AbuseIPDB » 109.199.116.50

109.199.116.50 was found in our database!

This IP was reported 149 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	srv336.gsmail.org
Domain Name	contabo.com
Country	Germany
City	Dusseldorf, Nordrhein-Westfalen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 109.199.116.50

Whois 109.199.116.50

IP Abuse Reports for 109.199.116.50:

This IP address has been reported a total of 149 times from 93 distinct sources. 109.199.116.50 was first reported on September 13th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-09-24 20:54:20 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-09-23 20:54:23 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ghostwarriors	2024-09-23 06:21:21 (3 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
RAP	2024-09-23 06:19:14 (3 weeks ago)	2024-09-23 06:19:14 UTC Unauthorized activity to TCP port 22. SSH	SSH
ModiranHost.com	2024-09-23 06:12:36 (3 weeks ago)	Sep 23 09:41:14 IN=eth0 OUT= MAC=[REMOVED]:[REMOVED]:08:00 SRC=109.199.116.50 DST=[REMOVED].152.80 L ... show moreSep 23 09:41:14 IN=eth0 OUT= MAC=[REMOVED]:[REMOVED]:08:00 SRC=109.199.116.50 DST=[REMOVED].152.80 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=18632 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
MPL	2024-09-23 05:44:44 (3 weeks ago)	tcp/2222	Port Scan
MPL	2024-09-23 05:44:44 (3 weeks ago)	tcp/2222 (2 or more attempts)	Port Scan
rtbh.com.tr	2024-09-16 20:54:36 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
urnilxfgbez	2024-09-15 22:45:00 (4 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
tecnicorioja	2024-09-15 22:01:08 (4 weeks ago)	(Mod_security) [15/Sep/2024:06:59:17.580400	Brute-Force Bad Web Bot Web App Attack
rtbh.com.tr	2024-09-15 20:54:38 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
gu-alvareza	2024-09-15 07:05:24 (4 weeks ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking Web App Attack
pmouse	2024-09-15 07:02:17 (4 weeks ago)	>10 unauthorized SSH connections	Brute-Force SSH
nNordic	2024-09-15 05:27:14 (4 weeks ago)	Connection attempt blocked by IDS/IPS from IP 109.199.116.50/32	Hacking
Bot-Hammer-Ban	2024-09-15 05:20:21 (4 weeks ago)	2024-09-15T07:20:07.950633+02:00 localhost sshd[3394529]: Failed password for root from 109.199.116. ... show more2024-09-15T07:20:07.950633+02:00 localhost sshd[3394529]: Failed password for root from 109.199.116.50 port 49028 ssh2 2024-09-15T07:20:18.307233+02:00 localhost sshd[3394531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.199.116.50 user=root 2024-09-15T07:20:20.843427+02:00 localhost sshd[3394531]: Failed password for root from 109.199.116.50 port 42118 ssh2 ... show less	Brute-Force SSH