AbuseIPDB » 173.212.198.199

173.212.198.199 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 21%: ?

21%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vmi1524614.contaboserver.net
Domain Name	contabo.com
Country	Hong Kong
City	Hong Kong, Hong Kong

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 173.212.198.199

Whois 173.212.198.199

IP Abuse Reports for 173.212.198.199:

This IP address has been reported a total of 74 times from 25 distinct sources. 173.212.198.199 was first reported on April 4th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Savvii	2024-08-19 11:11:38 (4 weeks ago)	20 attempts against mh_ha-misbehave-ban on ceres	Brute-Force Bad Web Bot Web App Attack
SCHAPPY	2024-08-16 01:58:30 (1 month ago)	Critical web app attack detected. Restricted File Access Attempt	Web App Attack
zynex	2024-08-15 21:52:48 (1 month ago)	URL Probing: /agta-record.info/.env	Web App Attack
Anonymous	2024-08-15 16:08:12 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-08-15 09:31:23 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
TPI-Abuse	2024-08-15 07:56:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 173.212.198.199 (vmi1524614.contaboserver.net): ... show more(mod_security) mod_security (id:210492) triggered by 173.212.198.199 (vmi1524614.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 15 03:56:43.898916 2024] [security2:error] [pid 17622:tid 17797] [client 173.212.198.199:45776] [client 173.212.198.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aapm.info"] [uri "/.env"] [unique_id "Zr20u-qUH4AlpIXIaBUcsgAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
Savvii	2024-08-14 21:11:46 (1 month ago)	20 attempts against mh_ha-misbehave-ban on ceres	Brute-Force Bad Web Bot Web App Attack
iNetWorker	2024-06-19 15:33:02 (2 months ago)	trolling for resource vulnerabilities	Web App Attack Web App Attack
Stefan Dreher	2024-06-19 07:56:37 (2 months ago)	173.212.198.199 - - [19/Jun/2024:09:56:22 +0200] "GET /.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Maci ... show more173.212.198.199 - - [19/Jun/2024:09:56:22 +0200] "GET /.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 173.212.198.199 - - [19/Jun/2024:09:56:25 +0200] "GET /.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 173.212.198.199 - - [19/Jun/2024:09:56:29 +0200] "GET /aldin.at/.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 173.212.198.199 - - [19/Jun/2024:09:56:33 +0200] "GET /aldin.at/.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 173.212.198.199 - - [19/Jun/2024:09:56:36 +0200] "GET /.en show less	Hacking Hacking Brute-Force Brute-Force
Savvii	2024-06-18 23:47:15 (3 months ago)	20 attempts against mh-misbehave-ban on storm	Brute-Force Brute-Force Bad Web Bot Bad Web Bot Web App Attack Web App Attack
Anonymous	2024-06-18 22:43:48 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 173.212.198.199 (DE/Germany/vmi1524614. ... show more(mod_security) mod_security triggered on hostname [redacted] 173.212.198.199 (DE/Germany/vmi1524614.contaboserver.net) show less	SQL Injection SQL Injection
iNetWorker	2024-06-17 14:10:27 (3 months ago)	firewall-block, port(s): 80/tcp	Port Scan Port Scan
bodixite.net	2024-06-16 22:35:09 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 173.212.198.199 (DE/Germany/vmi1524614. ... show more(mod_security) mod_security triggered on hostname [redacted] 173.212.198.199 (DE/Germany/vmi1524614.contaboserver.net) show less	SQL Injection SQL Injection
zynex	2024-06-16 19:09:18 (3 months ago)	URL Probing: /blasi.info/.env	Web App Attack Web App Attack
TPI-Abuse	2024-06-16 12:51:58 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 173.212.198.199 (vmi1524614.contaboserver.net): ... show more(mod_security) mod_security (id:210492) triggered by 173.212.198.199 (vmi1524614.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 16 08:51:51.698827 2024] [security2:error] [pid 30665:tid 47587256219392] [client 173.212.198.199:46140] [client 173.212.198.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bhsclassof68.info"] [uri "/.env"] [unique_id "Zm7f55hF_LE8898ImwmQNAAAABQ"] show less	Brute-Force Brute-Force Bad Web Bot Bad Web Bot Web App Attack Web App Attack