JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.58.150.107

169.58.150.107 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3497284.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.58.150.107

Whois 169.58.150.107

IP Abuse Reports for 169.58.150.107:

This IP address has been reported a total of 36 times from 35 distinct sources. 169.58.150.107 was first reported on August 23rd 2026, and the most recent report was 42 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 DyhnenTv	2026-08-24 08:29:44 (42 minutes ago)	CrowdSec webserver: crowdsecurity/http-cve-2021-41773	Web App Attack Bad Web Bot
🇨🇿 Prcek	2026-08-24 08:09:43 (1 hour ago)	PortScan:HOST=169.58.150.107,DPORTS=80	Port Scan
🇦🇺 LiftUp Hosting	2026-08-24 07:40:05 (1 hour ago)	Honeypot hit: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP	SSH
🇩🇪 mxpgmbh	2026-08-24 07:05:46 (2 hours ago)	2026-08-24T09:05:09.053658+02:00 ** sshd-session[28720]: pam_unix(sshd:auth): authentication failu ... show more 2026-08-24T09:05:09.053658+02:00 sshd-session[28720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.58.150.107 user=root 2026-08-24T09:05:11.051277+02:00 sshd-session[28720]: Failed password for root from 169.58.150.107 port 52786 ssh2 2026-08-24T09:05:44.053411+02:00 sshd-session[28773]: Invalid user from 169.58.150.107 port 49578 2026-08-24T09:05:44.054579+02:00 sshd-session[28773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.58.150.107 2026-08-24T09:05:45.851390+02:00 sshd-session[28773]: Failed password for invalid user ** from 169.58.150.107 port 49578 ssh2 show less	Brute-Force SSH
🇺🇸 xmission.com	2026-08-24 06:51:31 (2 hours ago)	Blocked by UFW (TCP on 80) Source port: 55779 TTL: 48 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 55779 TTL: 48 Packet length: 40 TOS: 0x08 This report (for 169.58.150.107) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇧🇾 lns.bz	2026-08-24 06:11:56 (2 hours ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 cwytech	2026-08-24 06:02:52 (3 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-cve-2021-42013.	Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2026-08-24 05:57:53 (3 hours ago)	trying to access non-authorized port	Port Scan
🇿🇦 Adrian Moisey	2026-08-24 03:49:00 (5 hours ago)	2026-08-24T05:48:24.026557+02:00 box sshd[3140593]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-08-24T05:48:24.026557+02:00 box sshd[3140593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.58.150.107 2026-08-24T05:48:26.275964+02:00 box sshd[3140593]: Failed password for invalid user admin from 169.58.150.107 port 53350 ssh2 2026-08-24T05:48:59.759363+02:00 box sshd[3140718]: Invalid user user from 169.58.150.107 port 37850 ... show less	Brute-Force SSH
🇰🇷 windykc	2026-08-24 00:31:12 (8 hours ago)	Honeypot capture. Download/C2 URLs attempted: https://217.60.195.113/sh. HTTP: 2 attacks (sample URI ... show more Honeypot capture. Download/C2 URLs attempted: https://217.60.195.113/sh. HTTP: 2 attacks (sample URIs: ['/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php']). RCE/web-shell attempts: 2 (fake-shell endpoint). Geo/ISP: FR/Contabo GmbH. Last seen: 2026-08-24T06:10:49Z. show less	Hacking Exploited Host Web App Attack
🇩🇪 Admins@FBN	2026-08-24 00:01:30 (9 hours ago)	FW-PortScan: Traffic Blocked srcport=42817 dstport=23	Port Scan
🇦🇹 urnilxfgbez	2026-08-23 22:45:00 (10 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 AetherFox	2026-08-23 22:34:48 (10 hours ago)	AetherFox VoidGuard detected: [Sun Aug 23 22:34:48.421934 2026] [authz_core:error] [pid 2994340:tid ... show more AetherFox VoidGuard detected: [Sun Aug 23 22:34:48.421934 2026] [authz_core:error] [pid 2994340:tid 2994345] [client 169.58.150.107:50554] AH01630: client denied by server configuration: proxy:https://freebeegee.draconigen.de/hello.world [Sun Aug 23 22:34:48.422034 2026] [authz_core:error] [pid 2994340:tid 2994345] [client 169.58.150.107:50554] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sun Aug 23 22:34:48.480774 2026] [authz_core:error] [pid 2994340:tid 2994362] [client 169.58.150.107:50554] AH01630: client denied by server configuration: proxy:https://freebeegee.draconigen.de/ [Sun Aug 23 22:34:48.480853 2026] [authz_core:error] [pid 2994340:tid 2994362] [client 169.58.150.107:50554] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sun Aug 23 22:34:48.499793 2026] [authz_core:error] [pid 2994340:tid 2994359] [client 169.58.150.107:50554] AH01630: client denied by server configuration: proxy: ... show less	Bad Web Bot Web App Attack
Anonymous	2026-08-23 20:21:39 (12 hours ago)	[Sun Aug 23 22:21:39.131311 2026] [core:error] [pid 287905:tid 287905] [client 169.58.150.107:37020] ... show more [Sun Aug 23 22:21:39.131311 2026] [core:error] [pid 287905:tid 287905] [client 169.58.150.107:37020] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Aug 23 22:21:39.449660 2026] [core:error] [pid 287935:tid 287935] [client 169.58.150.107:37026] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) ... show less	Bad Web Bot Web App Attack
🇩🇪 Tamsy	2026-08-23 19:25:42 (13 hours ago)	HTTPD - Buffer overflow attack	Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.46

🇳🇱 185.2.80.252

🇦🇷 181.24.10.42

🇺🇸 148.59.129.43

🇺🇸 148.59.129.34

🇺🇸 143.198.122.52

🇺🇸 104.209.144.33

🇧🇩 103.4.145.50

🇺🇸 52.7.140.95

🇫🇷 51.210.100.146

🇳🇱 45.148.10.151

🇺🇸 216.73.216.87

🇱🇹 213.176.26.69

🇩🇪 195.182.16.23

🇺🇸 192.253.209.99

🇧🇷 177.10.182.175

🇺🇸 172.190.220.228

🇧🇩 123.49.56.54

🇫🇷 91.231.89.157

🇸🇪 83.191.179.185