JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

217.217.249.13

Neutral Activity

Abuse confidence score ?

0% Low Risk

70 reports

47 reporters · latest 7 months ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141995
Hostname(s)	vmi2853281.contaboserver.net
Domain Name	contabo.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

217.217.249.13 has been reported 70 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 217.217.249.13

This IP address has been reported a total of 70 times from 47 distinct sources. 217.217.249.13 was first reported on January 26th 2026, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-02-03 08:11:22 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇦 llighthunter	2026-01-30 07:44:05 (7 months ago)	Jan 26 03:47:20 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<sa ... show more Jan 26 03:47:20 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=217.217.249.13, lip=192.168.1.80, session=<40oLsEBJnIjZ2fkN> Jan 26 04:00:24 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=217.217.249.13, lip=192.168.1.80, session=<+lLA3kBJAtPZ2fkN> Jan 26 04:13:58 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=217.217.249.13, lip=192.168.1.80, session=<KvNGD0FJHtDZ2fkN> show less	Port Scan Hacking Spoofing
🇺🇦 llighthunter	2026-01-28 18:47:16 (7 months ago)	Jan 26 03:47:20 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<sa ... show more Jan 26 03:47:20 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=217.217.249.13, lip=192.168.1.80, session=<40oLsEBJnIjZ2fkN> Jan 26 04:00:24 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=217.217.249.13, lip=192.168.1.80, session=<+lLA3kBJAtPZ2fkN> Jan 26 04:13:58 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=217.217.249.13, lip=192.168.1.80, session=<KvNGD0FJHtDZ2fkN> show less	Port Scan Hacking Spoofing
🇨🇳 ThreatBook.io	2026-01-28 02:08:32 (7 months ago)	ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/217.217.249.13	SSH
🇬🇧 openstrike.co.uk	2026-01-27 20:10:12 (7 months ago)	70 packets to port 110	Brute-Force
🇺🇦 llighthunter	2026-01-27 15:46:03 (7 months ago)	Jan 26 03:47:20 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<sa ... show more Jan 26 03:47:20 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=217.217.249.13, lip=192.168.1.80, session=<40oLsEBJnIjZ2fkN> Jan 26 04:00:24 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=217.217.249.13, lip=192.168.1.80, session=<+lLA3kBJAtPZ2fkN> Jan 26 04:13:58 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=217.217.249.13, lip=192.168.1.80, session=<KvNGD0FJHtDZ2fkN> show less	Port Scan Hacking Spoofing
🇩🇪 Interceptor_HQ	2026-01-26 22:26:55 (7 months ago)	Interceptor Intrusion Detection: pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 ... show more Interceptor Intrusion Detection: pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.217.249.13 user=root - Failed password for root from 217.217.249.13 port 48914 ssh2 show less	Brute-Force SSH
Anonymous	2026-01-26 22:10:34 (7 months ago)	2026-01-26T23:25:00.757831+02:00 mailserver sshd-session[3632499]: Connection closed by authenticati ... show more 2026-01-26T23:25:00.757831+02:00 mailserver sshd-session[3632499]: Connection closed by authenticating user root 217.217.249.13 port 45420 [preauth] 2026-01-27T00:10:28.415504+02:00 mailserver sshd-session[3639982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.217.249.13 user=root 2026-01-27T00:10:30.705683+02:00 mailserver sshd-session[3639982]: Failed password for root from 217.217.249.13 port 60540 ssh2 2026-01-27T00:10:32.510633+02:00 mailserver sshd-session[3639982]: Connection closed by authenticating user root 217.217.249.13 port 60540 [preauth] ... show less	Brute-Force Exploited Host SSH
🇹🇷 Threat.live	2026-01-26 22:10:25 (7 months ago)	Brute Force, tcp/22	Brute-Force
