109.199.106.18

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
187 reports
107 reporters Β· latest 2 days ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi3094511.contaboserver.net
Domain Name
contabo.com
Country
πŸ‡«πŸ‡· France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
187 from 107 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡«πŸ‡· France 68 πŸ‡©πŸ‡ͺ Germany 35 πŸ‡ΊπŸ‡Έ United States of America 28
Most common categories SSH 176 Brute-Force 170 Port Scan 21 Hacking 21 Exploited Host 12
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡¨πŸ‡³ さいとうあすか
Brute-Force SSH
πŸ‡«πŸ‡· Samuel La Manna
SSH brute-force against my server: 16 failed attempts, usernames tried: deploy, tongyixuan, root, songjunyi, admin, coin.
Brute-Force SSH
πŸ‡°πŸ‡· yazzang
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
Hacking Brute-Force Exploited Host SSH
πŸ‡©πŸ‡ͺ SiyCah
109.199.106.18 fell into Endlessh tarpit; 0/16 total connections are currently still open. Total time wasted: 1m 2s. Total bytes sent by tarpit: 5.00KiB. Report generated by Endlessh Report Generator v1.2.3
Brute-Force Port Scan SSH Hacking
πŸ‡¬πŸ‡§ andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
πŸ‡¨πŸ‡³ さいとうあすか
Brute-Force SSH
πŸ‡ΊπŸ‡Έ HamSammich
Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-11-05T13:33Z). Usernames tried: cloud.
Brute-Force SSH
πŸ‡«πŸ‡· Coco Bongo
2026-11-05T12:37:30.601870+01:00 [redacted] sshd[1684252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.199.106.18 2026-11-05T12:37:32.186700+01:00 vmd12 ...
Brute-Force SSH
πŸ‡«πŸ‡· otiima
Nov 5 10:13:41 box sshd[3572909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.199.106.18 user=root Nov 5 10:13:44 box sshd[3572909]: Failed password for root from 109.199.106.18 port 33756 ssh2 ...
Brute-Force SSH
πŸ‡«πŸ‡· suble.org
Brute-Force SSH
πŸ‡«πŸ‡· floofy.tech
Brute-Force SSH
πŸ‡«πŸ‡· Coco Bongo
2026-11-05T08:03:18.399707+01:00 [redacted] sshd[1667785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.199.106.18 2026-11-05T08:03:20.409218+01:00 vmd12 ...
Brute-Force SSH
πŸ‡«πŸ‡· otiima
Nov 5 07:00:42 box sshd[3496797]: Invalid user deploy from 109.199.106.18 port 36724 ...
Brute-Force SSH
πŸ‡©πŸ‡ͺ SiyCah
109.199.106.18 fell into Endlessh tarpit; 0/10 total connections are currently still open. Total time wasted: 40s. Total bytes sent by tarpit: 4.00KiB. Report generated by Endlessh Report Generator v1.2.3
Brute-Force Port Scan SSH Hacking
πŸ‡«πŸ‡· suble.org
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡³πŸ‡± 200.138.46.171
πŸ‡ͺπŸ‡¬ 196.202.69.143
πŸ‡·πŸ‡΄ 92.118.39.77
πŸ‡§πŸ‡ͺ 35.210.82.144
πŸ‡·πŸ‡΄ 2.57.121.25
πŸ‡ΊπŸ‡Έ 216.25.90.87
πŸ‡ΉπŸ‡­ 203.150.122.127
πŸ‡³πŸ‡± 193.176.31.209
πŸ‡¨πŸ‡΄ 181.134.198.173
πŸ‡¨πŸ‡­ 179.43.153.18
πŸ‡°πŸ‡· 125.139.124.120
πŸ‡¨πŸ‡³ 111.194.205.244
πŸ‡ΊπŸ‡Έ 52.188.87.65
πŸ‡§πŸ‡ͺ 34.52.152.34
πŸ‡ΊπŸ‡Έ 2a03:2880:ff:3::
πŸ‡¨πŸ‡³ 218.21.243.58
πŸ‡ΊπŸ‡Έ 205.210.31.2
feedback