217.216.74.166

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
163 reports
98 reporters · latest 5 months ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS141995
Hostname(s)
vmi3541801.contaboserver.net
Domain Name
contabo.com
Country
🇸🇬 Singapore
City
Singapore
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

217.216.74.166 has been reported 163 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
163 from 98 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 faridshykhaliev
Brute-Force SSH
Anonymous
IP banned by Fail2Ban
Brute-Force SSH
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇪🇸 Gem
Unauthorized web scan.
Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
Anonymous
IP banned by Fail2Ban
Brute-Force SSH
🇫🇷 Pölkky
CVE: Suspicious Scanning
Web App Attack
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/217.216.74.166
SSH
🇳🇱 JCB
217.216.74.166 - - [11/May/2026:21:16:39 0300] "POST /cgi-bin/../../../../../../../../../../bin/sh HTTP/1.1" 400 226 "-" "libredtail-http" ...
Web App Attack Hacking
🇧🇴 rvalenzuela
Attack ID: 1002017316 Module: "Generic Attacks" Check Type: "PHP Injection" Desc: "This signature prevents attackers from executing arbitrary code in the context of the affected application(CVE-2019-9082)."
Web App Attack Hacking
🇧🇴 ahinojosa
"Attack ID: 1002017316 Module: "Generic Attacks" Check Type: "PHP Injection" Desc: "This signature prevents attackers from executing arbitrary code in the context of the affected application(CVE-2019-9082).""
Bad Web Bot Web App Attack Hacking
🇬🇧 Shadymint
url probing
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 209.85.208.181
🇺🇸 172.237.136.213
🇵🇱 172.69.155.25
🇺🇸 166.62.102.109
🇵🇰 163.61.227.173
🇲🇾 161.142.139.115
🇺🇸 98.174.37.195
🇷🇴 80.94.92.55
🇫🇮 209.85.208.176
🇦🇷 200.189.31.127
🇺🇸 199.165.159.104
🇧🇬 79.124.40.114
🇳🇱 77.239.124.75
🇷🇺 62.233.39.238
🇩🇪 34.159.235.96
🇦🇺 14.203.12.140
feedback