JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.199.117.194

109.199.117.194 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3397940.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.199.117.194

Whois 109.199.117.194

IP Abuse Reports for 109.199.117.194:

This IP address has been reported a total of 30 times from 25 distinct sources. 109.199.117.194 was first reported on June 25th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Gwyneth Llewelyn	2026-06-29 14:15:31 (1 hour ago)	109.199.117.194 - - [29/Jun/2026:15:15:30 +0100] "GET /cgi-bin/ HTTP/2.0" 404 994 "-" "Mozilla/5.0 ( ... show more 109.199.117.194 - - [29/Jun/2026:15:15:30 +0100] "GET /cgi-bin/ HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot
🇨🇭 4server	2026-06-29 05:57:07 (9 hours ago)	''	Hacking Web App Attack
🇸🇬 lancernz	2026-06-29 04:32:17 (11 hours ago)	Auto-detected: 28 hits on westernitm.co.nz within 100 log lines. Blocked by Cowork server monitoring ... show more Auto-detected: 28 hits on westernitm.co.nz within 100 log lines. Blocked by Cowork server monitoring. show less	Web App Attack
🇳🇱 Site.eu	2026-06-29 03:17:35 (12 hours ago)	Excessive multi-domain requests	Brute-Force
🇫🇮 YF	2026-06-29 03:00:43 (12 hours ago)	WordPress directory enumeration	Web App Attack
🇩🇪 Lino Project	2026-06-29 02:55:41 (12 hours ago)	CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-admin-interface-probing	Hacking
🇦🇺 2000cn.com.au	2026-06-29 02:46:58 (12 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
Anonymous	2026-06-29 02:12:08 (13 hours ago)	Suspicious activity detected in web server access logs	Web App Attack
Anonymous	2026-06-28 23:20:05 (16 hours ago)	Bot / scanning and/or hacking attempts: GET /file/ HTTP/1.1, GET /images/ HTTP/1.1, GET /admin/ HTTP ... show more Bot / scanning and/or hacking attempts: GET /file/ HTTP/1.1, GET /images/ HTTP/1.1, GET /admin/ HTTP/1.1, GET /.tmb/ HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 SCHAPPY	2026-06-28 22:30:10 (17 hours ago)	Excessive crawling, scraping, request limit exceeded, HTTP code 429.	Web App Attack
Anonymous	2026-06-28 21:09:09 (18 hours ago)	109.199.117.194 - - [28/Jun/2026:23:08:32 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 437 "-" "Moz ... show more 109.199.117.194 - - [28/Jun/2026:23:08:32 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.199.117.194 - - [28/Jun/2026:23:08:32 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.199.117.194 - - [28/Jun/2026:23:08:34 +0200] "GET /wp-admin/maint/ HTTP/1.1" 403 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.199.117.194 - - [28/Jun/2026:23:08:34 +0200] "GET /wp-admin/maint/ HTTP/1.1" 403 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.199.117.194 - - [28/Jun/2026:23:08:36 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G ... show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-28 08:25:38 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-27 20:33:58 (1 day ago)	109.199.117.194 - - [27/Jun/2026:22:33:21 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 250 "-" "M ... show more 109.199.117.194 - - [27/Jun/2026:22:33:21 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.199.117.194 - - [27/Jun/2026:22:33:21 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.199.117.194 - - [27/Jun/2026:22:33:23 +0200] "GET /wp-admin/images/ HTTP/1.1" 403 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.199.117.194 - - [27/Jun/2026:22:33:23 +0200] "GET /wp-admin/images/ HTTP/1.1" 403 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.199.117.194 - - [27/Jun/2026:22:33:41 +0200] "GET /wp-includes/ HTTP/1.1" 403 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-27 12:19:40 (2 days ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇳🇿 Antinson	2026-06-27 08:42:50 (2 days ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.166

🇺🇬 196.0.107.158

🇺🇸 172.93.106.153

🇺🇸 148.153.250.101

🇮🇳 122.177.243.15

🇫🇷 85.31.239.212

🇿🇦 41.181.156.205

🇯🇵 40.74.68.248

🇧🇪 35.195.125.229

🇰🇷 211.240.117.71

🇧🇷 205.210.31.227

🇺🇸 192.3.245.167

🇳🇱 176.65.139.222

🇭🇰 159.138.2.167

🇵🇪 149.34.48.186

🇵🇱 146.59.32.16

🇨🇳 106.52.169.134

🇫🇷 85.204.70.88

🇱🇹 81.30.98.44

🇱🇹 62.60.130.14