JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.199.103.252

109.199.103.252 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3216159.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.199.103.252

Whois 109.199.103.252

IP Abuse Reports for 109.199.103.252:

This IP address has been reported a total of 27 times from 20 distinct sources. 109.199.103.252 was first reported on February 26th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-03-12 20:12:01 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 paneologist	2026-03-11 22:57:49 (3 months ago)	2026-03-11T20:27:01+01:00 theta asterisk\[1595\]: NOTICE\[15759\]: res_pjsip_session.c:3967 in new_i ... show more 2026-03-11T20:27:01+01:00 theta asterisk\[1595\]: NOTICE\[15759\]: res_pjsip_session.c:3967 in new_invite: anonymous: Call \(TCP:109.199.103.252:60921\) to extension \'0+033392170994\' rejected because extension not found in context \'public\'. 2026-03-11T20:33:39+01:00 theta asterisk\[1595\]: NOTICE\[15759\]: res_pjsip_session.c:3967 in new_invite: anonymous: Call \(UDP:109.199.103.252:59773\) to extension \'+33392170994\' rejected because extension not found in context \'public\'. 2026-03-11T21:00:21+01:00 theta asterisk\[1595\]: NOTICE\[15759\]: res_pjsip_session.c:3967 in new_invite: anonymous: Call \(TCP:109.199.103.252:56171\) to extension \'01133392170994\' rejected because extension not found in context \'public\'. 2026-03-11T21:02:12+01:00 theta asterisk\[1595\]: NOTICE\[15759\]: res_pjsip_session.c:3967 in new_invite: anonymous: Call \(UDP:109.199.103.252:62743\) to extension \'01133392170994\' rejected because extension not found in context \'public\'. 2026-03-11T21:02:21+01:00 theta asterisk\[ show less	Fraud VoIP Brute-Force
🇩🇪 NxtGenIT	2026-03-11 22:30:09 (3 months ago)	Sentrypeer Honeypot hit, SIP Method: ACK, User Agent: NOT_FOUND	FTP Brute-Force
🇩🇪 NxtGenIT	2026-03-11 21:02:18 (3 months ago)	Sentrypeer Honeypot hit, SIP Method: INVITE, User Agent: Avaya One-X Deskphone Edition 6.2.2 (v01)	FTP Brute-Force
🇬🇧 carter_383	2026-03-11 20:54:11 (3 months ago)	2026-03-11T20:51:10+00:00 freepbx asterisk-full: [2026-03-11 20:51:02] NOTICE[22794] res_pjsip/pjsip ... show more 2026-03-11T20:51:10+00:00 freepbx asterisk-full: [2026-03-11 20:51:02] NOTICE[22794] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '109.199.103.252:50317' (callid: 1623813644-653846462-1178398269) - No matching endpoint found 2026-03-11T20:54:10+00:00 freepbx asterisk-full: [2026-03-11 20:54:08] NOTICE[22794] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '109.199.103.252:56187' (callid: 730277367-861499475-228563565) - No matching endpoint found 2026-03-11T20:54:10+00:00 freepbx asterisk-full: [2026-03-11 20:54:08] NOTICE[22794] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '109.199.103.252:56187' (callid: 730277367-861499475-228563565) - No matching endpoint found ... show less	Hacking Brute-Force Web App Attack
🇹🇷 pamircil	2026-03-11 20:29:14 (3 months ago)	🍯 WinnieThePooh Honeypot : Botnet Activity (TCP/5060) 💀	Hacking Brute-Force SSH
🇩🇪 scolastico	2026-03-11 20:07:37 (3 months ago)	[automated] IP failed to authenticate or send unauthenticated INVITE requests	Brute-Force Fraud VoIP
🇫🇮 sgofferj	2026-03-11 20:01:29 (3 months ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇺🇸 Teknikal_Domain	2026-03-11 19:36:43 (3 months ago)	[Mar 11 15:30:41] NOTICE[108268] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected] ... show more [Mar 11 15:30:41] NOTICE[108268] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '109.199.103.252:58786' (callid: 1414067652-1677730532-262146099) - No matching endpoint found [Mar 11 15:30:41] NOTICE[108268] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '109.199.103.252:58828' (callid: 1687164589-277298648-1455108978) - No matching endpoint found [Mar 11 15:30:42] NOTICE[108268] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:[email protected]>' failed for '109.199.103.252:58850' (callid: 1133516071-535221762-1163396685) - No matching endpoint found [Mar 11 15:36:43] NOTICE[108268] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:10001:[email protected]>' failed for '109.199.103.252:55544' (callid: [email protected]) - No matching endpoint found [Mar 11 15:36:43] NOTICE[108268] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:10001:[email protected]>' ... show less	Fraud VoIP Brute-Force
🇸🇬 celestialcity	2026-03-10 10:28:18 (4 months ago)	Blocked by UFW on celestialcityas [5060/tcp] \| SPT: 53839 \| TTL: 108 \| LEN: 52 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityas [5060/tcp] \| SPT: 53839 \| TTL: 108 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Fraud VoIP
🇨🇦 polycoda	2026-03-10 10:26:47 (4 months ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇳🇱 Jeff	2026-03-10 00:15:00 (4 months ago)	Brute force SIP	Brute-Force Fraud VoIP
🇮🇪 RoboSOC	2026-03-09 18:32:55 (4 months ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: vmi3101232.contaboserver.net.	Port Scan
🇳🇱 soverin	2026-03-09 17:03:59 (4 months ago)	Network scan on port 5060	Email Spam
🇸🇰 GOVCERT	2026-03-09 15:37:24 (4 months ago)	Sweep Scan	Port Scan

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.178.81.192

🇧🇷 179.176.210.17

🇸🇪 91.236.116.50

🇮🇩 180.254.64.97

🇵🇰 103.120.71.75

🇸🇦 51.39.87.255

🇺🇸 40.76.116.132

🇬🇧 35.203.211.8

🇵🇭 202.175.223.34

🇬🇧 195.206.182.208

🇩🇪 151.243.11.230

🇺🇸 144.31.35.143

🇷🇴 80.94.92.179

🇳🇱 45.156.87.13

🇺🇸 2a04:4e40:4440:0:485:aa13:e04d:45ee

🇨🇳 183.208.22.239

🇮🇩 180.247.58.50

🇺🇸 172.217.107.23

🇳🇱 158.94.211.32

🇺🇸 147.185.132.148