This IP address has been reported a total of
48
times from
42 distinct
sources.
209.38.205.47 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 12
reports;
United States of America
with 6
reports;
Hong Kong
with 5
reports.
The most common categories in these recent reports were:
Port Scan
19
times;
Brute-Force
14
times;
Hacking
10
times;
Web App Attack
7
times;
Email Spam
6
times;
Other
13
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
[22:55] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): PC NETWORK PROGRAM 1.0, MICROSOFT NE ...
show more[22:55] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): PC NETWORK PROGRAM 1.0, MICROSOFT NETWORKS 1.03, MICROSOFT NETWORKS 3.0, LANMAN1.0, LM1.2X002, Samba, NT LANMAN 1.0, NT LM 0.12) - no SMB2 support signaled
show less
🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 20479) to a p ...
show more🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 20479) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities).
show less
Repeated requests for suspicious nonexistent URLs, for example: /evox/about (HTTP/1.1 port 443, bogu ...
show moreRepeated requests for suspicious nonexistent URLs, for example: /evox/about (HTTP/1.1 port 443, bogus vhost, user agent: "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)")
show less
2026-09-25T13:18:59.766516+02:00 v2202104133598150667 9275893e7080[1200]: Sep 25 13:18:59 9275893e70 ...
show more2026-09-25T13:18:59.766516+02:00 v2202104133598150667 9275893e7080[1200]: Sep 25 13:18:59 9275893e7080 postfix/smtps/smtpd[11805]: lost connection after CONNECT from unknown[209.38.205.47]
2026-09-25T13:19:05.794880+02:00 v2202104133598150667 9275893e7080[1200]: Sep 25 13:19:05 9275893e7080 postfix/smtps/smtpd[11805]: lost connection after CONNECT from unknown[209.38.205.47]
2026-09-25T13:19:19.325452+02:00 v2202104133598150667 9275893e7080[1200]: Sep 25 13:19:19 9275893e7080 postfix/smtps/smtpd[11805]: lost connection after EHLO from unknown[209.38.205.47]
...
show less
