JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.199.39.191

213.199.39.191 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 86%: ?

86%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3387805.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.199.39.191

Whois 213.199.39.191

IP Abuse Reports for 213.199.39.191:

This IP address has been reported a total of 37 times from 33 distinct sources. 213.199.39.191 was first reported on June 21st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 soc-yk	2026-07-06 00:54:11 (1 week ago)	Type: suspicious_network_activity Risk: 83 Events: 191 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 83 Events: 191 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇳🇱 Selckie	2026-07-05 18:51:48 (1 week ago)	fail2ban: NGINX unusual impact	Web App Attack
🇺🇸 RAP	2026-07-05 16:31:17 (1 week ago)	2026-07-05 16:31:17 UTC Unauthorized activity to TCP port 9200.	Port Scan
🇧🇪 sid3windr	2026-07-03 18:33:51 (2 weeks ago)	GET /.git/HEAD (Tarpitted for 1d15h8m30s, wasted 8.06MB)	Web App Attack
🇺🇸 teamsmith	2026-07-02 19:49:17 (2 weeks ago)	Fail2ban banned 213.199.39.191 (sshd) on mail.teamsmith.live	Brute-Force
🇨🇦 Not Fake	2026-07-02 14:32:00 (2 weeks ago)	$f2bV_matches	Web App Attack
🇧🇷 ufn.edu.br	2026-07-02 03:42:43 (2 weeks ago)	Jul 2 00:42:42 ws22vmsma01 sshd[31234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jul 2 00:42:42 ws22vmsma01 sshd[31234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.199.39.191 Jul 2 00:42:42 ws22vmsma01 sshd[31229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.199.39.191 Jul 2 00:42:42 ws22vmsma01 sshd[31232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.199.39.191 Jul 2 00:42:42 ws22vmsma01 sshd[31233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.199.39.191 Jul 2 00:42:42 ws22vmsma01 sshd[31231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.199.39.191 Jul 2 00:42:42 ws22vmsma01 sshd[31248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.199.39.191 ... show less	Brute-Force SSH
🇳🇱 Roderic	2026-07-01 11:42:47 (2 weeks ago)	Port Scan detected from 213.199.39.191 (FR/France/Bas-Rhin/Lauterbourg/vmi3387805.contaboserver.ne ... show more Port Scan detected from 213.199.39.191 (FR/France/Bas-Rhin/Lauterbourg/vmi3387805.contaboserver.net/[redacted]). show less	Port Scan
🇺🇸 xmission.com	2026-06-22 21:26:46 (3 weeks ago)	Blocked by UFW (TCP on 443) Source port: 54486 TTL: 47 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 54486 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 213.199.39.191) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇬🇧 Nov	2026-06-22 20:24:04 (3 weeks ago)	Unauthorized access attempt (tcp/9200)	Port Scan
🇺🇸 RAP	2026-06-22 19:54:05 (3 weeks ago)	2026-06-22 19:54:05 UTC Unauthorized activity to TCP port 9200.	Port Scan
🇩🇪 ValtonTahiri	2026-06-22 18:14:27 (3 weeks ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=213.199.39.191; proto=TCP; source_port=51106; target_port=9200; flags=SYN show less	Port Scan
Anonymous	2026-06-22 17:17:00 (3 weeks ago)		Port Scan
🇧🇬 pa4080	2026-06-22 16:22:45 (3 weeks ago)	Detected by ModSecurity. Host header is an IP address, Request URI: /	Hacking Web App Attack
🇺🇸 sefinek.net	2026-06-22 15:42:49 (3 weeks ago)	Blocked by UFW on NY01 [9200/tcp] \| SPT: 60816 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on NY01 [9200/tcp] \| SPT: 60816 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇹 213.13.4.180

🇳🇱 188.166.61.245

🇩🇪 167.94.146.73

🇻🇪 154.45.170.58

🇮🇳 117.247.239.202

🇳🇬 105.127.10.21

🇫🇷 103.110.161.154

🇱🇹 45.227.254.170

🇬🇭 41.211.4.231

🇹🇿 41.93.82.201

🇮🇳 27.123.113.10

🇳🇱 195.178.110.232

🇺🇸 173.255.242.196

🇮🇩 103.99.214.143

🇳🇴 87.120.104.75

🇨🇳 36.134.211.170

🇺🇸 2602:80d:1008::79

🇸🇬 217.217.254.115

🇩🇪 45.135.194.31

🇨🇳 218.13.26.42