JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.212.200.52

173.212.200.52 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2006403.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.212.200.52

Whois 173.212.200.52

IP Abuse Reports for 173.212.200.52:

This IP address has been reported a total of 27 times from 26 distinct sources. 173.212.200.52 was first reported on June 13th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Cyber SOC	2026-06-16 16:13:49 (18 hours ago)	Peaksys - 2026-06-16 17:12:31 UTC+01	SQL Injection Brute-Force Web App Attack
🇦🇹 urnilxfgbez	2026-06-15 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇱 spd.co.il	2026-06-15 19:01:54 (1 day ago)	Port scan detected on multiple ports	Port Scan
🇺🇸 terraforge.fun	2026-06-15 11:41:15 (1 day ago)	Blocked by on us-2-terraforge [2222/tcp] \| SPT: 48246 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: ... show more Blocked by on us-2-terraforge [2222/tcp] \| SPT: 48246 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: terraforge.fun show less	Port Scan
🇬🇧 consul.to	2026-06-15 07:06:20 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 cloudmax	2026-06-14 18:01:32 (2 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇺🇸 mnogoweb	2026-06-14 14:19:26 (2 days ago)	(directadmin) Failed DirectAdmin phpMyAdmin login from 173.212.200.52 (DE/Germany/vmi2006403.contabo ... show more (directadmin) Failed DirectAdmin phpMyAdmin login from 173.212.200.52 (DE/Germany/vmi2006403.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DIRECTADMIN; Logs: Jun 14 08:19:24 phpmyadmin: user denied: (All (mysql-denied) from 173.212.200.52 Jun 14 08:19:24 phpmyadmin: user denied: admin (mysql-denied) from 173.212.200.52 Jun 14 08:19:24 phpmyadmin: user denied: (All (mysql-denied) from 173.212.200.52 Jun 14 08:19:24 phpmyadmin: user denied: (All (mysql-denied) from 173.212.200.52 Jun 14 08:19:24 phpmyadmin: user denied: admin (mysql-denied) from 173.212.200.52 show less	Port Scan
🇵🇱 dcnet	2026-06-14 14:00:21 (2 days ago)	FortiGate detected DOS attack from IPv4 address 173.212.200.52	DDoS Attack
🇪🇸 el-brujo	2026-06-14 13:55:41 (2 days ago)	Cloudflare WAF: Request Path: /phpmyadmin/ Request Query: Host: foro.elhacker.net userAgent: Mozill ... show more Cloudflare WAF: Request Path: /phpmyadmin/ Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Action: block Source: ratelimit ASN Description: Contabo GmbH Country: FR Method: GET Timestamp: 2026-06-14T13:55:41Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2026-06-14 08:21:04 (3 days ago)	"GET /phpmyadmin/ HTTP/1.1"	Hacking Web App Attack
🇩🇪 tinect	2026-06-14 07:50:23 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇪🇸 robotstxt	2026-06-14 07:13:40 (3 days ago)	173.212.200.52 - - [14/Jun/2026:07:12:40 +0000] "GET /pma/ HTTP/1.1" 404 149756 "-" "Mozilla/5.0 (Ma ... show more 173.212.200.52 - - [14/Jun/2026:07:12:40 +0000] "GET /pma/ HTTP/1.1" 404 149756 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" "-" 173.212.200.52 - - [14/Jun/2026:07:12:40 +0000] "GET /phpMyAdmin/ HTTP/1.1" 404 149756 "http://economipedia.com/phpMyAdmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" "-" 173.212.200.52 - - [14/Jun/2026:07:12:40 +0000] "GET /phpmyadmin/ HTTP/1.1" 404 149777 "http://economipedia.com/phpmyadmin/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "-" 173.212.200.52 - - [14/Jun/2026:07:12:40 +0000] "GET /pma/ HTTP/1.1" 404 149784 "http://economipedia.com/pma/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" "-" 173.212.200.52 - - [14/Jun/2026:07:12:39 +0000] "GET /phpmyadmin/ HTTP/1.1 ... show less	Bad Web Bot
🇩🇪 bazter.pro	2026-06-14 06:53:41 (3 days ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
Anonymous	2026-06-14 06:17:52 (3 days ago)	(directadmin) Failed phpMyAdmin2 login from 173.212.200.52 (FR/France/vmi2006403.contaboserver.net): ... show more (directadmin) Failed phpMyAdmin2 login from 173.212.200.52 (FR/France/vmi2006403.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DIRECTADMIN show less	Brute-Force
🇺🇸 Gabriel Camargo	2026-06-14 05:26:59 (3 days ago)	173.212.200.52 - - [14/Jun/2026:00:26:58 -0500] "GET /phpMyAdmin/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 ... show more 173.212.200.52 - - [14/Jun/2026:00:26:58 -0500] "GET /phpMyAdmin/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 173.212.200.52 - - [14/Jun/2026:00:26:58 -0500] "GET /pma/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 173.212.200.52 - - [14/Jun/2026:00:26:58 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" ... show less	Brute-Force SSH

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 212.56.52.28

🇬🇧 193.163.125.151

🇳🇱 190.2.146.231

🇰🇼 188.70.18.174

🇺🇾 179.27.97.4

🇨🇳 171.213.190.26

🇬🇧 165.154.174.108

🇺🇸 109.105.209.53

🇳🇱 91.92.40.5

🇺🇸 74.7.243.57

🇧🇷 45.229.91.34

🇱🇹 45.227.254.170

🇳🇱 45.148.10.183

🇦🇺 193.119.60.82

🇹🇷 176.91.129.64

🇳🇱 176.65.139.246

🇭🇰 172.216.248.23

🇮🇳 122.186.183.203

🇨🇳 117.14.149.65

🇺🇸 107.172.163.58