178.18.242.131
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- vmi3607730.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇫🇷 France
- City
- Lauterbourg, Grand Est
Abuse Reports
Total reports
132 from
104 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
2026-11-06T19:24:01.168499+00:00 logger sshd-session[3477]: Invalid user applmgr from 178.18.242.131 port 51230
...
|
Brute-Force SSH | |
| 🇫🇷 ACE-INFORMATIQUE.NC |
Brute-Force + SSH (honeypot) blocked by Fail2ban
|
Brute-Force SSH | |
| 🇫🇮 dv1corn |
SSH brute force: repeated failed logins (fail2ban sshd)
|
Brute-Force SSH | |
| 🇫🇷 StalKlim |
SSH brute-force attempt
|
SSH Brute-Force | |
| Anonymous |
SSH brute force attempt. User: amits, Pass: [REDACTED]
|
Brute-Force SSH | |
| Anonymous |
SSH brute force attempt. User: root, Pass: [REDACTED]
|
Brute-Force SSH | |
| 🇬🇷 ggb_st |
|
Brute-Force SSH | |
| 🇬🇧 CRSSkynet |
fail2ban sshd
|
Brute-Force SSH | |
| 🇺🇸 sh97 |
US01-CB-WA: SSH Brute Force from 178.18.242.131 at 2026-11-06 09:12:26 IST
|
Brute-Force SSH | |
| 🇩🇪 updown.io |
|
Brute-Force SSH | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-ssh-high.
|
Brute-Force SSH | |
| 🇺🇸 m2jest1c |
2026-11-05T22:22:54.113868 rhel-20gb-ash-1 sshd[2941986]: Disconnected from authenticating user root 178.18.242.131 port 52362 [preauth]
...
|
Brute-Force SSH | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-ssh-crit.
|
Brute-Force SSH | |
| 🇩🇪 focusnic.com |
Multiple SSH login attempts from 178.18.242.131 targeting user(s): test,tower | Server Managed by Focusnic
|
Brute-Force SSH | |
| 🇳🇱 paradoxnetworks |
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown