IOC Radar
IPMediumSignal 80/100

207.180.221.143

Location
GermanyGermany
Lauterbourg, Hesse
ASN
AS51167
Contabo GmbH
First Seen
Feb 17, 2022
Last Seen
Jun 6, 2026
Feb 17
First Seen
1575d ago
Jun 6
Last Seen
6d ago
15
Reports
source reports
80%
Confidence
medium
Found in 15 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
80%
Signal Score
80 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryDEGermany
RegionLauterbourg, Hesse
ASNAS51167
OrganizationContabo GmbH

Feed Intelligence Summary

15 reports80% confidence
15
Source reports
80%
Confidence score
Category tags
abuseactive scanbad reputationblocklist_allbrute forcebrute force attackerbrute-forcebruteforcecowriededionaeaeuropeexploitexploitation activityfattfrfrancegermanyhackingindicatorkpuspriyonewsnetworkp0fportscanransomwareresearchedscannerscannersself-signedsensor-taggedservice scansocradar honeypotsshssh attacktannertelnettpotvulnerability scanvulnerability-exploitationvultrweb app attackydznvjljcz6f7

Activity Timeline

1 total obs
Jun 6Jun 6

Threat Activity Heatmap

· Peak: 2026-06-06
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
80
SIGNAL
Signal Score
80%
Confidence
15
Reports
First seenFeb 17, 2022
Last seenJun 6, 2026
GeolocationDE
CountryGermany
LocationLauterbourg, Hesse
ASNAS51167
OrgContabo GmbH
Coords50.1109, 8.6821

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected port scanning Vultr Paris (France) honeypot
raw
inetnum: 207.180.192.0 - 207.180.223.255 netname: CONTABO descr: Contabo GmbH country: DE org: ORG-GG22-RIPE admin-c: MH7476-RIPE tech-c: MH7476-RIPE status: ASSIGNED PA mnt-by: MNT-CONTABO created: 2018-05-06T08:09:32Z last-modified: 2018-05-06T08:09:32Z source: RIPE organisation: ORG-GG22-RIPE org-name: Contabo GmbH country: DE org-type: LIR remarks: * Please direct all complaints about Internet abuse like Spam, hacking or scans * remarks: * to [email protected] . This will guarantee fastest processing possible. * address: Welfenstra�e 22 address: 81541 address: M�nchen address: GERMANY phone: +498921268372 fax-no: +498921665862 abuse-c: MH12453-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-ref: MNT-CONTABO mnt-ref: MNT-OCIRIS mnt-by: RIPE-NCC-HM-MNT mnt-by: MNT-CONTABO created: 2009-12-09T13:41:08Z last-modified: 2025-12-05T10:47:37Z source: RIPE # Filtered person: Johannes Selg address: Contabo GmbH address: Welfenstr. 22 address: 81541 M�nchen phone: +49 89 21268372 fax-no: +49 89 21665862 nic-hdl: MH7476-RIPE mnt-by: MNT-CONTABO mnt-by: MNT-GIGA-HOSTING created: 2010-01-04T10:41:37Z last-modified: 2025-12-05T12:12:21Z source: RIPE route: 207.180.220.0/23 descr: CONTABO origin: AS51167 mnt-by: MNT-CONTABO created: 2018-05-03T08:06:39Z last-modified: 2018-05-03T08:06:39Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 4 years ago · Last seen 6 days ago
Appeared in 15 threat reports