178.18.248.167

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
73 reports
52 reporters · latest 2 days ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi576047.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
73 from 52 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 26 🇩🇪 Germany 10 🇫🇷 France 8
Most common categories Port Scan 60 Hacking 14 Brute-Force 9 Bad Web Bot 4 Open Proxy 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇫🇮 mikkopal88
TCP SYN port scan to HTTP 80-443-8080
Port Scan
🇸🇬 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.wikipedia.org:443
Open Proxy Port Scan
🇺🇸 drewf.ink
[11:20] Attempted to relay through an open proxy: CONNECT www.wikipedia.org:443
Open Proxy
🇺🇸 LotPhantom
Port Scan Hacking
🇸🇬 drewf.ink
[11:12] Attempted to relay through an open proxy: CONNECT www.wikipedia.org:443
Open Proxy
🇺🇸 drewf.ink
[11:02] Attempted to relay through an open proxy: CONNECT www.wikipedia.org:443
Open Proxy
🇺🇸 etu brutus
178.18.248.167 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
🇺🇸 MPL
tcp/3129
Port Scan
🇺🇸 MPL
tcp ports: 3128,3129 (2 or more attempts)
Port Scan
🇺🇸 micropedro
3 incidents: port scanning. First: 2026-11-03 00:04, Last: 2026-11-03 19:39 UTC. Triggers: non-public-port,firewall-tcp,unknown.
Port Scan
🇮🇳 Mr.Singh
NFT blocked 178.18.248.167 on 03-Nov-2026..
Port Scan Brute-Force
🇷🇴 abuse_IP_reporter
Nov 3 12:37:12 server UFW BLOCK SRC=178.18.248.167 PROTO=TCP SPT=42678 DPT=20128
Port Scan
🇮🇹 Fusty
Unauthorized attempt on (TCP on port 20128). Source port: 42001 TTL: 244 Packet length: 40 Timestamp: 2026-11-03 11:33:55
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 157.230.213.242
🇷🇺 78.111.249.76
🇺🇸 209.87.167.195
🇺🇸 199.87.181.254
🇧🇪 198.235.24.171
🇰🇷 175.192.78.45
🇺🇸 170.187.139.165
🇮🇳 163.52.57.253
🇺🇸 162.216.150.218
🇮🇳 152.52.183.50
🇻🇳 125.212.231.55
🇨🇳 117.89.1.165
🇨🇳 116.232.100.225
🇩🇪 109.160.32.36
🇨🇳 106.13.107.35
🇺🇸 104.37.102.67
🇺🇸 98.85.61.192
🇺🇸 98.85.4.5
🇺🇸 54.234.25.230
🇺🇸 52.5.146.79
feedback