209.38.137.242
Classification: Malicious
209.38.137.242 is a malicious IP address. Reported by 4 threat sources, last seen 2026-09-02. Network: AS14061 DigitalOcean, LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious Host | CIArmy | 2026-08-26 20:04:20 | 2026-09-02 20:04:03 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-08-27 09:17:29 | 2026-08-27 09:17:29 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-08-27 09:17:27 | 2026-08-27 09:17:27 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-08-19 15:07:06 | 2026-08-26 19:58:31 | attacker compromised malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-07-12 20:54:27 | 2026-08-26 19:58:31 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-08-16 00:51:02 | 2026-08-26 14:30:06 | anomalous-activity attacker malicious-activity reconnaissance | |
| Malicious Host | HoneyDB | 2026-08-26 00:00:00 | 2026-08-26 00:00:00 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-07-12 21:07:09 | 2026-08-25 05:59:12 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-07-12 21:07:09 | 2026-08-20 04:00:37 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-08-17 11:29:49 | 2026-08-19 17:43:30 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-08-17 10:45:57 | 2026-08-17 10:45:57 | anomalous-activity attacker malicious-activity |
Whois information
- AS name
- AS14061 DigitalOcean, LLC
- Registrant
- DigitalOcean, LLC
- City
- San Jose
- State
- CA
- Postal code
- 95113
- Country
- US — United States 🇺🇸
- First indexed
- 2026-08-26 20:04:20
- Last updated
- 2026-09-02 20:04:03