207.180.245.39

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
74 reports
49 reporters · latest 11 hours ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi2524136.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
74 from 49 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 28 🇫🇷 France 9 🇩🇪 Germany 6
Most common categories Port Scan 60 Hacking 26 Brute-Force 12 SQL Injection 4 Web App Attack 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 nielsvf99
Sentinel honeypot: took over a fake SMB server, permanent; device: server (VPS/cloud); banned permanently.
Hacking
🇮🇹 Malwhunter
Suricata IDS (pfSense): ET SCAN Suspicious inbound to MSSQL port 1433 - 1 event(s) to TCP/1433 between 2026-11-15 09:47:38 and 09:47:38 (Europe/Rome)
Port Scan Hacking
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 243 | Len: 44B | Win: 1024(1) | rDNS: vmi2524136.contaboserver.net | F2B/ufw-honeypot@2026-11-15T01:22:52Z
Port Scan Hacking
🇩🇪 IP Analyzer
Unauthorized connection attempt from IP address 207.180.245.39 on Port 445(SMB)
Port Scan
🇺🇸 MPL
tcp/1433 (8 or more attempts)
Port Scan
🇺🇸 MPL
tcp/1433 (6 or more attempts)
Port Scan
🇺🇸 MPL
tcp/1433 (4 or more attempts)
Port Scan
🇺🇸 MPL
tcp/1433 (3 or more attempts)
Port Scan
🇺🇸 MPL
tcp/1433 (2 or more attempts)
Port Scan
🇷🇸 Smel
SQL/MH Probe, Scan, Hack -
Port Scan Hacking SQL Injection
🇺🇸 MPL
tcp/1433
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
🇺🇸 drewf.ink
[07:50] Probed the MSSQL honeypot (PRELOGIN handshake only, no login attempt)
Brute-Force Hacking
🇺🇸 freehosts.eu
Blocked by UFW [1433/tcp] | SPT: 45816 | TTL: 244 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Brute-Force
🇺🇸 Bankbook8585
T-Pot honeypot | Dionaea honeypot: smbd
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇷 212.50.57.143
🇩🇪 209.38.208.202
🇪🇨 190.155.93.246
🇨🇦 143.110.217.244
🇰🇷 125.182.93.18
🇳🇱 86.38.187.161
🇰🇷 61.77.114.145
🇷🇺 45.91.64.10
🇺🇸 216.25.90.58
🇮🇳 191.44.93.114
🇮🇹 185.132.230.225
🇺🇸 167.71.28.101
🇻🇺 138.226.239.233
🇧🇩 103.248.207.43
🇮🇪 54.247.218.230
🇳🇱 45.74.28.178
🇬🇧 31.14.254.77
🇰🇷 211.227.11.6
🇨🇳 202.101.144.44
🇳🇱 185.226.197.50
feedback