AbuseIPDB » 5.189.172.252

5.189.172.252 was found in our database!

This IP was reported 236 times. Confidence of Abuse is 100%: ?

100%
ISP Contabo GmbH
Usage Type Data Center/Web Hosting/Transit
ASN AS51167
Hostname(s) mail.suporte1.faturadas.shop
Domain Name contabo.com
Country Germany
City Nurnberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

IP Abuse Reports for 5.189.172.252:

This IP address has been reported a total of 236 times from 145 distinct sources. 5.189.172.252 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp in UTC Comment Categories
slartybartfast69420blazit
Fail2ban picked up 5.189.172.252 attacking nginx
Web App Attack
rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
NetWatch
The IP 5.189.172.252 tried multiple SSH logins
Brute-Force SSH
slartybartfast69420blazit
Fail2ban picked up 5.189.172.252 attacking nginx
Web App Attack
rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
Samuil Warshan
F2B blocked SSH BF
Brute-Force SSH
axiomofchoice.xyz
endlessh trap: attempts=1 total_time_stuck=110.1s
Port Scan Hacking SSH
axiomofchoice.xyz
endlessh trap: attempts=1 total_time_stuck=110.1s
Port Scan Hacking SSH
axiomofchoice.xyz
endlessh trap: attempts=1 total_time_stuck=110.1s
Port Scan Hacking SSH
bigwavedave
ssh
Brute-Force SSH
eszfrigyes.com
Brute-Force SSH
RuslanUC
Port Scan Brute-Force SSH
YaRi78
Unsolicited telnet connection attempt from 5.189.172.252 detected
Port Scan
weils.net
2025-07-12 19:41:04(GMT+8) - /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Bad Web Bot
kkeyser
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
Web App Attack

Showing 1 to 15 of 236 reports


Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs: