178.18.248.167

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
121 reports
72 reporters · latest 1 day ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi576047.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
121 from 72 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 42 🇫🇷 France 19 🇩🇪 Germany 17
Most common categories Port Scan 104 Hacking 24 Brute-Force 12 Bad Web Bot 6 Open Proxy 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-11-03 19:39, Last: 2026-11-12 19:44 UTC. Triggers: unknown.
Port Scan
🇩🇪 KPS
Portscan-P
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/8188 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇫🇮 anycast_ac
Blocked by UFW on legacypanel [20128/tcp] | SPT: 39688 | TTL: 242 | LEN: 40 | TOS: 0x00 • Reported by: FemboyHolding LTD
Port Scan
Anonymous
Drop from IP address 178.18.248.167 to tcp-port 20128
Port Scan
🇫🇮 6kilowatti
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 20128) Source port: 42513 TTL: 241 Packet length: 40 TOS: 0x00 This report (for 178.18.248.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/20128 (2 or more attempts)
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 20128) Source port: 52675 TTL: 241 Packet length: 40 TOS: 0x00 This report (for 178.18.248.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇮 Maxetow
Scan port: 20128 | 1 total | size=40B
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 8188 GET /system_stats User-Agent: Go-http-client/1.1 Accept-Encoding: gzip; 8188 [1] TCP
Hacking Bad Web Bot
🇺🇸 sandra361
Port scan detected: 8 packets across 2 ports (8188, 20128). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=178.18.248.167 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=64124 DF PROTO=TCP SPT=38912 DPT=8188 WINDOW=64240 RES=0x00 ACK FIN URGP=0
Port Scan
🇺🇸 MPL
tcp/20128 (9 or more attempts)
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 20128) Source port: 37319 TTL: 239 Packet length: 40 TOS: 0x00 This report (for 178.18.248.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.46.255.86
🇦🇷 170.247.78.139
🇱🇹 62.60.130.163
🇮🇳 1.187.225.22
🇯🇵 202.250.70.10
🇫🇷 176.139.9.205
🇻🇳 118.70.182.193
🇳🇱 109.160.32.151
🇺🇸 67.82.223.106
🇺🇦 45.66.171.187
🇺🇸 3.94.61.219
🇳🇱 200.138.46.211
🇦🇴 154.71.189.94
🇸🇬 146.190.103.59
🇳🇱 45.148.10.21
🇬🇧 45.133.173.25
🇬🇧 35.203.210.184
🇨🇳 27.29.116.137
🇿🇦 20.87.218.237
🇷🇺 155.212.17.174
feedback