194.163.167.3

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
30 reports
25 reporters · latest 39 minutes ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi2986407.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
30 from 25 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇫🇷 France 5 🇩🇪 Germany 4
Most common categories Web App Attack 26 Brute-Force 9 Hacking 8 Bad Web Bot 5 SSH 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇸🇪 vaia.cloud
crowdsecurity/CVE-2017-9841
Brute-Force Web App Attack
🇺🇸 factor1
CrowdSec at apollo Reports Abuse
Web App Attack
🇳🇱 Site.eu
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot Web App Attack
🇺🇸 gamabe
Detected crowdsecurity/http-cve-probing attack pattern. Reported by CrowdSec IDS.
Port Scan
🇮🇱 spd.co.il
Web application attack detected
Hacking Web App Attack
🇨🇦 SoteriaCovenant
Automated probe: /.svn/entries on Soteria Global infrastructure. No vulnerable software present.
Hacking
🇺🇸 webmaster-bancariosdf
Web scanner: 136 requests for sensitive files (/.git/config, /.git/HEAD, /.svn/entries, /wp-config.php). Blocked by firewall.
Web App Attack Hacking
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-10.
Web App Attack SSH Hacking
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇫🇷 uthul
T-Pot honeypot: 79 hits on ports [443] (automated)
Port Scan Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇫🇷 dynamix
Multiple WAF Violations
Web App Attack
🇦🇺 greenhost.com.au
web application attack (11 malicious requests flagged/blocked by ModSecurity CRS) against 1 server(s) in the last hour. Detected by Wazuh SIEM (automatic report).
Web App Attack
🇫🇷 Baking333
Bad Web Bot Web App Attack
🇺🇸 9LEVEL.com.br
Blocked by Fail2ban for traefik-404 abuse
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 171.104.83.176
🇰🇷 112.220.250.20
🇫🇷 91.231.89.22
🇩🇴 190.93.189.4
🇳🇴 185.12.59.118
🇳🇱 160.119.76.173
🇺🇸 156.239.42.225
🇺🇸 154.83.197.80
🇦🇪 109.177.33.52
🇫🇷 91.231.89.20
🇵🇱 77.65.142.69
🇩🇪 69.5.169.170
🇺🇸 199.165.159.218
🇺🇸 199.96.165.250
🇵🇱 194.113.248.70
🇳🇱 185.107.56.155
feedback