JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.15.165.245

217.15.165.245 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 39%: ?

39%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141995
Hostname(s)	vmi3395057.contaboserver.net
Domain Name	contabo.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.15.165.245

Whois 217.15.165.245

IP Abuse Reports for 217.15.165.245:

This IP address has been reported a total of 79 times from 43 distinct sources. 217.15.165.245 was first reported on November 27th 2024, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-06-28 12:35:29 (9 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: 192.185.224.72:443:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-06-28 02:28:34 (19 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: iyme.com:443:443 show less	Open Proxy Port Scan
🇧🇬 HighWay	2026-06-26 13:31:22 (2 days ago)	217.15.165.245 - - [26/Jun/2026:13:28:27 +0000] "CONNECT thmarchitects.com:443:443 HTTP/1.1" 400 500 ... show more 217.15.165.245 - - [26/Jun/2026:13:28:27 +0000] "CONNECT thmarchitects.com:443:443 HTTP/1.1" 400 500 "-" "-" 217.15.165.245 - - [26/Jun/2026:13:31:20 +0000] "CONNECT thmarchitects.com:443:443 HTTP/1.1" 400 500 "-" "-" ... show less	Hacking Port Scan
🇯🇵 demonsword	2026-06-24 13:19:39 (4 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: sanskarworldschool.com:443:443 show less	Open Proxy Port Scan
🇧🇷 ICS Labs	2026-05-23 14:08:59 (1 month ago)	ICS Labs identified 217.15.165.245 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇫🇷 SpaceHost-Server	2026-05-12 22:31:29 (1 month ago)		Brute-Force Web App Attack
🇮🇩 sockominfo	2026-05-08 07:00:40 (1 month ago)	Access to sensitive configuration files detected., Access to sensitive files detected w/ specific bo ... show more Access to sensitive configuration files detected., Access to sensitive files detected w/ specific boundary.. Threat Score: 5.5/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 75%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-08 06:00:43 (1 month ago)	Access to sensitive configuration files detected., Access to sensitive files detected w/ specific bo ... show more Access to sensitive configuration files detected., Access to sensitive files detected w/ specific boundary.. Threat Score: 5.6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 75%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-08 05:00:39 (1 month ago)	Access to sensitive configuration files detected., Access to sensitive files detected w/ specific bo ... show more Access to sensitive configuration files detected., Access to sensitive files detected w/ specific boundary.. Threat Score: 5.8/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 75%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇬🇧 consul.to	2026-05-08 04:55:23 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇩 sockominfo	2026-05-08 04:00:12 (1 month ago)	Access to sensitive configuration files detected.. Threat Score: 6.6/10 (MEDIUM). Reported by Tanger ... show more Access to sensitive configuration files detected.. Threat Score: 6.6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 botreporter	2026-05-08 03:05:06 (1 month ago)	CMS vulnerability/installation scanning	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-07 22:33:31 (1 month ago)		Brute-Force Web App Attack
🇺🇸 ipblock.com	2026-05-07 06:50:00 (1 month ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-05-07 06:00:41 (1 month ago)	Access to sensitive configuration files detected., Access to sensitive files detected w/ specific bo ... show more Access to sensitive configuration files detected., Access to sensitive files detected w/ specific boundary.. Threat Score: 5.6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 62%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 122.35.192.33

🇹🇼 198.235.24.86

🇺🇸 168.245.103.229

🇮🇳 103.180.212.135

🇩🇪 92.246.90.200

🇱🇻 81.30.98.144

🇧🇪 34.140.222.206

🇳🇱 20.71.254.235

🇨🇳 14.103.102.130

🇨🇳 182.242.169.87

🇲🇦 160.177.12.92

🇺🇸 149.18.184.70

🇭🇰 119.28.9.170

🇧🇩 114.130.209.14

🇨🇳 111.40.181.23

🇨🇳 111.33.120.234

🇵🇱 91.150.202.96

🇳🇱 91.92.42.7

🇩🇪 69.5.169.189

🇲🇽 38.49.148.70