167.86.74.252
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- vmi3659966.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇩🇪 Germany
- City
- Worth am Rhein, Rheinland-Pfalz
Abuse Reports
Total reports
18 from
14 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-10-23 08:11, Last: 2026-10-30 10:52 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-02 11:28, Last: 2026-10-20 19:36 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-09-24 10:15, Last: 2026-09-29 19:18 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-09-06 08:17, Last: 2026-09-22 20:16 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: port scanning. First: 2026-08-28 08:57, Last: 2026-09-04 06:51 UTC. Triggers: non-public-port,firewall-tcp,unknown.
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 4430 with data transfer.
Data preview: GET / HTTP/1.1
Accept-Encoding: identity
Host: 67.215.244.172:4430
User-Agent: Mozilla/5.0
Accep
|
Port Scan Hacking | |
| 🇵🇱 sefinek.net |
Honeypot hit: Empty payload (likely service probe); 8040 [2] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇩🇪 dispaisyenterprises |
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8041 [3] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇬🇧 essinghigh |
IPS Detection: 167.86.74.252 -> DPT: 8041
|
Port Scan | |
| Anonymous |
Drop from IP address 167.86.74.252 to tcp-port 443
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 443)
Source port: 57873
TTL: 239
Packet length: 40
TOS: 0x08
This report (for 167.86.74.252) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| 🇳🇵 radheykrishna.com.np |
Aug 29 11:06:59 kernel: [1697081.365342] [UFW BLOCK] IN=ens160 OUT= SRC=167.86.74.252 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=27638 PROTO=TCP SPT=57873 DPT=8041 WINDOW=1024 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇨🇦 DRI |
Unsolicited TCP traffic on Honeypot, srcport=57873 dstport=443
|
Port Scan Hacking | |
| 🇺🇸 kelliwic.net |
Port scan detected (F2B)
|
Port Scan | |
| 🇬🇧 Nov |
Unauthorized access attempt (tcp/8041)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown