212.47.74.111
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- vmi3430070.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇫🇷 France
- City
- Lauterbourg, Grand Est
No reports in the last 60 days
212.47.74.111 has been reported 125 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
125 from
94 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01]
|
Brute-Force SSH | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice02,wa01]
|
Brute-Force SSH | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇫🇷 SpaceHost-Server |
|
Brute-Force Web App Attack | |
| 🇺🇸 paulo.apoloni |
212.47.74.111 - - [04/Feb/2026:02:16:11 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http"
...
|
Web App Attack | |
| 🇺🇸 drewf.ink |
[05:45] Attempted telnet login on port 23 with username admin
|
Brute-Force Exploited Host | |
| 🇫🇷 service Informatique |
/cgi-bin
|
Web App Attack | |
| 🇺🇸 dpinse |
This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773
|
Hacking Web App Attack | |
| 🇩🇪 tg_de |
446 attempts since 03.02.2026 09:21:37 CET - last one: 2026-02-04T01:45:10.884151+01:00 alpha sshd-session[1175458]: Connection closed by authenticating user root 212.47.74.111 port 52408 [preauth]
|
Brute-Force SSH | |
| 🇫🇷 COMAITE |
Common web attack from 212.47.74.111.
|
Web App Attack | |
| 🇺🇸 technash |
HTTP scanning and/or Web app attack detection [ModSecurity/Sentinel]. Redirected traffic to decoy.
|
Web App Attack | |
| 🇫🇷 MrIPBreaker |
|
Brute-Force SSH | |
| 🇫🇷 SpaceHost-Server |
|
Brute-Force Web App Attack | |
| 🇩🇪 tg_de |
394 attempts since 03.02.2026 09:21:37 CET - last one: 2026-02-03T22:58:47.982258+01:00 alpha sshd-session[1171654]: Connection closed by authenticating user root 212.47.74.111 port 39412 [preauth]
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown