158.220.113.175
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- vmi3579031.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇫🇷 France
- City
- Lauterbourg, Grand Est
Abuse Reports
Total reports
103 from
72 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 e.fierstra |
excessive HTTP 404 errors
|
Bad Web Bot | |
| 🇩🇪 McClay |
|
Web App Attack | |
| Anonymous |
Port scan against our edge firewall, detected by Wazuh: Regel 31151 | abuseipdb 100% (100 Meldungen, FR)
|
Port Scan | |
| 🇫🇷 Jager |
Blocked by CrowdSec on homelab for scenario: crowdsecurity/http-probing
|
Brute-Force Port Scan Web App Attack | |
| 🇪🇸 yvoictra |
|
Brute-Force Web App Attack | |
| 🇵🇹 rncbc |
|
Brute-Force Bad Web Bot Web App Attack SSH | |
| 🇺🇦 RatCommander |
CrowdSec: crowdsecurity/http-probing
|
Port Scan Web App Attack | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tactical-rmm-lockdown-high.
|
Hacking | |
| 🇫🇷 masterguru |
Host header is a numeric IP address. Pattern match "^ (920350-131)
|
Hacking Bad Web Bot | |
| 🇬🇧 gws-hostmaster |
ModSecurity OWASP CRS (Anomaly Score: ): Host header is a numeric IP address;
|
Web App Attack | |
| 🇩🇪 Tamsy |
HTTPD - 4xx scan
|
Web App Attack | |
| 🇦🇹 vikal |
158.220.113.175 - - [15/Nov/2026:02:31:26 +0100] "GET /backups/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
...
|
Brute-Force SSH | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: web application attack. 3 events observed. Reported automatically from a honeypot sensor.
|
Web App Attack | |
| 🇫🇷 uthul |
T-Pot honeypot: 746 hits on ports [80] (automated)
|
Port Scan Web App Attack | |
| 🇫🇷 uthul |
T-Pot honeypot: 95 hits on ports [80] (automated)
|
Port Scan Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown