AbuseIPDB » 38.242.201.117

38.242.201.117 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 38%: ?

38%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vmi820711.contaboserver.net
Domain Name	contabo.com
Country	Germany
City	Dusseldorf, Nordrhein-Westfalen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 38.242.201.117

Whois 38.242.201.117

IP Abuse Reports for 38.242.201.117:

This IP address has been reported a total of 70 times from 34 distinct sources. 38.242.201.117 was first reported on August 10th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
COMAITE	2024-08-11 12:30:37 (1 month ago)	Multiple web server 400 error codes from same source ip 38.242.201.117.	Web App Attack
bigscoots.com	2024-08-11 11:18:09 (1 month ago)	(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last ... show more(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 11 06:17:55 17812 sshd[14377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root Aug 11 06:17:58 17812 sshd[14377]: Failed password for root from 38.242.201.117 port 56476 ssh2 Aug 11 06:18:00 17812 sshd[14379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root Aug 11 06:18:02 17812 sshd[14379]: Failed password for root from 38.242.201.117 port 59504 ssh2 Aug 11 06:18:04 17812 sshd[14434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root show less	Brute-Force SSH
bigscoots.com	2024-08-11 08:17:26 (1 month ago)	(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last ... show more(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 11 03:16:55 14976 sshd[6673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root Aug 11 03:16:57 14976 sshd[6673]: Failed password for root from 38.242.201.117 port 43840 ssh2 Aug 11 03:17:03 14976 sshd[6686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root Aug 11 03:17:06 14976 sshd[6686]: Failed password for root from 38.242.201.117 port 45878 ssh2 Aug 11 03:17:11 14976 sshd[6754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root show less	Brute-Force SSH
gu-alvareza	2024-08-11 07:05:14 (1 month ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking Web App Attack
MPL	2024-08-11 06:55:16 (1 month ago)	tcp/443	Port Scan
MPL	2024-08-11 06:55:16 (1 month ago)	tcp/443	Port Scan
diego	2024-08-11 04:26:47 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
BlueWire Hosting	2024-08-11 04:10:05 (1 month ago)	Detected as a bad bot	Bad Web Bot
MPL	2024-08-11 02:53:26 (1 month ago)	tcp/23	Port Scan
bigscoots.com	2024-08-11 02:30:57 (1 month ago)	(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last ... show more(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 10 21:30:46 13239 sshd[31834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root Aug 10 21:30:48 13239 sshd[31834]: Failed password for root from 38.242.201.117 port 39740 ssh2 Aug 10 21:30:50 13239 sshd[31837]: Invalid user sinus from 38.242.201.117 port 42784 Aug 10 21:30:52 13239 sshd[31837]: Failed password for invalid user sinus from 38.242.201.117 port 42784 ssh2 Aug 10 21:30:53 13239 sshd[31839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root show less	Brute-Force SSH
MPL	2024-08-11 02:30:15 (1 month ago)	tcp ports: 2222,23 (3 or more attempts)	Port Scan
diego	2024-08-11 01:09:50 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
bigscoots.com	2024-08-11 00:15:14 (1 month ago)	(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last ... show more(sshd) Failed SSH login from 38.242.201.117 (DE/Germany/vmi820711.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 11 00:15:02 23131 sshd[18459]: Failed password for root from 38.242.201.117 port 50680 ssh2 Aug 11 00:15:04 23131 sshd[18528]: Invalid user test from 38.242.201.117 port 53988 Aug 11 00:15:06 23131 sshd[18528]: Failed password for invalid user test from 38.242.201.117 port 53988 ssh2 Aug 11 00:15:07 23131 sshd[18558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.201.117 user=root Aug 11 00:15:09 23131 sshd[18558]: Failed password for root from 38.242.201.117 port 57168 ssh2 show less	Brute-Force SSH
Savvii	2024-08-10 23:18:10 (1 month ago)	20 attempts against mh-ssh on pluto	Brute-Force SSH
Savvii	2024-08-10 22:53:24 (1 month ago)	15 attempts against mh-modsecurity-ban on chico	Brute-Force Web App Attack