JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.199.119.160

109.199.119.160 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 36%: ?

36%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3268344.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.199.119.160

Whois 109.199.119.160

IP Abuse Reports for 109.199.119.160:

This IP address has been reported a total of 24 times from 10 distinct sources. 109.199.119.160 was first reported on August 4th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 GES	2026-10-23 05:44:26 (4 hours ago)	Credential scanning on player_api.php (5 distinct logins in 120s). Auto-blocked by XUI Shield.	DDoS Attack Port Scan
🇳🇱 Alt255	2026-10-20 19:21:18 (2 days ago)	[ti-03ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-03ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 109.199.119.160 - - [20/Oct/2026:21:21:03 +0200] "GET /.env HTTP/1.0" 301 476 "-" "Mozilla/5.0 (Linux; Android 10; MAR-LX1M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Mobile Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 GES	2026-10-20 17:44:53 (2 days ago)	Credential scanning on player_api.php (5 distinct logins in 120s). Auto-blocked by XUI Shield.	DDoS Attack Port Scan
🇩🇪 LRob	2026-10-09 09:28:53 (2 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/plugins/cookie-law-i ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/plugins/cookie-law-info/lite/frontend/images/, /controle-acces-vaucluse/, /wp-content/plugins/cookie-law-info/lite/frontend/images/close.svg (+3 more) \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 \| 2026-10-09 09:28 UTC show less	Bad Web Bot
🇳🇱 GES	2026-10-08 06:28:57 (2 weeks ago)	Credential scanning on player_api.php (5 distinct logins in 120s). Auto-blocked by XUI Shield.	DDoS Attack Port Scan
🇫🇷 LRob	2026-10-07 18:49:04 (2 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /en/doc/wiki-hosting/visit-stati ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /en/doc/wiki-hosting/visit-statistics/ \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-29 09:30:23 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 109.199.119.160 (vmi3268344.contaboserver.net): ... show more (mod_security) mod_security (id:225170) triggered by 109.199.119.160 (vmi3268344.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 05:30:17.871386 2026] [security2:error] [pid 26702:tid 26760] [client 109.199.119.160:37728] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|darrylrichards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "darrylrichards.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aruFKZE36hnmISwNL4ayEAAAAYY"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇰 azminawwar	2026-09-19 00:02:57 (1 month ago)	[109.199.119.160] triggered by honeypot on port [80], Timestamp [2026-09-19T00:02:56Z]METHOD=GET PAT ... show more [109.199.119.160] triggered by honeypot on port [80], Timestamp [2026-09-19T00:02:56Z]METHOD=GET PATH=/dashboard HTTP=HTTP/1.0 UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, show less	Port Scan Hacking
🇺🇸 dot.mg	2026-09-17 19:01:48 (1 month ago)	Impersonating Good bots	Bad Web Bot
🇩🇪 LRob	2026-09-12 18:42:58 (1 month ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /1710/remy-hair-extensions-on-the-lookout-for-just-virgin-hair-well-then-study-a-lot-of-these-many-available-selections/ \| 2026-09-12 18:42 UTC show less	Bad Web Bot
🇺🇸 gu-alvareza	2026-09-11 05:07:37 (1 month ago)	WordPress.xmlrpc.Pingback.DoS	DDoS Attack
🇩🇪 LRob	2026-09-10 14:21:56 (1 month ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /information-pour-licencies \| 2026-09-10 14:21 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-09-09 02:16:37 (1 month ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /decouvrir-instagram/ \| 2026-09-09 02:16 UTC show less	Bad Web Bot
🇺🇸 SX Communications	2026-09-01 07:23:07 (1 month ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 109.199.119.160: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 109.199.119.160: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-08-29 08:22:37 (1 month ago)	Web spam bot from 109.199.119.160: automated HTTPS requests for fake pharmacy / prescription / drug ... show more Web spam bot from 109.199.119.160: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; paths: /bbs/202507/Online-Safe-Pharmacy. show less	Web Spam Blog Spam Bad Web Bot

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇰 198.167.206.135

🇬🇧 185.247.137.99

🇬🇧 185.216.145.183

🇨🇴 181.51.89.42

🇨🇳 180.101.149.231

🇩🇪 165.22.22.165

🇨🇳 121.43.53.237

🇨🇳 121.41.164.30

🇷🇸 109.92.31.249

🇮🇶 93.180.222.57

🇺🇸 23.134.168.19

🇺🇸 209.145.49.159

🇺🇿 198.163.192.183

🇳🇱 195.178.110.247

🇨🇳 182.242.168.49

🇮🇩 182.10.137.208

🇦🇷 181.46.9.7

🇷🇺 176.112.110.158

🇺🇸 172.233.179.122

🇩🇪 161.35.68.120