This IP address has been reported a total of
10
times from
8 distinct
sources.
49.47.243.38 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-11T18:59:40.130772+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 4386 ...
show more2026-06-11T18:59:40.130772+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 43862 [preauth]
2026-06-11T18:59:40.275962+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 41150 [preauth]
2026-06-11T18:59:40.495436+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 41158 [preauth]
2026-06-12T05:55:01.482684+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 40953 [preauth]
2026-06-12T05:55:02.275077+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 56540 [preauth]
2026-06-12T05:55:03.252939+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 51880 [preauth]
2026-06-12T11:52:47.600657+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 40602 [preauth]
2026-06-12T11:52:47.613623+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 56968 [preauth]
2026-06-12T11:52:51.083657+02:00 ipoac.nl sshd-session-: Connection closed by 49.47.243.38 port 33144 [preauth]
2026-06-12T16:
show less
SSH
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-probing; Action=ban; Events=11; Ho ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-probing; Action=ban; Events=11; Hosts=_; Paths=HELP,OPTIONS / RTSP/1.0,\x00\x00\x00\xA4\xFFSMBr\x00\x00\x00\x00\x08\x01@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x06\x00\x00\x01\x00\x00\x81\x00\x02PC NETWORK PROGRAM 1.0\x00\x02MICROSOFT NETWORKS 1.03\x00\x02MICROSOFT NETWORKS 3.0\x00\x02LANMAN1.0\x00\x02LM1.2X002\x00\x02Samba\x00\x02NT LANMAN 1.0\x00\x02NT LM 0.12\x00,\x00\x00\x00qj\x81n0\x81k\xA1\x03\x02\x01\x05\xA2\x03\x02\x01,\x00\x00\x07\x00\x08\x00\x03\x00\x04\x00\x05\x00\x06,\x00\x1E\x00\x06\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03,\x16\x03\x00\x00S\x01\x00\x00O\x03\x00?G\xD7\xF7\xBA,\xEE\xEA\xB2`~\xF3\x00\xFD\x82{\xB9\xD5\x96\xC8w\x9B\xE6\xC4\xDB<=\xDBo\xEF\x10n\x00\x00(\x00\x16\x00\x13\x00,\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3r
show less
2026-06-11T23:11:02.691050+02:00 srv02 postfix/submission/smtpd[2118133]: improper command pipelinin ...
show more2026-06-11T23:11:02.691050+02:00 srv02 postfix/submission/smtpd[2118133]: improper command pipelining after CONNECT from unknown[49.47.243.38]: \r\n\r\n
2026-06-11T23:11:02.702718+02:00 srv02 postfix/smtps/smtpd[2118137]: lost connection after CONNECT from unknown[49.47.243.38]
2026-06-11T23:11:03.661335+02:00 srv02 postfix/submission/smtpd[2118133]: lost connection after CONNECT from unknown[49.47.243.38]
...
show less