172.238.112.154
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Linode
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS63949
- Hostname(s)
- 172-238-112-154.ip.linodeusercontent.com
- Domain Name
- linode.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
14 from
14 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 zerodaysystemde |
Port (22 tcp) Scanner - SSH - HoneyPot
|
Port Scan SSH | |
| 🇩🇪 BanHammer99 |
Reported by VPN-usa
|
Brute-Force SSH | |
| 🇫🇷 Phenix Info |
SmallGuard.fr/Prestashop SSH Login Failed
|
Brute-Force | |
| Anonymous |
sshd
|
Brute-Force SSH | |
| 🇩🇪 pigro |
Nov 8 08:34:14 vps-07b0f6cf sshd[1473300]: User root from 172.238.112.154 not allowed because not listed in AllowUsers
Nov 8 08:38:59 vps-07b0f6cf sshd[1473308]: User root from 172.238.112.154 not allowed because not listed in AllowUsers
...
|
Brute-Force SSH | |
| 🇵🇱 hostero |
|
Brute-Force SSH | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Germany 2x -> Target Country: Frankreich SSH
|
Brute-Force SSH | |
| 🇫🇷 COMAITE |
Honeypot login success
|
Brute-Force | |
| 🇫🇷 gianluca.demartino75 |
2026-11-08T08:34:13.214776+01:00 vps-49934a4d endlessh[321732]: 2026-11-08T07:34:13.214Z ACCEPT host=::ffff:172.238.112.154 port=49848 fd=4 n=1/4096
...
|
Brute-Force SSH | |
| 🇩🇪 AnonDrop |
SSH abuse/brute-force activity - Commands: ssh -V
|
SSH | |
| 🇫🇷 Kejult |
Honeypot Finding: SSH brute-force on TCP/22; 6 failed login attempts.
|
Brute-Force SSH | |
| 🇩🇪 LRob |
SSH brute force
|
Brute-Force SSH | |
| 🇩🇪 Jurilia |
SSH brute-force login attempts. 1 connection attempt. Usernames tried: root. First seen 2026-11-08T07:32:41Z, last seen 2026-11-08T07:32:41Z (UTC). Blocked automatically.
|
Brute-Force SSH | |
| 🇹🇷 pashait |
Seczar SecureOps — SSH Brute Force (5 events) — quarantined 43200m
|
SSH Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown