JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.212.205.42

173.212.205.42 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 71%: ?

71%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi232349.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.212.205.42

Whois 173.212.205.42

IP Abuse Reports for 173.212.205.42:

This IP address has been reported a total of 25 times from 14 distinct sources. 173.212.205.42 was first reported on December 8th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-20 03:52:04 (2 days ago)	Reported from Nginx log analysis 6. Log: 173.212.205.42 - - [20/Jul/2026:xx:xx:xx 0200] "POST /?res ... show more Reported from Nginx log analysis 6. Log: 173.212.205.42 - - [20/Jul/2026:xx:xx:xx 0200] "POST /?rest_route=/batch/v1 HTTP/1.1" xxx xxx "-" "WP-BatchConfusion-SecurityCheck/1.0 (non-destructive responsible-disclosure probe; no SQL executed) (contact: responsible-disclosure)" "-" "FR France Lauterbourg" "AS51167" "Contabo GmbH" show less	Port Scan Brute-Force SSH
🇳🇱 BlueWire Hosting	2026-07-19 23:37:13 (2 days ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-19 23:35:40 (2 days ago)	(mod_security) mod_security (id:210831) triggered by 173.212.205.42 (vmi232349.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210831) triggered by 173.212.205.42 (vmi232349.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 19:35:36.022687 2026] [security2:error] [pid 25308:tid 25335] [client 173.212.205.42:44100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|mail.flutelesson.nl\|F\|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "mail.flutelesson.nl"] [uri "/"] [unique_id "al1fSAi1GKH4loaP_gdq_gAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-07-19 23:26:59 (2 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-07-19 13:42:15 (3 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:POST, UA:WP-BatchConfusion-Security ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:POST, UA:WP-BatchConfusion-SecurityCheck/1.0 (non-destructive responsible-disclosure probe; no SQL executed) show less	Port Scan Web App Attack Bad Web Bot
🇧🇪 taivas.nl	2026-07-19 04:32:28 (3 days ago)	Many_bad_calls	Web App Attack
🇸🇬 itachi1706	2026-07-18 22:26:27 (4 days ago)	173.212.205.42 - - [19/Jul/2026:06:26:25 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 405 1339 "-" ... show more 173.212.205.42 - - [19/Jul/2026:06:26:25 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 405 1339 "-" "WP-BatchConfusion-SecurityCheck/1.0 (non-destructive responsible-disclosure probe; no SQL executed) (contact: responsible-disclosure)" 173.212.205.42 - - [19/Jul/2026:06:26:26 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 405 1339 "-" "WP-BatchConfusion-SecurityCheck/1.0 (non-destructive responsible-disclosure probe; no SQL executed) (contact: responsible-disclosure)" ... show less	Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2026-07-18 22:02:29 (4 days ago)	2026-07-19 @ 00:02:28 (CET) ~ Blocked for trying to access: /wp-json/batch/v1	Web App Attack
🇳🇱 ConsulHosting	2026-07-18 13:10:05 (4 days ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇳🇱 globcom	2026-07-18 12:49:32 (4 days ago)	General hacking/exploits/scanning	Web App Attack
🇧🇪 taivas.nl	2026-07-18 11:32:10 (4 days ago)	Bad_requests	Bad Web Bot
🇳🇱 soverin	2026-07-18 09:20:54 (4 days ago)	Network scan on port 443	Email Spam
🇩🇪 EGP Abuse Dept	2026-07-18 00:13:37 (4 days ago)	Scanning for web/db/file exploits on opleveren.rijnhartwonen.nl	SQL Injection Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2024-03-07 14:26:52 (2 years ago)	SQL injection attack	SQL Injection
🇳🇱 EGP Abuse Dept	2023-12-22 09:50:58 (2 years ago)	SQL injection attack	SQL Injection

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.226.77.30

🇨🇱 172.217.39.152

🇺🇸 141.161.163.86

🇺🇸 2a04:4e40:6a00:0:dc8:3b63:a814:35cf

🇬🇧 217.154.45.93

🇳🇱 206.189.108.184

🇰🇪 197.248.207.138

🇹🇭 182.53.164.247

🇺🇸 172.59.104.175

🇩🇪 167.233.17.207

🇺🇸 162.217.100.201

🇳🇱 159.223.236.34

🇳🇱 95.85.226.199

🇫🇷 91.231.89.213

🇲🇦 81.192.46.36

🇮🇩 49.0.24.107

🇨🇳 14.18.122.240

🇧🇷 205.210.31.249

🇪🇹 196.189.51.64

🇺🇸 162.216.150.203