Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 109.199.104.170
This IP address has been reported a total of
45
times from
42 distinct
sources.
109.199.104.170 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 9
reports;
United States of America
with 9
reports;
Netherlands
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
20
times;
Brute-Force
19
times;
Port Scan
15
times;
Hacking
11
times;
SSH
8
times;
Other
7
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no s ...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-09-28T13:26:38Z to 2026-09-28T13:26:38Z UTC.
2026-09-28T13:26:38Z tcp/2222 data: SSH-2.0-libssh2_1.11.1
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
2026-09-28 @ 15:17:26 (CET) ~ Blocked for trying to access: /hello.world?%ADd+allow_url_include%3d1+ ...
show more2026-09-28 @ 15:17:26 (CET) ~ Blocked for trying to access: /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp:/input
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-09-28 14:57:41 | LAST=2026-09-28 14:57:41. Last seen 2026-09-28 14:57:41.
show less
Automated Wazuh observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing ...
show moreAutomated Wazuh observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching Wazuh alert(s) between 2026-09-28T14:55:09+02:00 and 2026-09-28T14:55:09+02:00.
show less
attempted exploitation of a known vulnerability (CVE-2018-20062) — requested path: /index.php?s=/ind ...
show moreattempted exploitation of a known vulnerability (CVE-2018-20062) — requested path: /index.php?s=/index/thinkapp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello — response: 404
show less
