169.58.180.111

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
38% Elevated
17 reports
10 reporters · latest 4 days ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi3509697.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇰 Hong Kong 9 🇨🇳 China 3 🇺🇸 United States of America 3
Most common categories Port Scan 14 Hacking 5 Web App Attack 4 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 seanwall
Automated scanner/attacker probing war-room. Paths: ['/.env', '/.env.local']. UA: ['Mozilla/5.0']
Port Scan Bad Web Bot Web App Attack
🇺🇸 k3rn3l109
Sentinel honeypot: opencanary-redis hit on fake Redis service (server-02-VA) UA=opencanary
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 8 payload-bearing connection/event(s), 6624 payload byte(s) total, maximum payload 1533 byte(s). Target port(s): 11434.
Port Scan Hacking
🇯🇵 Execoop
API LLMjacking (Ollama) (observed): 7 HTTP, 3s; attempted cryptomining; Ollama: /api/chat,/api/generate
Hacking Web App Attack
🇺🇸 heyzg
LLM Inference API Requests (Ollama) (observed): 7 HTTP, 1s
Hacking Web App Attack
Anonymous
Blocked by UFW (TCP on 2242) Source port: 59742 TTL: 240 Packet length: 40 TOS: 0x14 This report (for 169.58.180.111) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇭🇰 sandra361
Port scan detected: 10 attempts across 3 ports (1234, 9997, 11434). | Evidence: REAPER_TARPIT: IN=eth0 SRC=169.58.180.111 LEN=40 TOS=0x14 PREC=0x00 TTL=52 ID=378 DF PROTO=TCP SPT=37222 DPT=11434 WINDOW=64240 RES=0x00 ACK FIN URGP=0
Port Scan
Anonymous
11434/tcp (1 or more attempts)
Port Scan
🇭🇰 sandra361
Port scan detected: 21 attempts across 7 ports (1234, 5001, 8080, 9000, 9997, 11434, 30000). | Evidence: REAPER_TARPIT: IN=eth0 SRC=169.58.180.111 LEN=40 TOS=0x14 PREC=0x00 TTL=242 ID=20535 PROTO=TCP SPT=59570 DPT=9997 WINDOW=1200 RES=0x00 RST URGP=0
Port Scan
Anonymous
8501/tcp (1 or more attempts)
Port Scan
🇭🇰 sandra361
Port scan detected: 7 attempts across 1 port (9000). | Evidence: REAPER_TARPIT: IN=eth0 SRC=169.58.180.111 LEN=121 TOS=0x14 PREC=0x00 TTL=52 ID=31879 DF PROTO=TCP SPT=47382 DPT=9000 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
Anonymous
8000/tcp (1 or more attempts)
Port Scan
🇨🇳 Peter Yu
Bad Web Bot Web App Attack
🇭🇰 www.winos.me
Shield: Layer4 Port 9 Trap
Port Scan Hacking
🇭🇰 sandra361
Port scan detected: 11 attempts across 5 ports (2375, 3000, 5432, 9000, 9090). | Evidence: REAPER_TARPIT: IN=eth0 SRC=169.58.180.111 LEN=40 TOS=0x14 PREC=0x00 TTL=243 ID=14379 PROTO=TCP SPT=58158 DPT=9000 WINDOW=1200 RES=0x00 RST URGP=0
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 220.121.206.61
🇺🇸 172.184.111.202
🇳🇱 77.91.71.11
🇹🇿 41.93.28.23
🇺🇸 35.232.221.147
🇨🇦 34.47.41.198
🇲🇽 187.190.51.96
🇵🇪 179.6.161.168
🇰🇷 175.209.156.146
🇿🇦 105.224.79.141
🇮🇳 103.93.37.178
🇩🇪 94.183.174.99
🇺🇸 66.132.195.120
🇧🇷 45.186.157.5
🇬🇧 45.142.193.164
🇩🇿 41.97.131.97
🇨🇦 186.247.35.242
🇨🇴 186.28.139.151
🇨🇳 106.13.103.130
🇮🇩 103.159.199.43
feedback