167.86.80.37
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- vmi3394524.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇩🇪 Germany
- City
- Karlsruhe, Baden-Wurttemberg
Abuse Reports
Total reports
327 from
198 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 openstrike.co.uk |
1 attack on shell probes:
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
|
Hacking | |
| 🇫🇷 ingroscart.it |
(mod_security) mod_security triggered on hostname [redacted])
|
SQL Injection | |
| 🇵🇱 itsvic.dev |
|
Brute-Force Web App Attack | |
| Anonymous |
|
Brute-Force SSH | |
| 🇬🇧 f3sc |
167.86.80.37 - - [02/Jul/2026:05:19:49 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 739 "-" "libredtail-http"
|
Hacking Web App Attack | |
| 🇭🇰 鹏鹏 |
monitor: on ser162528253480 | port: 2222 | ttl: 47 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
SIEM ALERT AUTO REPORT
|
Email Spam | |
| 🇺🇸 MPL |
tcp/443 (4 or more attempts)
|
Port Scan | |
| 🇦🇹 Filli Group |
|
Brute-Force SSH | |
| 🇩🇪 london2038.com |
Malformed or malicious web request
167.86.80.37 - - [02/Jul/2026:04:08:00 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 157 "-" "-"
|
Hacking Web App Attack | |
| 🇺🇸 bigscoots.com |
|
Brute-Force SSH | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇫🇷 solution.it |
[Thu Jul 02 02:57:46.384244 2026] [php7:error] [pid 264312:tid 264312] [client 167.86.80.37:51160] script '/var/www/html/index.php' not found or unable to stat
|
Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: / | seen at 2026-07-02 00:13:45.571 |
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/23 (4 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown