2.59.156.8

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
88% Critical
16 reports
16 reporters · latest 3 hours ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi3687555.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
16 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 4 🇩🇪 Germany 3 🇦🇺 Australia 1
Most common categories Port Scan 13 Hacking 8 Brute-Force 3 Exploited Host 1 Web Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 xclmp
Unauthorized connection attempts consistent with that of port probing and scanning from 2.59.156.8 were detected at 2026-11-09 01:18:14 UTC. Learn More: https://fia.project-furina.com/report/20867
Port Scan
🇧🇷 SOC Blue Team
IPs get by Hunting on SIEM
Phishing Web Spam Port Scan Hacking
🇳🇱 EGP Abuse Dept
Unauthorized connection to MSSQL port 1433
Port Scan Hacking
🇺🇸 sumnone
Port probing on unauthorized port 1433
Port Scan Hacking Exploited Host
🇩🇪 HoneyPot-FrPri
1794078262 - 11/07/2026 20:04:22 Host: 2.59.156.8/2.59.156.8 Port: 1433 TCP Blocked ...
Port Scan
🇺🇸 drewf.ink
[19:02] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): NT LM 0.12) - no SMB2 support signaled
Hacking
🇪🇸 jiossal
IP_Trapped_MikroTik_Firewall_HoneyPot
Brute-Force
🇫🇮 mikkopal88
TCP SYN port scan to database or remote admin port
Port Scan
🇷🇴 Viperel
RouterOS: Repeated connections to sensitive (SSH/RDP/TELNET/DB/MGM) ports detected.
Port Scan Brute-Force
🇷🇺 Panamaaa
Port scan detected; Brute-force attack detected
Port Scan Brute-Force
🇺🇸 MPL
tcp/445
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: MSSQL Login Attempt (1433/tcp)
Port Scan Hacking
🇨🇦 DRI
Unsolicited TCP traffic on Honeypot, srcport=48442 dstport=1433
Port Scan Hacking
🇦🇺 LiftUp Hosting
Honeypot hit: SMB traffic on port 445
Hacking
Anonymous
denied traffic to a honeypot network. destination port 445.
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 218.157.163.203
🇺🇸 205.210.31.64
🇳🇱 192.253.248.226
🇺🇸 136.64.9.205
🇵🇰 103.66.148.221
🇧🇬 91.148.190.71
🇦🇪 31.215.202.177
🇺🇸 212.119.41.64
🇷🇺 212.19.10.9
🇮🇳 152.59.204.0
🇵🇰 72.255.18.139
🇮🇳 59.94.194.88
🇭🇰 49.213.6.30
🇺🇸 45.156.129.118
🇩🇪 37.114.50.27
🇺🇸 13.92.156.31
🇺🇸 193.203.8.221
🇧🇷 187.95.173.244
🇺🇦 176.122.105.215
🇺🇸 148.135.0.242
feedback