JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 207.180.195.152

207.180.195.152 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3401264.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 207.180.195.152

Whois 207.180.195.152

IP Abuse Reports for 207.180.195.152:

This IP address has been reported a total of 45 times from 37 distinct sources. 207.180.195.152 was first reported on July 3rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EinfxchFinn	2026-07-04 22:59:56 (1 hour ago)	Unauthorized connection attempt to port 2375 from 207.180.195.152	Port Scan
🇦🇹 urnilxfgbez	2026-07-04 22:45:00 (1 hour ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 ipcop.net	2026-07-04 22:36:09 (1 hour ago)	2026-07-05T00:34:34.902330+02:00 router01.civitelli.de sshd-session[2181835]: Connection closed by a ... show more 2026-07-05T00:34:34.902330+02:00 router01.civitelli.de sshd-session[2181835]: Connection closed by authenticating user admin 207.180.195.152 port 51910 [preauth] 2026-07-05T00:35:05.410493+02:00 router01.civitelli.de sshd-session[2182021]: Invalid user orangepi from 207.180.195.152 port 47844 2026-07-05T00:35:05.473291+02:00 router01.civitelli.de sshd-session[2182021]: Connection closed by invalid user orangepi 207.180.195.152 port 47844 [preauth] 2026-07-05T00:35:36.914562+02:00 router01.civitelli.de sshd-session[2182095]: Connection closed by authenticating user root 207.180.195.152 port 38328 [preauth] 2026-07-05T00:36:08.470412+02:00 router01.civitelli.de sshd-session[2182251]: Connection closed by authenticating user root 207.180.195.152 port 49444 [preauth] show less	Brute-Force
🇸🇰 Eurofluid	2026-07-04 22:00:42 (2 hours ago)	You shall not pass ! Abusive behavior blocked by EF firewall.	Port Scan Hacking Brute-Force
🇸🇰 KSBA	2026-07-04 20:02:55 (4 hours ago)	Automatic report from KSBA firewall log.	Port Scan Hacking Brute-Force
🇺🇸 oralunal	2026-07-04 20:01:05 (4 hours ago)	IP banned by Fail2Ban in jail sshd auth.log mvfnds ...	SSH
🇺🇸 bigscoots.com	2026-07-04 17:57:18 (6 hours ago)	(sshd) Failed SSH login from 207.180.195.152 (DE/Germany/vmi3401264.contaboserver.net): 5 in the las ... show more (sshd) Failed SSH login from 207.180.195.152 (DE/Germany/vmi3401264.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 4 12:56:08 11269 sshd[9008]: Invalid user admin from 207.180.195.152 port 38730 Jul 4 12:56:10 11269 sshd[9008]: Failed password for invalid user admin from 207.180.195.152 port 38730 ssh2 Jul 4 12:56:41 11269 sshd[9021]: Invalid user orangepi from 207.180.195.152 port 35584 Jul 4 12:56:43 11269 sshd[9021]: Failed password for invalid user orangepi from 207.180.195.152 port 35584 ssh2 Jul 4 12:57:15 11269 sshd[9132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.180.195.152 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-04 17:36:17 (6 hours ago)	(sshd) Failed SSH login from 207.180.195.152 (DE/Germany/vmi3401264.contaboserver.net): 5 in the las ... show more (sshd) Failed SSH login from 207.180.195.152 (DE/Germany/vmi3401264.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 4 12:34:58 14016 sshd[32553]: Invalid user admin from 207.180.195.152 port 53924 Jul 4 12:35:00 14016 sshd[32553]: Failed password for invalid user admin from 207.180.195.152 port 53924 ssh2 Jul 4 12:35:31 14016 sshd[499]: Invalid user orangepi from 207.180.195.152 port 51744 Jul 4 12:35:33 14016 sshd[499]: Failed password for invalid user orangepi from 207.180.195.152 port 51744 ssh2 Jul 4 12:36:04 14016 sshd[928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.180.195.152 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-04 17:12:57 (7 hours ago)	(sshd) Failed SSH login from 207.180.195.152 (DE/Germany/vmi3401264.contaboserver.net): 5 in the las ... show more (sshd) Failed SSH login from 207.180.195.152 (DE/Germany/vmi3401264.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 4 12:11:37 15032 sshd[14637]: Invalid user admin from 207.180.195.152 port 42066 Jul 4 12:11:38 15032 sshd[14637]: Failed password for invalid user admin from 207.180.195.152 port 42066 ssh2 Jul 4 12:12:10 15032 sshd[15103]: Invalid user orangepi from 207.180.195.152 port 47390 Jul 4 12:12:12 15032 sshd[15103]: Failed password for invalid user orangepi from 207.180.195.152 port 47390 ssh2 Jul 4 12:12:43 15032 sshd[15295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.180.195.152 user=root show less	Brute-Force SSH
🇱🇹 Selckie	2026-07-04 16:07:58 (8 hours ago)	fail2ban: SSH Brute-Force	SSH Brute-Force
🇺🇸 MPL	2026-07-04 14:47:43 (9 hours ago)	tcp/2375 (2 or more attempts)	Port Scan
🇨🇿 ptlab	2026-07-04 14:30:02 (9 hours ago)	Detected lfi_path_traversal attack from WP-host.	Hacking Web App Attack
Anonymous	2026-07-04 14:01:46 (10 hours ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-cve-2021-41773; Action=ban; Events ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-cve-2021-41773; Action=ban; Events=1; Hosts=_; Paths=/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh; Country=FR; ASN=51167 Contabo GmbH show less	Hacking Web App Attack
🇺🇸 xmission.com	2026-07-04 13:56:54 (10 hours ago)	Blocked by UFW (TCP on 2222) Source port: 40173 TTL: 43 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2222) Source port: 40173 TTL: 43 Packet length: 40 TOS: 0x08 This report (for 207.180.195.152) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ghostwarriors	2026-07-04 12:50:23 (11 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 119.96.193.72

🇺🇸 52.165.80.115

🇮🇳 20.219.164.250

🇦🇺 203.220.143.190

🇺🇸 185.180.141.48

🇺🇸 184.105.139.69

🇺🇸 165.154.173.232

🇦🇫 149.54.51.74

🇨🇳 123.245.85.64

🇨🇳 118.196.93.23

🇧🇬 79.124.62.134

🇺🇸 66.132.172.153

🇨🇳 60.167.19.189

🇳🇱 51.158.205.47

🇻🇳 42.96.19.37

🇬🇧 35.203.211.110

🇬🇧 35.203.210.144

🇬🇧 35.203.210.84

🇺🇸 35.192.232.168

🇺🇸 18.189.74.1