AbuseIPDB » 194.238.31.149
194.238.31.149
This IP was reported 7 times. Confidence of
Abuse
is 48% : ?
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS40021
Hostname(s)
vmi3504536.contaboserver.net
Domain Name
contabo.com
Country
πΊπΈ
United States of America
City
St. Louis, Missouri
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 194.238.31.149 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
194.238.31.149 was first reported on
August 12th 2026 , and the most recent report was
13 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
πΉπ·
Threat.live
2026-08-27 18:05:03
(13 hours ago)
Suspicious Connection Attempts
Brute-Force
πΊπΈ
bigscoots.com
2026-08-27 17:42:00
(14 hours ago)
194.238.31.149 (US/United States/vmi3504536.contaboserver.net), 5 distributed sshd attacks on accoun ...
show more
194.238.31.149 (US/United States/vmi3504536.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 27 12:41:47 14778 sshd[15256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.238.31.149 user=root
Aug 27 12:41:49 14778 sshd[15256]: Failed password for root from 194.238.31.149 port 42260 ssh2
Aug 27 12:41:49 14778 sshd[15258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.238.31.149 user=root
Aug 27 12:33:29 14778 sshd[10791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.219.103.193 user=root
Aug 27 12:33:31 14778 sshd[10791]: Failed password for root from 154.219.103.193 port 52608 ssh2
IP Addresses Blocked:
show less
Brute-Force
SSH
πΊπΈ
drewf.ink
2026-08-27 16:58:40
(14 hours ago)
[16:58] Attempted SSH login with credentials root:ο»Ώ--***********---
Brute-Force
SSH
π©πͺ
arc21
2026-08-27 15:08:04
(16 hours ago)
2026-08-27T15:07:39.321132+00:00 new-billing sshd[417409]: Failed password for root from 194.238.31. ...
show more
2026-08-27T15:07:39.321132+00:00 new-billing sshd[417409]: Failed password for root from 194.238.31.149 port 58650 ssh2
2026-08-27T15:07:58.156493+00:00 new-billing sshd[417412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.238.31.149 user=root
2026-08-27T15:07:59.613159+00:00 new-billing sshd[417412]: Failed password for root from 194.238.31.149 port 32872 ssh2
2026-08-27T15:08:01.790782+00:00 new-billing sshd[417414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.238.31.149 user=root
2026-08-27T15:08:03.658859+00:00 new-billing sshd[417414]: Failed password for root from 194.238.31.149 port 38618 ssh2
...
show less
Brute-Force
SSH
2026-08-27 14:51:27
(16 hours ago)
Knocking on port 22 (endlessh-go)
SSH
π«π·
pr0vieh
2026-08-27 14:35:32
(17 hours ago)
2026-08-27T16:35:10.393732+02:00 Linux09 sshd[42227]: pam_unix(sshd:auth): authentication failure; l ...
show more
2026-08-27T16:35:10.393732+02:00 Linux09 sshd[42227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.238.31.149 user=root
2026-08-27T16:35:12.680563+02:00 Linux09 sshd[42227]: Failed password for root from 194.238.31.149 port 43748 ssh2
2026-08-27T16:35:14.558890+02:00 Linux09 sshd[42520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.238.31.149 user=root
2026-08-27T16:35:17.060078+02:00 Linux09 sshd[42520]: Failed password for root from 194.238.31.149 port 43760 ssh2
2026-08-27T16:35:19.852986+02:00 Linux09 sshd[42665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.238.31.149 user=root
2026-08-27T16:35:21.728483+02:00 Linux09 sshd[42665]: Failed password for root from 194.238.31.149 port 53732 ssh2
2026-08-27T16:35:24.093390+02:00 Linux09 sshd[42740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.238.3
...
show less
Brute-Force
SSH
π«π·
Cirno
2026-08-12 23:31:19
(2 weeks ago)
2026-08-12T23:31:12.841403+00:00 cirno sshd[308855]: Failed password for root from 194.238.31.149 po ...
show more
2026-08-12T23:31:12.841403+00:00 cirno sshd[308855]: Failed password for root from 194.238.31.149 port 57902 ssh2
2026-08-12T23:31:16.321397+00:00 cirno sshd[308855]: Failed password for root from 194.238.31.149 port 57902 ssh2
2026-08-12T23:31:18.859716+00:00 cirno sshd[308855]: Failed password for root from 194.238.31.149 port 57902 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown π©
Recently Reported IPs: