JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 207.180.206.101

207.180.206.101 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi355122.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 207.180.206.101

Whois 207.180.206.101

IP Abuse Reports for 207.180.206.101:

This IP address has been reported a total of 40 times from 22 distinct sources. 207.180.206.101 was first reported on July 24th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 lister171254	2026-07-27 02:31:49 (9 hours ago)	2026-07-27T04:31:49.172073+02:00 thelists sshd[1333978]: Connection closed by authenticating user ro ... show more 2026-07-27T04:31:49.172073+02:00 thelists sshd[1333978]: Connection closed by authenticating user root 207.180.206.101 port 52172 [preauth] ... show less	Brute-Force SSH
🇫🇷 edoram	2026-07-26 22:30:34 (13 hours ago)	SSH brute-force from honeypot. 21916 attempts in 24h, 153 unique usernames tried.	Brute-Force SSH
🇩🇪 lister171254	2026-07-26 10:31:08 (1 day ago)	2026-07-26T12:31:08.204754+02:00 thelists sshd[528953]: Connection closed by authenticating user roo ... show more 2026-07-26T12:31:08.204754+02:00 thelists sshd[528953]: Connection closed by authenticating user root 207.180.206.101 port 37108 [preauth] ... show less	Brute-Force SSH
🇩🇪 lister171254	2026-07-26 02:30:52 (1 day ago)	2026-07-26T04:30:51.602759+02:00 thelists sshd[124741]: Connection closed by authenticating user roo ... show more 2026-07-26T04:30:51.602759+02:00 thelists sshd[124741]: Connection closed by authenticating user root 207.180.206.101 port 35574 [preauth] ... show less	Brute-Force SSH
🇫🇷 edoram	2026-07-25 22:39:07 (1 day ago)	SSH brute-force from honeypot. 2404 attempts in 24h, 22 unique usernames tried.	Brute-Force SSH
🇩🇪 lister171254	2026-07-25 22:30:41 (1 day ago)	2026-07-26T00:30:03.008840+02:00 thelists sshd[2233810]: Connection closed by authenticating user ro ... show more 2026-07-26T00:30:03.008840+02:00 thelists sshd[2233810]: Connection closed by authenticating user root 207.180.206.101 port 55834 [preauth] 2026-07-26T00:30:40.980774+02:00 thelists sshd[2235710]: Connection closed by authenticating user root 207.180.206.101 port 38332 [preauth] 2026-07-26T00:30:40.980774+02:00 thelists sshd[2235710]: Connection closed by authenticating user root 207.180.206.101 port 38332 [preauth] ... show less	Brute-Force SSH
🇩🇪 lister171254	2026-07-25 20:29:42 (1 day ago)	2026-07-25T22:28:26.862237+02:00 thelists sshd[2132191]: Connection closed by authenticating user ro ... show more 2026-07-25T22:28:26.862237+02:00 thelists sshd[2132191]: Connection closed by authenticating user root 207.180.206.101 port 50420 [preauth] 2026-07-25T22:29:04.624172+02:00 thelists sshd[2132429]: Connection closed by authenticating user root 207.180.206.101 port 32964 [preauth] 2026-07-25T22:29:04.624172+02:00 thelists sshd[2132429]: Connection closed by authenticating user root 207.180.206.101 port 32964 [preauth] 2026-07-25T22:29:42.588695+02:00 thelists sshd[2132680]: Connection closed by authenticating user root 207.180.206.101 port 43426 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-07-25 19:30:06 (1 day ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇩🇪 lister171254	2026-07-25 19:28:15 (1 day ago)	2026-07-25T21:26:00.090668+02:00 thelists sshd[2080945]: Connection closed by 207.180.206.101 port 5 ... show more 2026-07-25T21:26:00.090668+02:00 thelists sshd[2080945]: Connection closed by 207.180.206.101 port 56190 [preauth] 2026-07-25T21:26:47.063777+02:00 thelists sshd[2081423]: Connection closed by authenticating user root 207.180.206.101 port 48508 [preauth] 2026-07-25T21:27:31.118587+02:00 thelists sshd[2081674]: Connection closed by authenticating user root 207.180.206.101 port 60856 [preauth] 2026-07-25T21:28:14.840869+02:00 thelists sshd[2082152]: Invalid user flowable from 207.180.206.101 port 44440 2026-07-25T21:28:14.847381+02:00 thelists sshd[2082152]: Connection closed by invalid user flowable 207.180.206.101 port 44440 [preauth] ... show less	Brute-Force SSH
🇫🇷 EvoX	2026-07-25 19:26:00 (1 day ago)	🛡️ Honeypot [bsts-tpot-sensor]: SSH handshake/banner (17 bytes of payload); 2022 [1], 3222 [1], 2222 ... show more 🛡️ Honeypot [bsts-tpot-sensor]: SSH handshake/banner (17 bytes of payload); 2022 [1], 3222 [1], 2222 [1] TCP show less	SSH
🇫🇷 sthoyer.de	2026-07-25 19:25:53 (1 day ago)	Jul 25 21:25:29 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jul 25 21:25:29 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=207.180.206.101 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=8395 PROTO=TCP SPT=47522 DPT=2220 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 25 21:25:32 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=207.180.206.101 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=21292 PROTO=TCP SPT=47522 DPT=3222 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 25 21:25:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=207.180.206.101 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=36125 PROTO=TCP SPT=47522 DPT=2202 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 25 21:25:40 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=207.180.206.101 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=2318 PROTO=TCP SPT=47522 DPT=2022 WINDOW=1024 ... show less	Port Scan
Anonymous	2026-07-25 19:25:48 (1 day ago)	207.180.206.101 detected on srv02	Port Scan
🇫🇷 ISPLtd	2026-07-25 19:25:43 (1 day ago)	Jul 25 16:25:43 207.180.206.101 TCP SPT=47522 DPT=2222 SYN ...	Port Scan SSH
🇫🇷 vtchost.com	2026-07-25 19:25:30 (1 day ago)	Jul 25 21:25:29 vtchost kernel: [60447.475441] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Jul 25 21:25:29 vtchost kernel: [60447.475441] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=207.180.206.101 DST=161.97.181.152 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=63954 PROTO=TCP SPT=47522 DPT=2022 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-07-25 19:25:29 (1 day ago)	trying to access non-authorized port	Port Scan

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.149.55

🇺🇸 172.234.21.101

🇭🇰 101.36.108.191

🇸🇪 90.230.168.26

🇨🇳 14.103.112.14

🇳🇱 195.178.110.30

🇷🇺 178.178.222.61

🇨🇳 171.217.92.33

🇵🇭 136.158.7.165

🇨🇳 111.198.53.188

🇺🇸 104.207.36.45

🇳🇱 45.148.10.141

🇸🇪 4.223.71.149

🇷🇴 2.57.121.112

🇺🇸 195.184.76.209

🇨🇳 183.156.69.130

🇮🇳 183.82.0.127

🇧🇷 179.176.210.17

🇦🇺 134.199.153.139

🇨🇳 123.145.11.200