144.91.122.112

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
144 reports
121 reporters · latest 9 hours ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi3158941.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
144 from 121 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 42 🇺🇸 United States of America 22 🇫🇷 France 11
Most common categories Brute-Force 66 Web App Attack 66 SSH 44 Hacking 34 Port Scan 28
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 sh97
dedirock-712974921: SSH Brute Force from 144.91.122.112 at 2026-11-13 18:32:09 +04
Brute-Force SSH
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇪🇸 Gem
Unauthorized web scan.
Web App Attack
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇩🇪 TheDjRider
CrowdSec detected Known vulnerability exploitation attempt. Scenario: crowdsecurity/http-cve-2021-41773. Automatic ban triggered. Detection time (UTC): 2026-11-01T07:13:54.154036462Z. Context: http_status=400
Hacking Web App Attack
🇩🇪 Arsh
Brute-Force SSH
🇵🇱 zmx.ovh
Brute-Force SSH
🇫🇷 service Informatique
POST /hello.world
Web App Attack
🇹🇭 Sawasdee
Unwanted checking 80 or 443 port ...
Bad Web Bot
🇩🇪 wupinyin
IDS alert: ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2 (TCP/80); ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt (TCP/80) [2 events, 2026-11-01T03:13:47Z; auto-reported by CrowdSec]
Hacking Web App Attack
Anonymous
Bad Web Bot Web App Attack
🇨🇭 SOC [GOLINE SA]
FortiGate IPS: PHP.Malicious.Shell (severity high)
Hacking
Anonymous
Brute-Force SSH
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/2222 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇮🇹 adm2palazzon
Brute-Force SSH

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 113.140.0.186
🇮🇳 103.248.120.6
🇳🇱 45.148.10.151
🇺🇸 45.55.174.245
🇺🇸 13.86.117.219
🇧🇷 205.210.31.205
🇲🇽 200.66.79.102
🇭🇰 110.4.0.34
🇸🇬 103.179.44.9
🇺🇸 96.3.97.40
🇰🇷 59.11.202.38
🇫🇮 35.228.81.82
🇧🇪 207.175.211.222
🇧🇷 205.210.31.170
🇫🇷 185.194.178.37
🇵🇰 153.117.15.120
🇺🇸 136.242.121.17
🇰🇷 118.41.87.229
🇲🇾 115.164.55.153
🇨🇳 101.126.24.74
feedback