5.189.185.4
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- root.stamm-networks.de
- Domain Name
- contabo.com
- Country
- 🇫🇷 France
- City
- Lauterbourg, Grand Est
Abuse Reports
Total reports
25 from
17 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 cityhunter_rhone |
Connection attempts on sensitive port(s) 6379 (1), 9090 (1), 11211 (1) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
|
Port Scan Hacking | |
| 🇳🇱 ByeByte API |
byebyte.space auth: TCP packet to port 11211 (memcached) at 2026-10-31T01:48:44Z. Source port 48916. TCP flags: SYN. Packet: 40B, TTL 240, window 1024, IP id 34838. Single packet, dropped at firewall. p0f: 15 hops.
|
Port Scan | |
| 🇳🇱 ByeByte API |
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 10250, 11211, 2375, 27017, 5000, 8086, 8888, 9001. Activity window: 2026-10-29 17:09 UTC to 2026-10-31 01:48 UTC.
|
Port Scan | |
| 🇩🇪 marcel-knorr.de |
[MK-VM1] Blocked by UFW
|
Brute-Force Port Scan | |
| 🇳🇱 ByeByte API |
byebyte.space auth: TCP packet to port 8086 (high-risk service) at 2026-10-31T01:29:56Z. Source port 48916. TCP flags: SYN. Packet: 40B, TTL 241, window 1024, IP id 52295. Single packet, dropped at firewall. p0f: 14 hops.
|
Port Scan | |
| 🇩🇪 marcel-knorr.de |
[mail-backup-2] Blocked by UFW
|
Brute-Force Port Scan | |
| 🇩🇪 derLoosi |
HV1.2 Blocked by UFW
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:48916 dst:3306
|
Port Scan | |
| 🇺🇸 avgsmoe |
Connection to a honeypot port. Automated report (firemon).
|
Port Scan | |
| 🇩🇪 cloudmax |
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
|
Port Scan | |
| 🇩🇪 marcel-knorr.de |
[MK-Root1] Blocked by UFW
|
Brute-Force Port Scan | |
| 🇺🇸 LotPhantom |
|
Port Scan Hacking | |
| 🇳🇱 ByeByte API |
byebyte.space auth: TCP packet to port 27017 (MongoDB) at 2026-10-31T01:09:10Z. Source port 48916. TCP flags: SYN. Packet: 40B, TTL 241, window 1024, IP id 26547. Single packet, dropped at firewall. p0f: 14 hops.
|
Port Scan | |
| 🇫🇷 zulzeen |
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Database/Cache Attack)
|
Hacking Brute-Force | |
| 🇳🇱 hxsain |
Blocked by UFW [9000/tcp] | SPT: 48795 | TTL: 246 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown