JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

38.242.217.174

Recent Activity

Abuse Confidence Score

41% Elevated

12 reports

7 reporters · latest 3 days ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS51167
Hostname(s): vmi2986331.contaboserver.net
Domain Name: contabo.com
Country: 🇫🇷 France
City: Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

12 from 7 distinct reporters

First reported

November 8th 2026

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 6 🇰🇷 Korea (the Republic of) 2 🇦🇺 Australia 1

Most common categories SSH 11 Brute-Force 11 Port Scan 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 yazzang	2026-11-10 00:06:51 UTC · (3 days ago)	SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.	Brute-Force SSH
🇰🇷 yazzang	2026-11-09 00:04:31 UTC · (4 days ago)	SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.	Brute-Force SSH
🇩🇪 NetWatch	2026-11-08 16:52:12 UTC · (4 days ago)	NetWatch sensor network: The IP 38.242.217.174 executed unauthorized SSH login attempts.	Brute-Force SSH
🇫🇷 qir23	2026-11-08 16:45:51 UTC · (4 days ago)	Fail2ban automatic report: Port 22 SSH scanner trapped in Endlessh tarpit	Port Scan Brute-Force SSH
🇹🇼 CowGL	2026-11-08 12:45:32 UTC · (4 days ago)	2026-11-08T19:11:55.327353+08:00 cowgl sshd[3724394]: Disconnected from authenticating user root 38.242.217.174 port 43206 [preauth] 2026-11-08T20:45:28.289546+08:00 cowgl sshd[3952920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more 2026-11-08T19:11:55.327353+08:00 cowgl sshd[3724394]: Disconnected from authenticating user root 38.242.217.174 port 43206 [preauth] 2026-11-08T20:45:28.289546+08:00 cowgl sshd[3952920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.217.174 user=root 2026-11-08T20:45:30.690340+08:00 cowgl sshd[3952920]: Failed password for root from 38.242.217.174 port 34526 ssh2 2026-11-08T20:45:32.038070+08:00 cowgl sshd[3952920]: Disconnected from authenticating user root 38.242.217.174 port 34526 [preauth] ... show less	Brute-Force SSH
🇺🇸 johuang92	2026-11-08 12:36:25 UTC · (4 days ago)	Cowrie SSH honeypot: session e93ce2bd1a41 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-11-08 12:10:51 UTC · (4 days ago)	Cowrie SSH honeypot: session e5c40d9e4480 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-11-08 11:49:42 UTC · (4 days ago)	Cowrie SSH honeypot: session 0d3769a6a675 \| 1 login attempt(s) \| 6 command(s): /bin/sh -c 'U=$( (command -v uname >/dev/null 2>&1 && uname -a) \|\| head -1 /proc/version 2>/dev/null ); N=$( (command -v nproc >/dev/null 2>&1 && nproc) \|\| grep -c ^proces ... show more Cowrie SSH honeypot: session 0d3769a6a675 \| 1 login attempt(s) \| 6 command(s): /bin/sh -c 'U=$( (command -v uname >/dev/null 2>&1 && uname -a) \|\| head -1 /proc/version 2>/dev/null ); N=$( (command -v nproc >/dev/null 2>&1 && nproc) \|\| grep -c ^processor /proc/cpuinfo 2>/dev/null ); printf "%s CPU:%s" "$U" "$N"' ; true; (command -v uname > /dev/null 2 >& 1; uname -a; (command -v nproc > /dev/null 2 >& 1; nproc \| classified as: brute_force, reconnaissance show less	Brute-Force SSH
🇦🇺 Klaverstyn	2026-11-08 11:31:40 UTC · (4 days ago)	Connection to SSH honeypot	Brute-Force SSH
🇺🇸 johuang92	2026-11-08 11:26:54 UTC · (4 days ago)	Cowrie SSH honeypot: session d1c030310f72 \| 1 login attempt(s) \| 6 command(s): /bin/sh -c 'U=$( (command -v uname >/dev/null 2>&1 && uname -a) \|\| head -1 /proc/version 2>/dev/null ); N=$( (command -v nproc >/dev/null 2>&1 && nproc) \|\| grep -c ^proces ... show more Cowrie SSH honeypot: session d1c030310f72 \| 1 login attempt(s) \| 6 command(s): /bin/sh -c 'U=$( (command -v uname >/dev/null 2>&1 && uname -a) \|\| head -1 /proc/version 2>/dev/null ); N=$( (command -v nproc >/dev/null 2>&1 && nproc) \|\| grep -c ^processor /proc/cpuinfo 2>/dev/null ); printf "%s CPU:%s" "$U" "$N"' ; true; (command -v uname > /dev/null 2 >& 1; uname -a; (command -v nproc > /dev/null 2 >& 1; nproc \| classified as: brute_force, reconnaissance show less	Brute-Force SSH
🇺🇸 johuang92	2026-11-08 11:08:54 UTC · (4 days ago)	Cowrie SSH honeypot: session b882a59c6279 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 Phil Schuyler	2026-11-08 00:00:00 UTC · (5 days ago)	Connection probe against a public honeypot service: 1 observed event targeting exposed network services.	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 201.147.171.170

🇧🇷 187.109.169.177

🇵🇰 139.135.41.173

🇻🇳 14.164.158.11

🇰🇷 203.253.76.236

🇧🇷 177.39.126.222

🇩🇪 161.120.219.22

🇺🇸 104.164.124.121

🇬🇧 92.27.101.99

🇫🇷 85.217.140.48

🇷🇴 80.94.95.116

🇧🇬 78.128.113.46

🇺🇸 45.38.189.204

🇲🇾 14.192.212.172

🇷🇴 2.57.121.112

🇹🇷 193.35.153.54

🇦🇷 181.209.95.76

🇺🇸 172.252.31.192

🇮🇳 152.59.190.227

🇺🇸 135.119.114.160