🇺🇸 bigscoots.com	2026-01-26 21:55:45 (7 months ago)	217.217.249.13 (IN/India/vmi2853281.contaboserver.net), 5 distributed sshd attacks on account [root] ... show more 217.217.249.13 (IN/India/vmi2853281.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 26 15:53:45 15630 sshd[17727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.217.249.13 user=root Jan 26 15:53:47 15630 sshd[17727]: Failed password for root from 217.217.249.13 port 48122 ssh2 Jan 26 15:53:52 15630 sshd[17729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.212.233.188 user=root Jan 26 15:53:54 15630 sshd[17729]: Failed password for root from 173.212.233.188 port 51440 ssh2 Jan 26 15:55:41 15630 sshd[18093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.119.131.0 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇭🇺 jani.hu	2026-01-26 21:55:28 (7 months ago)	Hit on SSH honeypot at 2026-01-26 21:55:28 from 217.217.249.13 as user root with password P@SSW0RD@2 ... show more Hit on SSH honeypot at 2026-01-26 21:55:28 from 217.217.249.13 as user root with password P@SSW0RD@2023 show less	Brute-Force SSH
🇩🇪 Interceptor_HQ	2026-01-26 21:41:02 (7 months ago)	Interceptor Intrusion Detection: pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 ... show more Interceptor Intrusion Detection: pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.217.249.13 - Invalid user admin from 217.217.249.13 port 34696 - pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.217.249.13 - Failed password for invalid user admin from 217.217.249.13 port 34696 ssh2 - Failed password for invalid user admin from 217.217.249.13 port 34696 ssh2 - Invalid user admin from 217.217.249.13 port 34696 - pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.217.249.13 user=root - Failed password for root from 217.217.249.13 port 60170 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-26 21:38:51 (7 months ago)	217.217.249.13 (IN/India/vmi2853281.contaboserver.net), 5 distributed sshd attacks on account [root] ... show more 217.217.249.13 (IN/India/vmi2853281.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 26 15:38:37 13463 sshd[9601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.132.133.39 user=root Jan 26 15:38:38 13463 sshd[9601]: Failed password for root from 185.132.133.39 port 54134 ssh2 Jan 26 15:38:40 13463 sshd[9607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.217.249.13 user=root Jan 26 15:38:20 13463 sshd[9502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.40.153 user=root Jan 26 15:38:22 13463 sshd[9502]: Failed password for root from 64.225.40.153 port 41304 ssh2 IP Addresses Blocked: 185.132.133.39 (NL/The Netherlands/97498048.securefastserver.com) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-26 21:23:10 (7 months ago)	217.217.249.13 (IN/India/vmi2853281.contaboserver.net), 5 distributed sshd attacks on account [root] ... show more 217.217.249.13 (IN/India/vmi2853281.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 26 15:22:54 16625 sshd[28435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.217.249.13 user=root Jan 26 15:22:56 16625 sshd[28435]: Failed password for root from 217.217.249.13 port 35034 ssh2 Jan 26 15:23:04 16625 sshd[28492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.227.27.56 user=root Jan 26 15:23:06 16625 sshd[28494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.74.81.91 user=root Jan 26 15:23:06 16625 sshd[28492]: Failed password for root from 212.227.27.56 port 38572 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-01-26 20:11:14 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.64.211.203

🇺🇸 172.66.44.71

🇩🇪 162.158.86.128

🇧🇪 104.199.96.180

🇩🇪 64.89.163.164

🇯🇵 34.104.239.255

🇺🇸 34.60.123.254

🇻🇳 14.163.41.215

🇺🇿 213.230.87.78

🇺🇸 198.58.122.145

🇺🇸 187.77.202.114

🇦🇷 181.116.60.17

🇧🇷 177.9.92.26

🇵🇰 121.52.154.75

🇿🇦 105.184.113.177

🇺🇸 103.4.251.13

🇳🇱 77.239.124.214

🇳🇱 77.239.124.178

🇧🇪 35.205.254.119

🇭🇰 34.96.211.80