JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.169.252.215

185.169.252.215 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 1%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	server1.ultrapbs.com
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.169.252.215

Whois 185.169.252.215

IP Abuse Reports for 185.169.252.215:

This IP address has been reported a total of 23 times from 19 distinct sources. 185.169.252.215 was first reported on February 22nd 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 AutosOnShow	2026-06-04 07:36:05 (2 weeks ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-04 07:35:26.473 \|	Web App Attack
🇨🇿 lp	2026-01-31 03:08:53 (4 months ago)	Email account brute force: 1 attempts were recorded from 185.169.252.215 2026-01-31T03:09:47+01:00 w ... show more Email account brute force: 1 attempts were recorded from 185.169.252.215 2026-01-31T03:09:47+01:00 warning: vmi771694.contaboserver.net[185.169.252.215]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇿 lp	2026-01-28 07:24:01 (4 months ago)	Email account brute force: 1 attempts were recorded from 185.169.252.215 2026-01-28T07:48:00+01:00 w ... show more Email account brute force: 1 attempts were recorded from 185.169.252.215 2026-01-28T07:48:00+01:00 warning: vmi771694.contaboserver.net[185.169.252.215]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 COMPLEX	2026-01-26 01:07:21 (4 months ago)	Triggered Cloudflare WAF (l7ddos) from FR. Action taken: BLOCK ASN: undefined (undefined) Protocol: ... show more Triggered Cloudflare WAF (l7ddos) from FR. Action taken: BLOCK ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇨🇦 SuperEvilLuke	2026-01-24 19:58:45 (4 months ago)	Malicious activity detected from 51167 CONTABO towards host embotic.xyz (GET HTTP/2) @ 2026-01-24T19 ... show more Malicious activity detected from 51167 CONTABO towards host embotic.xyz (GET HTTP/2) @ 2026-01-24T19:58:45Z (7 occurrences) show less	DDoS Attack Exploited Host
🇸🇬 Fn4ticHz	2026-01-22 02:46:09 (4 months ago)	repeated ddos targeted zeroguard.id -- ZeroGuard	DDoS Attack
🇨🇿 lp	2026-01-02 20:52:39 (5 months ago)	Email account brute force: 1 attempts were recorded from 185.169.252.215 2026-01-02T21:39:44+01:00 w ... show more Email account brute force: 1 attempts were recorded from 185.169.252.215 2026-01-02T21:39:44+01:00 warning: vmi771694.contaboserver.net[185.169.252.215]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 nowyouknow	2026-01-01 03:47:48 (5 months ago)	(From [email protected]) Hi there, I know this is out of the blue, but if your calendar’s packe ... show more (From [email protected]) Hi there, I know this is out of the blue, but if your calendar’s packed and inbox overflowing—you’re not alone. We help busy professionals offload time-consuming tasks by pairing them with skilled Virtual Assistants in: Admin & Customer Support Content & Digital Marketing Web & Data Management Project Management On top of that, we offer AI-powered prospecting and appointment setting to keep your pipeline full—so you can focus on closing deals and growing your business. Would you be open to a quick call to explore whether this could be a fit? Just reply “yes” with your number, and we’ll take it from there. Jean Tanner PS: If you want to opt out, kindly reply STOP. show less	Phishing Web Spam
🇵🇱 IROK	2026-01-01 00:16:36 (5 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇨🇭 backslash	2025-12-31 17:40:05 (5 months ago)	block ruleset 6A1105329D233F6F53B9B61CE056BD4DAAE75AB4	Web Spam
🇨🇭 Modules	2025-12-30 21:24:17 (5 months ago)	Open proxy http://185.169.252.215:3128 (RT:10266ms,Loc:France,ASN:AS51167)	Open Proxy
Anonymous	2025-12-30 09:20:02 (5 months ago)	Detected Hacking, SQL Injection or general Web App Attack	Web App Attack
🇮🇹 VHosting	2025-12-29 19:32:45 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇵🇹 PTnet	2025-12-28 10:18:50 (5 months ago)	DDoS Attack (jail:haproxy-badreq)	DDoS Attack Exploited Host
🇵🇹 PTnet	2025-12-28 10:18:50 (5 months ago)	DDoS Attack (jail:haproxy-badreq)	DDoS Attack Exploited Host

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 151.243.11.245

🇩🇪 2a00:1450:4001:c02::12b

🇮🇹 217.26.179.32

🇺🇸 216.180.246.177

🇰🇷 211.106.188.119

🇺🇸 208.80.248.242

🇺🇸 207.90.244.19

🇭🇰 199.45.155.109

🇭🇰 199.45.155.98

🇩🇪 167.94.145.18

🇨🇳 121.237.36.31

🇨🇳 121.237.36.30

🇨🇳 121.237.36.29

🇱🇹 77.90.185.97

🇺🇸 76.134.251.88

🇳🇱 45.148.10.157

🇮🇪 20.105.65.67

🇺🇸 6.237.152.190

🇧🇷 205.210.31.146

🇵🇱 194.180.49.56