Is 209.38.100.203 malicious?

IP reputation report for 209.38.100.203: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.

209.38.100.203 is flagged as malicious

Detected by 5 threat intelligence sources in the isMalicious dataset — review before trusting this IP.

Threat verdict

VerdictMalicious

Flagged malicious by the aggregated reputation verdict.

Blocklist detections5 sources
Suspicious signals2
Categoriesphishing, malware
Confidence score90/100

Aggregated confidence across the sources reporting this indicator.

First seen2026-05-27
Last updated2026-05-27

Network & location

LocationAmsterdam, North Holland, Netherlands
ISPDigitalOcean, LLC

Security posture

Open ports22, 3000, 4000

Detections

  • Romain Marcoux - Malicious IPsphishing
  • T145 - Black Mirror IPv4 Blocklistmalware
  • Bitwire - Inbound Blocklistmalware
  • bitwire‑it IP blocklist – bad IPs updated every 2hmalware
  • X4BNet - Datacenter IPv4 Rangesrisk

Threat categories

phishingmalware

Related malicious IPs on nearby networks

209.38.100.61209.38.100.122209.38.100.199209.38.100.96209.38.100.189209.38.100.218209.38.100.62209.38.100.50
Run a live scan of 209.38.100.203Download IP blocklists →