AbuseIPDB » 38.242.201.117

38.242.201.117 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 38%: ?

38%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vmi820711.contaboserver.net
Domain Name	contabo.com
Country	Germany
City	Dusseldorf, Nordrhein-Westfalen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 38.242.201.117

Whois 38.242.201.117

IP Abuse Reports for 38.242.201.117:

This IP address has been reported a total of 70 times from 34 distinct sources. 38.242.201.117 was first reported on August 10th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MPL	2024-08-12 12:25:50 (1 month ago)	tcp/443 (2 or more attempts)	Port Scan
dzpk	2024-08-12 12:05:44 (1 month ago)	38.242.201.117 - - [12/Aug/2024:05:48:32 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more38.242.201.117 - - [12/Aug/2024:05:48:32 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" show less	Hacking Web App Attack
security.rdmc.fr	2024-08-12 05:30:14 (1 month ago)	Port Scan Attack proto:TCP src:17451 dst:23	Port Scan
dzpk	2024-08-12 05:06:25 (1 month ago)	38.242.201.117 - - [12/Aug/2024:05:48:32 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65 ... show more38.242.201.117 - - [12/Aug/2024:05:48:32 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 150 "-" "-" "-" show less	Hacking Web App Attack
RAP	2024-08-12 04:44:48 (1 month ago)	Probing web services for vulnerabilities	Port Scan
mxpgmbh	2024-08-12 04:31:08 (1 month ago)	2024-08-12T06:30:44.123943+02:00 hz-vm-web-027 sshd[214611]: Failed password for invalid user ftp fr ... show more2024-08-12T06:30:44.123943+02:00 hz-vm-web-027 sshd[214611]: Failed password for invalid user ftp from 38.242.201.117 port 60928 ssh2 2024-08-12T06:30:55.938536+02:00 hz-vm-web-027 sshd[214615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=proxy 2024-08-12T06:30:57.718897+02:00 hz-vm-web-027 sshd[214615]: Failed password for proxy from 38.242.201.117 port 39836 ssh2 2024-08-12T06:31:06.025831+02:00 hz-vm-web-027 sshd[214702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root 2024-08-12T06:31:07.983819+02:00 hz-vm-web-027 sshd[214702]: Failed password for root from 38.242.201.117 port 46016 ssh2 show less	Brute-Force SSH
diego	2024-08-12 04:25:13 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 6 times in the last 10800 seconds	DDoS Attack
dzpk	2024-08-12 03:48:35 (1 month ago)	[12/Aug/2024:05:48:34 +0200] 172343451414.252906 38.242.201.117 59326 HOST 443	Web App Attack
polido	2024-08-12 03:39:30 (1 month ago)	Unauthorized connection attempt to port 80 from 38.242.201.117	Port Scan
someone	2024-08-12 02:31:26 (1 month ago)	:443 38.242.201.117 - - [12/Aug/2024:04:31:25 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/. ... show more:443 38.242.201.117 - - [12/Aug/2024:04:31:25 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 4703 "-" "Custom-AsyncHttpClient" show less	Web App Attack
SameTeem	2024-08-12 02:03:18 (1 month ago)	(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last ... show more(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2024-08-12T02:02:44.820401+00:00 crumpet sshd[3157655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root 2024-08-12T02:02:46.689940+00:00 crumpet sshd[3157655]: Failed password for root from 38.242.201.117 port 49606 ssh2 2024-08-12T02:03:04.463166+00:00 crumpet sshd[3157677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root 2024-08-12T02:03:06.411477+00:00 crumpet sshd[3157677]: Failed password for root from 38.242.201.117 port 60750 ssh2 2024-08-12T02:03:16.521801+00:00 crumpet sshd[3157685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root show less	Port Scan Brute-Force
diego	2024-08-12 00:12:31 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds	DDoS Attack
mxpgmbh	2024-08-11 23:50:08 (1 month ago)	2024-08-12T01:49:45.846540+02:00 hz-vm-web-030 sshd[2971429]: Failed password for root from 38.242.2 ... show more2024-08-12T01:49:45.846540+02:00 hz-vm-web-030 sshd[2971429]: Failed password for root from 38.242.201.117 port 38126 ssh2 2024-08-12T01:49:54.925330+02:00 hz-vm-web-030 sshd[2971433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root 2024-08-12T01:49:56.649790+02:00 hz-vm-web-030 sshd[2971433]: Failed password for root from 38.242.201.117 port 45080 ssh2 2024-08-12T01:50:06.950946+02:00 hz-vm-web-030 sshd[2971636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root 2024-08-12T01:50:08.655473+02:00 hz-vm-web-030 sshd[2971636]: Failed password for root from 38.242.201.117 port 50900 ssh2 show less	Brute-Force SSH
Hirte	2024-08-11 23:20:39 (1 month ago)	C1: Web Attack GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2024-08-11 23:07:15 (1 month ago)	[Mon Aug 12 00:54:27.471228 2024] [php7:error] [pid 11262] [client 38.242.201.117:57200] script &#03 ... show more[Mon Aug 12 00:54:27.471228 2024] [php7:error] [pid 11262] [client 38.242.201.117:57200] script '/var/www/index.php' not found or unable to stat [Mon Aug 12 00:54:28.085364 2024] [php7:error] [pid 11262] [client 38.242.201.117:57200] script '/var/www/index.php' not found or unable to stat ... show less	Web App Attack