distinct sources. 9.234.42.9 was first reported on August 27th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-08-31 18:10:01 (1 hour ago)	tcp ports: 82,162 (3 or more attempts)	Port Scan
🇦🇺 LiftUp Hosting	2026-08-31 17:46:05 (1 hour ago)	Honeypot hit: HTTP/1.1 request on 8001 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-E ... show more Honeypot hit: HTTP/1.1 request on 8001 GET / User-Agent: Mozilla/5.0 zgrab/0.x Accept: / Accept-Encoding: gzip; 8001 [2] TCP show less	Hacking Bad Web Bot
🇫🇮 sonot	2026-08-31 10:20:45 (8 hours ago)	Blocked by UFW on mail [115/tcp] \| SPT: 37835 \| TTL: 50 \| LEN: 52 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on mail [115/tcp] \| SPT: 37835 \| TTL: 50 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 F2BP	2026-08-31 10:01:46 (9 hours ago)	Honeypot [zap-vps-honeypot]: Unauthorized traffic (1 bytes of payload); 7222 [2] TCP Reported by: ht ... show more Honeypot [zap-vps-honeypot]: Unauthorized traffic (1 bytes of payload); 7222 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇮 mnazibo	2026-08-31 09:30:09 (9 hours ago)	Date: Aug 31 12:24:09 2026 EAT \| Reported IP: 9.234.42.9 mod_security \| id: 913100 920350 949110 \| U ... show more Date: Aug 31 12:24:09 2026 EAT \| Reported IP: 9.234.42.9 mod_security \| id: 913100 920350 949110 \| US/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Found User-Agent associated with security scanner; Host header is a numeric IP address; Inbound Anomaly Score Exceeded (Total Score: 8) show less	SQL Injection Brute-Force Bad Web Bot
🇺🇸 chronos	2026-08-31 09:19:54 (9 hours ago)	[AUTORAVALT][[31/08/2026 - 06:19:54 -03:00 UTC] Attack from [RIPE Network Coordination Centre] [9.23 ... show more [AUTORAVALT][[31/08/2026 - 06:19:54 -03:00 UTC] Attack from [RIPE Network Coordination Centre] [9.234.42.9] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential b] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 MPL	2026-08-31 06:24:27 (12 hours ago)	tcp/4444 (2 or more attempts)	Port Scan
🇳🇱 ByeByte API	2026-08-31 05:04:04 (14 hours ago)	byebyte.space auth: TCP packet to port 9200 (Elasticsearch) at 2026-08-31T05:04:03Z. Source port 344 ... show more byebyte.space auth: TCP packet to port 9200 (Elasticsearch) at 2026-08-31T05:04:03Z. Source port 34486. TCP flags: SYN. Packet: 52B, TTL 42, window 65535, IP id 42518. Single packet, dropped at firewall. p0f: OS Windows NT kernel 5.x (generic match), 22 hops, link IPIP or SIT. show less	Port Scan
🇺🇸 MPL	2026-08-31 04:07:54 (15 hours ago)	tcp port scan (5 or more attempts)	Port Scan
🇺🇸 MPL	2026-08-31 03:22:25 (15 hours ago)	tcp/27017 (2 or more attempts)	Port Scan
🇭🇰 sandra361	2026-08-31 02:22:17 (16 hours ago)	Port scan detected: 10 attempts across 1 port (2086). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=9.234.4 ... show more Port scan detected: 10 attempts across 1 port (2086). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=9.234.42.9 LEN=40 TOS=0x14 PREC=0x00 TTL=43 ID=23512 DF PROTO=TCP SPT=52232 DPT=2086 WINDOW=64240 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇺🇸 Cyber Crusader	2026-08-31 02:03:20 (17 hours ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-08-31 01:08:23 (18 hours ago)	Blocked by UFW (TCP on 2375) Source port: 39773 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 39773 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 9.234.42.9) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-08-30 23:55:22 (19 hours ago)	tcp/5984	Port Scan
🇩🇪 HoneyPot-FrPri	2026-08-30 23:47:15 (19 hours ago)	Aug 31 01:47:14 [redacted] postfix/smtps/smtpd[3303512]: lost connection after CONNECT from unknown[ ... show more Aug 31 01:47:14 [redacted] postfix/smtps/smtpd[3303512]: lost connection after CONNECT from unknown[9.234.42.9] ... show less	Email Spam Brute-Force

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 156.225.1.15

🇳🇱 45.148.10.157

🇬🇧 35.203.210.226

🇳🇱 195.178.110.217

🇬🇧 188.240.59.17

🇭🇰 118.193.32.88

🇩🇪 109.104.37.72

🇷🇴 92.118.39.77

🇨🇳 221.10.70.210

🇳🇱 195.178.110.232

🇮🇳 182.76.115.214

🇺🇸 147.185.132.94

🇺🇸 147.185.132.27

🇺🇸 107.150.106.156

🇨🇦 99.228.243.187

🇸🇰 92.118.26.158

🇳🇱 45.148.10.141

🇹🇷 212.156.98.254

🇰🇷 114.203.111.159

🇨🇳 106.40.184.141