217.216.72.94
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS141995
- Hostname(s)
- vmi3334964.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇸🇬 Singapore
- City
- Singapore
No reports in the last 60 days
217.216.72.94 has been reported 55 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
55 from
39 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 faridshykhaliev |
|
Brute-Force SSH | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| Anonymous |
vars[0]=md5&vars[1][]=Hello
|
Fraud Orders Hacking Brute-Force Web App Attack | |
| 🇫🇷 geot |
|
Port Scan Hacking Web App Attack | |
| Anonymous |
Port Scanner
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Brute-force attack detected on 23/TELNET
• Credential used: admin:admin
• Number of login attempts: 1
|
Hacking | |
| 🇺🇸 donarev419 |
Connection to port 2375 with data transfer.
Data preview: GET /containers/json HTTP/1.1
Host: 67.215.244.172:2375
Upgrade-Insecure-Requests: 1
Accept: */*
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-04-20 06:27:51 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇬🇧 Andrew |
Blocked by UFW (TCP on port 2222).
Source port: 64326
TTL: 53
Packet length: 40
TOS: 0x00
This report (for 217.216.72.94) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇧🇷 SOCBR |
IPS: Apache HTTP Server Directory Traversal.
|
Web App Attack | |
| 🇩🇪 langenkamp-media |
Fail2Ban: Banned from jail nginx-badbots on 3dausdu.de
|
Bad Web Bot | |
| 🇺🇸 MPL |
tcp/2375 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 gamabe |
Detected crowdsecurity/thinkphp-cve-2018-20062 attack pattern. Reported by CrowdSec IDS.
|
Hacking | |
| 🇩🇪 strxmpp |
217.216.72.94 - - [20/Apr/2026:07:42:42 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 527 "-" "libredtail-http"
...
|
Bad Web Bot | |
| 🇧🇾 shopmax |
This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773
|
Web App Attack Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown