JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 207.180.213.68

207.180.213.68 was found in our database!

This IP was reported 364 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmd187157.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 207.180.213.68

Whois 207.180.213.68

IP Abuse Reports for 207.180.213.68:

This IP address has been reported a total of 364 times from 143 distinct sources. 207.180.213.68 was first reported on August 10th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 adembaysal	2025-07-04 01:14:01 (1 year ago)	Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.e ... show more Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.env - 443 - 207.180.213.68 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0 - cms.bahukukyazilim.com 404 0 2 1478 351 6718 - - show less	Hacking SQL Injection
🇫🇷 adembaysal	2025-05-21 04:11:08 (1 year ago)	Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.e ... show more Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.env - 443 - 207.180.213.68 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0 - cms.bahukukyazilim.com 404 0 2 1478 351 6718 - - show less	Hacking SQL Injection
🇫🇷 adembaysal	2025-05-20 02:43:03 (1 year ago)	Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.e ... show more Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.env - 443 - 207.180.213.68 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0 - cms.bahukukyazilim.com 404 0 2 1478 351 6718 - - show less	Hacking SQL Injection
🇫🇷 adembaysal	2025-05-18 14:37:08 (1 year ago)	Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.e ... show more Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.env - 443 - 207.180.213.68 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0 - cms.bahukukyazilim.com 404 0 2 1478 351 6718 - - show less	Hacking SQL Injection
🇫🇷 adembaysal	2025-05-15 16:03:06 (1 year ago)	Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.e ... show more Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.env - 443 - 207.180.213.68 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0 - cms.bahukukyazilim.com 404 0 2 1478 351 6718 - - show less	Hacking SQL Injection
🇫🇷 adembaysal	2025-05-14 01:14:03 (1 year ago)	Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.e ... show more Domain : agoramanager.bahukukyazilim.com Rule : env 2025-01-17 16:38:04 *hidden-privacy* GET /.env - 443 - 207.180.213.68 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0 - cms.bahukukyazilim.com 404 0 2 1478 351 6718 - - show less	Hacking SQL Injection
🇺🇸 mawan	2025-02-27 20:47:02 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇩🇪 ut-addicted.com	2025-02-26 21:51:01 (1 year ago)	\[Wed Feb 26 22:50:59.650560 2025\] \[:error\] \[pid 6733:tid 140355638916864\] \[client 207.180.213 ... show more \[Wed Feb 26 22:50:59.650560 2025\] \[:error\] \[pid 6733:tid 140355638916864\] \[client 207.180.213.68:60830\] \[client 207.180.213.68\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.ut-addicted.com"\] \[uri "/.env"\] \[unique_id "Z7@Mw2GsWKt8QbPXiuhSYgAAAME"\] show less	Brute-Force Web App Attack
🇺🇸 snappic	2025-02-26 04:41:44 (1 year ago)	Malicious URI path [GET /.env] [Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0 ... show more Malicious URI path [GET /.env] [Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0] show less	Bad Web Bot Web App Attack
🇩🇪 Little Iguana	2025-02-24 08:46:53 (1 year ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇩🇪 Trueforce Threat Report	2025-02-24 06:48:25 (1 year ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇦🇺 advena	2025-02-24 06:00:57 (1 year ago)	207.180.213.68 (AS51167 CONTABO) was intercepted at 2025-02-24T05:57:13Z after violating WAF directi ... show more 207.180.213.68 (AS51167 CONTABO) was intercepted at 2025-02-24T05:57:13Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇺🇸 Starburst SysOp Team	2025-02-23 11:16:00 (1 year ago)	[Sun Feb 23 11:15:57.532505 2025] [security2:error] [pid 2359187:tid 2359193] [client 207.180.213.68 ... show more [Sun Feb 23 11:15:57.532505 2025] [security2:error] [pid 2359187:tid 2359193] [client 207.180.213.68:49602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".env" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-owasp-latest/coreruleset-4.11.0/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "143"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/4.11.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ams6-1.starburstserver.net"] [uri "/.env"] [unique_id "Z7sDbd5NRs4eb4JCEpEXzgAAAMQ"] show less	Hacking Brute-Force Web App Attack
🇺🇸 snappic	2025-02-22 17:04:00 (1 year ago)	Malicious URI path [GET /.env] [Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0 ... show more Malicious URI path [GET /.env] [Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0] show less	Bad Web Bot Web App Attack
Anonymous	2025-02-20 15:47:07 (1 year ago)	Http Port:80 (http_status:404) - Agent:Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firef ... show more Http Port:80 (http_status:404) - Agent:Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0 show less	Web App Attack

Showing 1 to 15 of 364 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 185.187.169.232

🇩🇪 167.94.146.74

🇩🇪 167.94.146.51

🇺🇸 162.216.149.194

🇳🇱 160.119.76.64

🇲🇾 113.211.212.0

🇺🇸 104.23.160.9

🇻🇪 45.186.209.157

🇸🇬 8.219.222.66

🇺🇸 3.101.230.185

🇳🇱 93.123.109.228

🇩🇪 69.5.169.231

🇳🇱 45.148.10.152

🇧🇷 205.210.31.254

🇨🇱 201.187.111.92

🇻🇳 103.200.21.150

🇩🇪 69.5.169.149

🇬🇧 35.203.211.221

🇬🇭 154.160.37.13

🇺🇸 147.185.132.45