207.180.222.98
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- vmi3674042.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇫🇷 France
- City
- Lauterbourg, Grand Est
Abuse Reports
Total reports
28 from
26 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 tjs |
web attack, shell attempt
|
Hacking Web App Attack | |
| Anonymous |
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host | |
| 🇷🇸 pexodelic |
|
Hacking Bad Web Bot Web App Attack | |
| 🇮🇩 FallingGong2833 |
tcp/2375
|
Port Scan | |
| 🇩🇪 FD-IX |
Fail2Ban: ModSecurity detected a web application attack.
|
Bad Web Bot Web App Attack | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 2222/SSH-alt | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 40B | Win: 65535(1) | rDNS: vmi3674042.contaboserver.net | F2B/ufw-honeypot@2026-10-23T17:23:46Z
|
Port Scan Hacking | |
| 🇯🇵 amyriad |
|
DDoS Attack Hacking Brute-Force | |
| 🇫🇷 COMAITE |
PHP CGI-bin vulnerability attempt.
|
Web App Attack | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-10-23 17:23:23 | LAST=2026-10-23 17:23:23. Last seen 2026-10-23 17:23:23.
|
Port Scan | |
| 🇨🇭 SOC [GOLINE SA] |
FortiGate IPS: Apache.HTTP.Server.cgi-bin.Path.Traversal (severity high)
|
Hacking | |
| 🇳🇱 Savvii |
20 attempts against mh-ssh on ec102944
|
Brute-Force SSH | |
| 🇬🇧 CrystalMaker |
|
Hacking Bad Web Bot | |
| Anonymous |
Remote command execution attempt.
|
Hacking | |
| 🇦🇺 greenhost.com.au |
Automated report: 76 attacks in 24h targeting cwp2 via SSH. SSH/invalid_user: 76 on cwp2
|
Brute-Force SSH | |
| 🇺🇸 theanalogmaker |
CrowdSec: crowdsecurity/CVE-2017-9841 (24h ban)
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown