This IP address has been reported a total of
45
times from
40 distinct
sources.
207.175.47.242 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 15
reports;
France
with 8
reports;
Germany
with 5
reports.
The most common categories in these recent reports were:
Brute-Force
28
times;
Port Scan
15
times;
Hacking
13
times;
IoT Targeted
7
times;
FTP Brute-Force
5
times;
Other
15
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Honeypot hit: Brute-force attack detected on 23/TELNET
• Credentials: GET / HTTP/1.1:Host: [SOME-IP] ...
show moreHoneypot hit: Brute-force attack detected on 23/TELNET
• Credentials: GET / HTTP/1.1:Host: [SOME-IP]:23, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36:Accept-Encoding: gzip, *1:$4, OPTIONS rtsp://example.com RTSP/1.0:Cseq: 3522
• Number of login attempts: 4
• 1 command(s) were executed during the session
show less
Brute-Force
Hacking
Anonymous
2026-10-09T05:49:15.748505-04:00 mail postfix/smtpd[282443]: lost connection after EHLO from 242.47. ...
show more2026-10-09T05:49:15.748505-04:00 mail postfix/smtpd[282443]: lost connection after EHLO from 242.47.175.207.bc.googleusercontent.com[207.175.47.242]
2026-10-09T05:49:15.832208-04:00 mail postfix/smtpd[282443]: improper command pipelining after CONNECT from 242.47.175.207.bc.googleusercontent.com[207.175.47.242]: HELP\r\n
2026-10-09T05:49:23.331909-04:00 mail postfix/smtpd[282443]: lost connection after UNKNOWN from 242.47.175.207.bc.googleusercontent.com[207.175.47.242]
...
show less
Oct 9 16:51:40 mail postfix/postscreen[20945]: PREGREET 18 after 0.3 from [207.175.47.242]:40214: E ...
show moreOct 9 16:51:40 mail postfix/postscreen[20945]: PREGREET 18 after 0.3 from [207.175.47.242]:40214: EHLO example.com\r\n
...
show less
Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 3 application-level events across ...
show moreHoneypot Finding: repeated TCP service probing on TCP/23 (Telnet); 3 application-level events across 3 source port(s). Sensor(s): Cowrie.
show less
Oct 9 08:30:45 [redacted] postfix/postscreen[24428]: PREGREET 18 after 0.01 from [207.175.47.242]:28 ...
show moreOct 9 08:30:45 [redacted] postfix/postscreen[24428]: PREGREET 18 after 0.01 from [207.175.47.242]:28580: EHLO example.com\r\n
show less
SSH aggressive port ping.
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level ...
show moreSSH aggressive port ping.
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"38556","src":"207.175.47.242","time":"2026-10-09T06:28:55Z"}
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"38568","src":"207.175.47.242","time":"2026-10-09T06:28:55Z"}
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"38570","src":"207.175.47.242","time":"2026-10-09T06:28:55Z"}
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"61534","src":"207.175.47.242","time":"2026-10-09T06:29:14Z"}
{"destinationServicename":"telnetd","dpt":"2323","dst":"REDACTED.2","level":"info","msg":"Telnet connection","product":"ssh-auth-logger","spt":"61540","src":"207.175.47.242",
...
show less
