JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 207.180.202.214

207.180.202.214 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi234825.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 207.180.202.214

Whois 207.180.202.214

IP Abuse Reports for 207.180.202.214:

This IP address has been reported a total of 37 times from 34 distinct sources. 207.180.202.214 was first reported on October 20th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rip	2026-10-22 12:13:33 (4 hours ago)	Restricted File Access Attempts	Port Scan Web App Attack
🇸🇪 eagle	2026-10-22 12:09:54 (4 hours ago)	207.180.202.214 - - [22/Oct/2026:12:09:54 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Wind ... show more 207.180.202.214 - - [22/Oct/2026:12:09:54 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "[server]" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-22 07:51:55 (8 hours ago)	host=- server=- ip=207.180.202.214 method=GET req=/.env uri=/.env status=301 bytes=162 rt=0.000 urt= ... show more host=- server=- ip=207.180.202.214 method=GET req=/.env uri=/.env status=301 bytes=162 rt=0.000 urt=- lr=- ref="-" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack Bad Web Bot
🇸🇬 itachi1706	2026-10-22 04:29:35 (12 hours ago)	207.180.202.214 - - [22/Oct/2026:12:29:32 +0800] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03^&z\x1 ... show more 207.180.202.214 - - [22/Oct/2026:12:29:32 +0800] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03^&z\x10\|\xEE$\xD2s\xEAP(\x00\xAA\x97t\xFA\xA0\xF8\xEE\xD3\xC4\xFD\xB0\xCA\xAD\xF9\xFE\xD5Y\xED\xB5 \x93.\x83\xF3?0\x19\xBE\xD4" 400 166 "-" "-" 207.180.202.214 - - [22/Oct/2026:12:29:33 +0800] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03WSY\x8C\xE8d\x04V\x0F\xEF\xB4N\x1A9a\x00\x5C\x0B\x10\xF8C\xEE\x04\xAD\x1Fi\xD1'\xB7\xC0\xDC\xD4 \xDB\xD7\xCE\xEC\xB5\x04\x94\x0E\x9F\x9A-\xC1\xE6d\xCB\x95\xB8\|\x9B/\x7FpQ\x0B\x8D\x1B\x8AK\xDB\xEC\x9A\x08\x00$\x13\x02\x13\x03\x13\x01\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\xC0$\xC0(\xC0#\xC0'\x00\x9F\x00\x9E\x00k\x00g\x00\xFF\x01\x00\x01\x8F\x00\x0B\x00\x04\x03\x00\x01\x02\x00" 400 166 "-" "-" 207.180.202.214 - - [22/Oct/2026:12:29:33 +0800] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xFFq\xA1\xF4\xACm\xE22\xEAr\x9D\xAAb\x15Y\x09qjR\xB3V\xDF\xE6\x95\xAA\x5C\x1E\x08\x95eAl \x16\x09\xD5\x89k\x9A\xC9}\x0F\xC7_ \x1B\xDE\xEC\xC3x\xF3\xA7_i0\xD6\x7FX'\xCC\x90\x88jk\xEA ... show less	Brute-Force Web App Attack
🇺🇸 drewf.ink	2026-10-22 02:55:00 (13 hours ago)	[02:55] Attempted HTTP access to an exposed .env file	Web App Attack
🇩🇪 genokrad	2026-10-22 02:25:04 (14 hours ago)	Direct ip access to website TCP 80/443, path "/.env.bak" [Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more Direct ip access to website TCP 80/443, path "/.env.bak" [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36]. show less	Port Scan Web App Attack
Anonymous	2026-10-22 01:10:09 (15 hours ago)	2026-10-22T01:10:08.515507+00:00 gotosocial caddy[86195]: {"level":"info","ts":1792631408.5153491,"l ... show more 2026-10-22T01:10:08.515507+00:00 gotosocial caddy[86195]: {"level":"info","ts":1792631408.5153491,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"207.180.202.214","remote_port":"38710","client_ip":"207.180.202.214","proto":"HTTP/1.1","method":"GET","host":"142.132.177.172","uri":"/.env","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"Accept":["/"],"Accept-Encoding":["gzip, deflate"]}},"bytes_read":0,"user_id":"","duration":0.000117721,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://142.132.177.172/.env"],"Content-Type":[]}} ... show less	Hacking Web App Attack
🇩🇪 IVski.com	2026-10-22 01:00:59 (15 hours ago)	IVski WAF \| Crypto mining scan / Stratum probing attempt using cpuminer client.	Hacking Brute-Force Web App Attack
