173.249.6.103
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- vmi3715031.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇫🇷 France
- City
- Lauterbourg, Grand Est
Abuse Reports
Total reports
72 from
56 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 Site.eu |
Scanning for secret files (.env, .git, credentials, config backups)
|
Bad Web Bot Web App Attack | |
| 🇵🇱 Budyn |
|
Hacking Web App Attack | |
| 🇺🇸 solantex |
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
|
Web App Attack | |
| Anonymous |
Automated report by fail2ban (apache-secrets-scan jail): 1 matching events
|
Web App Attack Hacking | |
| 🇫🇷 a.mohamed.go |
173.249.6.103 - - [10/Nov/2026:23:57:59 +0000] "GET /.env HTTP/1.1" 404 187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
...
|
Hacking Web App Attack | |
| Anonymous |
(mod_security) mod_security triggered on hostname [redacted])
|
SQL Injection | |
| 🇫🇷 Feelautom |
[FeelAutom Auto-Ban] PathScan: /.env.save (Score: 202)
|
Port Scan | |
| 🇫🇷 ELYAZ |
(credential-hunter) Failed credential-hunter trigger with match [redacted] from 173.249.6.103 (FR/France/vmi3715031.contaboserver.net): (CF_ENABLE)
|
Hacking | |
| Anonymous |
Automated report by fail2ban (apache-secrets-scan jail): 1 matching events
|
Web App Attack Hacking | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇸🇬 lancernz |
Auto-detected: 48 hits on classicmotorracingclub.nz within 100 log lines. Blocked by Cowork server monitoring.
|
Web App Attack | |
| 🇸🇬 lancernz |
Auto-detected: 57 hits on classicmotorracingclub.nz within 100 log lines. Blocked by Cowork server monitoring.
|
Web App Attack | |
| 🇸🇬 lancernz |
Auto-detected: 68 hits on classicmotorracingclub.nz within 100 log lines. Blocked by Cowork server monitoring.
|
Web App Attack | |
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/http-sensitive-files - events: 5
|
Web App Attack Hacking | |
| 🇺🇸 solantex |
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown