JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.123.252.28

109.123.252.28 was found in our database!

This IP was reported 228 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3115799.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.123.252.28

Whois 109.123.252.28

IP Abuse Reports for 109.123.252.28:

This IP address has been reported a total of 228 times from 125 distinct sources. 109.123.252.28 was first reported on September 5th 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-08 20:08:41 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-09-08 12:55:22 (9 months ago)	This IP address carried out 179 port scanning attempts on 07-09-2025. For more information or to rep ... show more This IP address carried out 179 port scanning attempts on 07-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇮🇳 Parth Maniar	2025-09-08 10:27:16 (9 months ago)	This IP address carried out 35 SSH credential attack (attempts) on 07-09-2025. For more information ... show more This IP address carried out 35 SSH credential attack (attempts) on 07-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-08 00:33:29 (9 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/109.123.252.28	SSH
🇹🇷 rtbh.com.tr	2025-09-07 20:08:40 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-09-07 11:10:31 (9 months ago)	109.123.252.28 (DE/Germany/vmi2781408.contaboserver.net), 5 distributed sshd attacks on account [roo ... show more 109.123.252.28 (DE/Germany/vmi2781408.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 7 06:09:31 13992 sshd[555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.44.137.176 user=root Sep 7 06:09:33 13992 sshd[555]: Failed password for root from 89.44.137.176 port 42624 ssh2 Sep 7 06:10:27 13992 sshd[648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root Sep 7 06:07:07 13992 sshd[349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root Sep 7 06:07:08 13992 sshd[349]: Failed password for root from 109.123.252.28 port 48476 ssh2 IP Addresses Blocked: 89.44.137.176 (RO/Romania/-) show less	Brute-Force SSH
🇩🇪 hserv	2025-09-07 10:59:54 (9 months ago)	2025-09-07T12:52:27.569760+02:00 topah03 sshd[2336374]: Invalid user cacti from 109.123.252.28 port ... show more 2025-09-07T12:52:27.569760+02:00 topah03 sshd[2336374]: Invalid user cacti from 109.123.252.28 port 56762 2025-09-07T12:55:00.462743+02:00 topah03 sshd[2339868]: Invalid user muhammed from 109.123.252.28 port 56524 2025-09-07T12:56:12.540504+02:00 topah03 sshd[2341467]: Invalid user minecraft from 109.123.252.28 port 38362 2025-09-07T12:57:25.787824+02:00 topah03 sshd[2343013]: Invalid user gituser from 109.123.252.28 port 52798 2025-09-07T12:59:54.425302+02:00 topah03 sshd[2346446]: Invalid user admin from 109.123.252.28 port 36726 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-07 10:53:51 (9 months ago)	(sshd) Failed SSH login from 109.123.252.28 (DE/Germany/vmi2781408.contaboserver.net): 5 in the last ... show more (sshd) Failed SSH login from 109.123.252.28 (DE/Germany/vmi2781408.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 7 05:49:00 14673 sshd[20731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root Sep 7 05:49:02 14673 sshd[20731]: Failed password for root from 109.123.252.28 port 40212 ssh2 Sep 7 05:52:21 14673 sshd[21100]: Invalid user cacti from 109.123.252.28 port 44976 Sep 7 05:52:23 14673 sshd[21100]: Failed password for invalid user cacti from 109.123.252.28 port 44976 ssh2 Sep 7 05:53:37 14673 sshd[21207]: Invalid user public from 109.123.252.28 port 38960 show less	Brute-Force SSH
🇺🇸 en0	2025-09-07 10:53:25 (9 months ago)	2025-09-07 10:53:24,854 fail2ban.actions [173456]: NOTICE [sshd] Ban 109.123.252.28	Brute-Force SSH
🇳🇱 Selckie	2025-09-07 10:52:27 (9 months ago)	fail2ban: SSH Brute-Force	Brute-Force SSH
🇮🇹 GV	2025-09-07 10:37:06 (9 months ago)	Sep 7 12:34:31 localhost sshd\[85984\]: pam_unix\(sshd:auth\): authentication failure\; logname= ui ... show more Sep 7 12:34:31 localhost sshd\[85984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root Sep 7 12:34:34 localhost sshd\[85984\]: Failed password for root from 109.123.252.28 port 41954 ssh2 Sep 7 12:35:44 localhost sshd\[86188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root Sep 7 12:35:47 localhost sshd\[86188\]: Failed password for root from 109.123.252.28 port 60734 ssh2 Sep 7 12:36:58 localhost sshd\[86201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root ... show less	Brute-Force SSH
🇩🇪 nohacefaltapapel-et.net	2025-09-07 10:34:12 (9 months ago)	2025-09-07T10:10:42.108596elastic2 sshd[13682]: Invalid user proradis from 109.123.252.28 port 41360 ... show more 2025-09-07T10:10:42.108596elastic2 sshd[13682]: Invalid user proradis from 109.123.252.28 port 41360 2025-09-07T10:20:33.111872elastic2 sshd[14597]: Invalid user testuser from 109.123.252.28 port 56752 2025-09-07T10:34:11.747239elastic2 sshd[15636]: Invalid user shuting from 109.123.252.28 port 37408 ... show less	Brute-Force SSH
🇫🇮 itbyhf	2025-09-07 10:31:51 (9 months ago)	Sep 7 10:30:34 backup sshd[3374958]: Invalid user svn from 109.123.252.28 port 44106 Sep 7 10:30:3 ... show more Sep 7 10:30:34 backup sshd[3374958]: Invalid user svn from 109.123.252.28 port 44106 Sep 7 10:30:34 backup sshd[3374958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 Sep 7 10:30:36 backup sshd[3374958]: Failed password for invalid user svn from 109.123.252.28 port 44106 ssh2 Sep 7 10:31:48 backup sshd[3375141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root Sep 7 10:31:50 backup sshd[3375141]: Failed password for root from 109.123.252.28 port 47346 ssh2 ... show less	Brute-Force SSH
🇫🇮 itbyhf	2025-09-07 10:15:46 (9 months ago)	Sep 7 10:13:23 backup sshd[3372574]: Failed password for root from 109.123.252.28 port 53034 ssh2 S ... show more Sep 7 10:13:23 backup sshd[3372574]: Failed password for root from 109.123.252.28 port 53034 ssh2 Sep 7 10:14:30 backup sshd[3372735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root Sep 7 10:14:31 backup sshd[3372735]: Failed password for root from 109.123.252.28 port 42290 ssh2 Sep 7 10:15:43 backup sshd[3372883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root Sep 7 10:15:45 backup sshd[3372883]: Failed password for root from 109.123.252.28 port 59210 ssh2 ... show less	Brute-Force SSH
🇮🇹 GV	2025-09-07 10:09:56 (9 months ago)	Sep 7 12:05:29 localhost sshd\[83932\]: pam_unix\(sshd:auth\): authentication failure\; logname= ui ... show more Sep 7 12:05:29 localhost sshd\[83932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 user=root Sep 7 12:05:31 localhost sshd\[83932\]: Failed password for root from 109.123.252.28 port 47408 ssh2 Sep 7 12:09:46 localhost sshd\[84393\]: Invalid user proradis from 109.123.252.28 Sep 7 12:09:46 localhost sshd\[84393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.123.252.28 Sep 7 12:09:47 localhost sshd\[84393\]: Failed password for invalid user proradis from 109.123.252.28 port 56994 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 228 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.22

🇧🇷 189.51.35.177

🇮🇳 182.95.43.50

🇺🇸 66.132.186.220

🇩🇪 213.209.159.227

🇺🇸 207.90.244.25

🇸🇬 203.116.129.55

🇺🇸 195.184.76.10

🇧🇷 189.51.32.213

🇻🇪 186.24.62.146

🇳🇱 185.107.80.93

🇰🇷 165.246.45.102

🇨🇳 118.145.238.60

🇨🇳 115.48.145.202

🇺🇸 107.152.32.5

🇧🇩 103.251.247.198

🇷🇺 94.190.6.122

🇬🇷 83.235.21.125

🇫🇷 51.68.34.131

🇧🇷 45.205.1.68