JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.216.59.252

217.216.59.252 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141995
Hostname(s)	vmi3296438.contaboserver.net
Domain Name	contabo.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.216.59.252

Whois 217.216.59.252

IP Abuse Reports for 217.216.59.252:

This IP address has been reported a total of 37 times from 33 distinct sources. 217.216.59.252 was first reported on June 7th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-06-08 06:20:27 (5 hours ago)	[AUTORAVALT][[08/06/2026 - 03:20:26 -03:00 UTC] Attack from [217.216.59.252][vmi3296438.contaboserve ... show more [AUTORAVALT][[08/06/2026 - 03:20:26 -03:00 UTC] Attack from [217.216.59.252][vmi3296438.contaboserver.net] Action: BLocKed FTP Brute-Force -> Running brute force credentials on the FTP server. Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc. ] ... show less	FTP Brute-Force Brute-Force
🇨🇦 zXero	2026-06-08 04:11:34 (7 hours ago)	Fail2Ban automatic report - jail: geoip-ssh	Brute-Force SSH DDoS Attack
Anonymous	2026-06-08 03:46:42 (7 hours ago)	Jun 8 05:46:39 sd-55437 sshd[184211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Jun 8 05:46:39 sd-55437 sshd[184211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.216.59.252 user=root Jun 8 05:46:41 sd-55437 sshd[184211]: Failed password for invalid user root from 217.216.59.252 port 37100 ssh2 Jun 8 05:46:42 sd-55437 sshd[184211]: Connection closed by invalid user root 217.216.59.252 port 37100 [preauth] ... show less	Brute-Force SSH
🇫🇷 vtchost.com	2026-06-08 03:15:02 (8 hours ago)	multiple failed login attempts ...	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-08 03:09:36 (8 hours ago)	217.216.59.252 (DE/Germany/vmi3296438.contaboserver.net), 5 distributed sshd attacks on account [roo ... show more 217.216.59.252 (DE/Germany/vmi3296438.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 7 21:48:29 15645 sshd[29318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.216.59.252 user=root Jun 7 21:48:31 15645 sshd[29318]: Failed password for root from 217.216.59.252 port 45418 ssh2 Jun 7 21:32:36 15645 sshd[21272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.154.221 user=root Jun 7 21:32:38 15645 sshd[21272]: Failed password for root from 51.83.154.221 port 35190 ssh2 Jun 7 22:09:13 15645 sshd[7545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.198.75 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 Bigbear3	2026-06-08 02:57:00 (8 hours ago)	Report-by-bigbear3	Brute-Force SSH
🇧🇷 Penguinehis	2026-06-08 02:55:16 (8 hours ago)	SSH honeypot detected unauthorized SSH activity against a decoy SSH service.	Brute-Force SSH
🇩🇪 Phenix Info	2026-06-08 02:52:09 (8 hours ago)	SmallGuard.fr/Prestashop SSH Login failded	Brute-Force
🇺🇸 bigscoots.com	2026-06-08 02:39:15 (9 hours ago)	217.216.59.252 (DE/Germany/vmi3296438.contaboserver.net), 5 distributed sshd attacks on account [roo ... show more 217.216.59.252 (DE/Germany/vmi3296438.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 7 21:35:49 13374 sshd[21612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.238.226.170 user=root Jun 7 21:35:51 13374 sshd[21612]: Failed password for root from 178.238.226.170 port 35488 ssh2 Jun 7 21:29:09 13374 sshd[18593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.216.59.252 user=root Jun 7 21:29:11 13374 sshd[18593]: Failed password for root from 217.216.59.252 port 60266 ssh2 Jun 7 21:38:54 13374 sshd[23056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.162.143.196 user=root IP Addresses Blocked: 178.238.226.170 (DE/Germany/vmi3342624.contaboserver.net) show less	Brute-Force SSH
🇺🇦 oh.mg	2026-06-08 02:08:16 (9 hours ago)	(sshd) Failed SSH login from 217.216.59.252 (IN/India/vmi3296438.contaboserver.net): 1 in the last 3 ... show more (sshd) Failed SSH login from 217.216.59.252 (IN/India/vmi3296438.contaboserver.net): 1 in the last 3600 secs; Ports: *; Direction: 0; Trigger: LF_TRIGGER; Logs: 2026-06-08T02:08:12.930575+00:00 francesko sshd[2880238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.216.59.252 user=root show less	Brute-Force SSH
🇺🇸 cwytech	2026-06-08 02:06:53 (9 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-ssh-crit.	Brute-Force SSH
🇩🇪 30p87	2026-06-08 01:51:30 (9 hours ago)	2026-06-08T03:51:29.485028+02:00 30p87-server sshd-session[1149339]: User root from 217.216.59.252 n ... show more 2026-06-08T03:51:29.485028+02:00 30p87-server sshd-session[1149339]: User root from 217.216.59.252 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇩🇪 McClay	2026-06-08 01:43:20 (10 hours ago)	Illegal access attempt:2026-06-08T03:43:19.399412+02:00 xn--kster-juait sshd[3142995]: Failed passwo ... show more Illegal access attempt:2026-06-08T03:43:19.399412+02:00 xn--kster-juait sshd[3142995]: Failed password for root from 217.216.59.252 port 48062 ssh2 2026-06-08T03:43:19.641569+02:00 xn--kster-juait sshd[3142995]: error: maximum authentication attempts exceeded for root from 217.216.59.252 port 48062 ssh2 [preauth] ... show less	Brute-Force SSH
🇺🇸 LevorLabs	2026-06-08 01:29:39 (10 hours ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-06-08T01:29:39Z	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-08 01:29:29 (10 hours ago)	217.216.59.252 (DE/Germany/vmi3296438.contaboserver.net), 5 distributed sshd attacks on account [roo ... show more 217.216.59.252 (DE/Germany/vmi3296438.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 7 20:29:08 15066 sshd[25774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.216.59.252 user=root Jun 7 20:29:10 15066 sshd[25774]: Failed password for root from 217.216.59.252 port 37878 ssh2 Jun 7 20:19:37 15066 sshd[20563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.79.4 user=root Jun 7 20:19:40 15066 sshd[20563]: Failed password for root from 178.104.79.4 port 35462 ssh2 Jun 7 20:09:00 15066 sshd[14928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.20.49.38 user=root IP Addresses Blocked: show less	Brute-Force SSH

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇱 217.73.139.208

🇷🇺 217.25.238.134

🇦🇷 186.139.37.212

🇨🇳 183.250.7.119

🇺🇸 145.223.75.23

🇨🇳 121.229.107.184

🇺🇸 104.155.131.104

🇮🇳 49.207.40.162

🇳🇱 45.148.10.151

🇺🇸 8.229.67.131

🇧🇷 200.148.207.154

🇺🇸 165.154.235.9

🇨🇳 106.74.128.226

🇩🇿 105.96.13.6

🇺🇸 104.243.35.120

🇮🇳 103.178.134.84

🇷🇴 80.94.95.116

🇳🇱 45.148.10.240

🇵🇱 194.180.49.71

🇺🇸 136.118.135.71