AbuseIPDB » 38.242.201.117

38.242.201.117 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 39%: ?

39%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vmi820711.contaboserver.net
Domain Name	contabo.com
Country	Germany
City	Dusseldorf, Nordrhein-Westfalen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 38.242.201.117

Whois 38.242.201.117

IP Abuse Reports for 38.242.201.117:

This IP address has been reported a total of 70 times from 34 distinct sources. 38.242.201.117 was first reported on August 10th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
urnilxfgbez	2024-08-10 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
server.melroy.org	2024-08-10 22:35:58 (1 month ago)	38.242.201.117 - - [11/Aug/2024:00:35:52 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/. ... show more38.242.201.117 - - [11/Aug/2024:00:35:52 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "_" 0.073 38.242.201.117 - - [11/Aug/2024:00:35:52 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 150 "-" "-" "_" 0.073 38.242.201.117 - - [11/Aug/2024:00:35:52 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "Custom-AsyncHttpClient" "77.61.56.117" 0.000 38.242.201.117 - - [11/Aug/2024:00:35:53 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "Custom-AsyncHttpClient" "77.61.56.117" 0.000 38.242.201.117 - - [11/Aug/2024:00:35:53 +0200] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "Custom-AsyncHttpClient" "77.61.56.117" 0.000 38.242.201.117 - - [11/Aug/2024:00:35:53 +0200] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "Cust ... show less	Web App Attack
MPL	2024-08-10 21:05:51 (1 month ago)	tcp/2222 (2 or more attempts)	Port Scan
Savvii	2024-08-10 20:56:19 (1 month ago)	20 attempts against mh-ssh on plum	Brute-Force SSH
Anonymous	2024-08-10 20:50:32 (1 month ago)	38.242.201.117 - - [11/Aug/2024:04:50:31 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more38.242.201.117 - - [11/Aug/2024:04:50:31 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 4534 "-" "Custom-AsyncHttpClient" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-10 20:43:13 (1 month ago)	Try to connect to Port_Scan_2222_tcp	Port Scan
RAP	2024-08-10 20:39:59 (1 month ago)	Probing web services for vulnerabilities	Port Scan
Anonymous	2024-08-10 20:30:31 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
diego	2024-08-10 20:22:22 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
Savvii	2024-08-10 20:18:54 (1 month ago)	20 attempts against mh-ssh on yeti	Brute-Force SSH