🇩🇪 MBombeck	2026-10-22 00:53:00 (15 hours ago)	Fail2Ban/traefik-botsearch on ops-01.bombeck.io: banned after 5 failures	Web App Attack
🇩🇪 bescared	2026-10-22 00:09:05 (16 hours ago)	F2B - Malicious activity detected. URL Probing. -c23856ef-	Hacking Bad Web Bot Web App Attack
🇩🇪 Serpentex	2026-10-22 00:07:36 (16 hours ago)	207.180.202.214 - - [22/Oct/2026:02:07:34 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xD4K\ ... show more 207.180.202.214 - - [22/Oct/2026:02:07:34 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xD4K\x00w5\x10\xC0\x85\x1A\xCC\x82\xB0K\x0CIj\x89\xEDd\xCA\xB1g\x9B\xFA&#\xAA\xBA\xFAyD\x0E I\x82vp\x00\x10\x9C\x0C\x83\xA0\x0E#]pF\x1D-1\x9CF\x8DK\x8C\x96\xBC\xFA]\xAFR\x8F\xC0\xD8\x00$\x13\x02\x13\x03\x13\x01\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\xC0$\xC0(\xC0#\xC0'\x00\x9F\x00\x9E\x00k\x00g\x00\xFF\x01\x00\x01\x8F\x00\x0B\x00\x04\x03\x00\x01\x02\x00" 400 150 "-" "-" 207.180.202.214 - - [22/Oct/2026:02:07:34 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xCE\x83\xAA\x94m\xDB\xB1\xFD\xB0\xF4\xF4\x8C\x7Ft\xEE\xA2\xD7\xC9\x06\x1Bs\xC8$\xDA\x05\x9F[F\x19\x8EM\xFE \x80S\x891\xE7\xD8\x9D\xDAA\xF2Nz\xD7" 400 150 "-" "-" 207.180.202.214 - - [22/Oct/2026:02:07:35 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03D\x16#\x07cB\x1B\x8C\xED\x10\x18A\xA4\xD8\x1B\x02\x9D\x87\xBA\x91l\xD0P\xD8#\xE1\xC8\xFBh\xD13G \xAF\x08Ke\xFD\xEF\x03?\xD7\x18\x84B\xDAY\xB6:\x06N\xF0\x1Ez*\xC9?\x8A[" 400 150 "-" "-" ... show less	Bad Web Bot Web App Attack
🇩🇪 XYCoderXY	2026-10-22 00:03:51 (16 hours ago)	HTTP vulnerability scan: 36 requests between 2026-10-22 00:03:51 and 00:03:58 UTC. Targets: exposed ... show more HTTP vulnerability scan: 36 requests between 2026-10-22 00:03:51 and 00:03:58 UTC. Targets: exposed secrets, config and source-control files. Examples: /.env.bak, /.env, /.env.backup, /.env.production. No legitimate visitor of this server sends these requests. Source blocked. - Lumerux Defense (lumerux.com), automated report. Contact: [email protected] show less	Web App Attack
🇫🇮 payincog	2026-10-21 20:00:15 (20 hours ago)	Date: Oct 21 22:30:16 2026 EAT \| Reported IP: 207.180.202.214 mod_security \| id: 920350 930130 94911 ... show more Date: Oct 21 22:30:16 2026 EAT \| Reported IP: 207.180.202.214 mod_security \| id: 920350 930130 949110 920440 \| FR/pay.zagaavipato.com/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 8); Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; URL file extension is restricted by policy; URL file extension is restricted by policy; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 13); Inbound Anomaly Score Exceeded (Total Score: 8); Inbound Anomaly Score Exceeded (Total Score: 8); Inbound Anomaly Score Exceeded (Total Score: 8) show less	SQL Injection Brute-Force Bad Web Bot
Anonymous	2026-10-21 17:56:15 (22 hours ago)	[21/Oct/2026:20:56:14 +0300] 179260537437.405322 207.180.202.214 36482 148.251.76.218 80 [21/Oct/202 ... show more [21/Oct/2026:20:56:14 +0300] 179260537437.405322 207.180.202.214 36482 148.251.76.218 80 [21/Oct/2026:20:56:14 +0300] 179260537482.578362 207.180.202.214 37404 148.251.76.218 443 show less	Web App Attack
🇩🇪 mondor.ro	2026-10-21 17:47:43 (22 hours ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 207.180.202.214, Reaso ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 207.180.202.214, Reason:[(mod_security) mod_security (id:210492) triggered by 207.180.202.214 (FR/France/vmi234825.contaboserver.net): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.183.180.108

🇺🇸 195.184.76.118

🇨🇷 186.151.98.46

🇨🇩 102.216.240.61

🇮🇹 34.154.181.174

🇶🇦 34.18.168.5

🇱🇻 31.56.179.173

🇳🇱 5.2.79.190

🇯🇵 2602:f71d:400::30

🇨🇳 203.6.235.51

🇳🇱 195.178.110.217

🇺🇸 172.5.134.239

🇲🇬 153.67.85.129

🇮🇩 140.213.106.152

🇨🇮 102.210.17.163

🇸🇬 94.231.206.4

🇺🇸 70.184.96.188

🇪🇬 62.193.91.121

🇧🇬 62.60.134.210

🇮🇳 59.144.92.154