This IP address has been reported a total of
243
times from
161 distinct
sources.
209.38.101.212 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 1
report;
Spain
with 1
report;
France
with 1
report.
The most common categories in these recent reports were:
Port Scan
4
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a hone ...
show moreHoneypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
show less
Honeypot Finding: repeated TCP service probing on TCP/13000 (service); 2 application-level events ac ...
show moreHoneypot Finding: repeated TCP service probing on TCP/13000 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
show less
Blocked by UFW (TCP on 8000)
Source port: 61015
TTL: 239
Packet length: 44
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 8000)
Source port: 61015
TTL: 239
Packet length: 44
TOS: 0x00
This report (for 209.38.101.212) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 8085.
ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/209.38.101.212
2026-04-24 0 ...
show moreThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/209.38.101.212
2026-04-24 04:19:17 /
show less
HoneyPot hit - Aaran.cloud | Web Scan | web exploitation | GET / HTTP/1.1 Host: 103.1.75.104 User-Ag ...
show moreHoneyPot hit - Aaran.cloud | Web Scan | web exploitation | GET / HTTP/1.1 Host: 103.1.75.104 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/201001
show less
HoneyPot hit - Aaran.cloud | Php Fpm Probe | web exploitation | GET / HTTP/1.1 Host: 103.1.73.217 Co ...
show moreHoneyPot hit - Aaran.cloud | Php Fpm Probe | web exploitation | GET / HTTP/1.1 Host: 103.1.73.217 Connection: keep-alive sec-ch-ua: "Google Chrome";v="142", "Not-A.
show less
2026-02-13T09:46:00.755898Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 209.38.101.212:577 ...
show more2026-02-13T09:46:00.755898Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 209.38.101.212:57746 (158.69.22.11:2222) [session: 14465c907b0d]
2026-02-13T09:46:51.592267Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 209.38.101.212:59178 (158.69.22.11:2222) [session: 4adcc9e90aef]
...
show less
Brute-Force
SSH
Anonymous
Feb 13 10:42:11 srv2 sshd[1250750]: Invalid user administrator from 209.38.101.212 port 47038
Feb 13 ...
show moreFeb 13 10:42:11 srv2 sshd[1250750]: Invalid user administrator from 209.38.101.212 port 47038
Feb 13 10:43:02 srv2 sshd[1250777]: Invalid user administrator from 209.38.101.212 port 58952
Feb 13 10:43:53 srv2 sshd[1250828]: Invalid user administrator from 209.38.101.212 port 44802
Feb 13 10:44:44 srv2 sshd[1250860]: Invalid user administrator from 209.38.101.212 port 46504
Feb 13 10:45:34 srv2 sshd[1250993]: Invalid user ftpuser from 209.38.101.212 port 39824
...
show less
