JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.120.201.109

216.120.201.109 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 0%: ?

ISP	Shock Hosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS395092
Domain Name	shockhosting.com
Country	🇺🇸 United States of America
City	Denver, Colorado

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.120.201.109

Whois 216.120.201.109

IP Abuse Reports for 216.120.201.109:

This IP address has been reported a total of 89 times from 80 distinct sources. 216.120.201.109 was first reported on July 8th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 melroy89	2026-03-28 20:39:52 (3 months ago)	216.120.201.109 - - [28/Mar/2026:21:39:12 +0100] "GET /owa/ HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windo ... show more 216.120.201.109 - - [28/Mar/2026:21:39:12 +0100] "GET /owa/ HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "mx.melroy.org" 0.000 216.120.201.109 - - [28/Mar/2026:21:39:12 +0100] "GET /owa/ HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "owa.melroy.org" 0.000 216.120.201.109 - - [28/Mar/2026:21:39:12 +0100] "GET /owa/ HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "webmail.melroy.org" 0.000 216.120.201.109 - - [28/Mar/2026:21:39:12 +0100] "GET /owa/ HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "remote.melroy.org" 0.000 216.120.201.109 - - [28/Mar/2026:21:39:13 +0100] "GET /owa/ HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "exchange.melroy.org" 0.000 216.120.201.109 - - [28/Mar/2026:21:39:13 +0100] "GET /owa/ HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "email.melroy.org" 0.000 216.120.201.109 - - [28/Mar/2026:21:39:13 +0100] "GET /autodiscover/autodiscover.xml HTTP/1.1" 403 ... show less	Web App Attack
🇪🇸 Gem	2026-03-25 23:17:38 (3 months ago)	Unauthorized web scan.	Web App Attack
🇸🇪 KIDOS	2026-03-24 07:09:26 (3 months ago)	KASM auto: exploit_/owa/auth/logon.aspx	Brute-Force SSH
🇧🇪 sid3windr	2026-03-20 20:29:09 (3 months ago)	GET /owa/auth/logon.aspx?replaceCurrent=1&url=https://195.160.166.171/ecp (Tarpitted for 1d15h8m28s, ... show more GET /owa/auth/logon.aspx?replaceCurrent=1&url=https://195.160.166.171/ecp (Tarpitted for 1d15h8m28s, wasted 8.06MB) show less	Web App Attack
🇧🇪 boxed-it	2026-03-20 12:13:02 (3 months ago)	GET /owa/service.svc (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇩🇪 pigro	2026-03-19 10:36:00 (3 months ago)	216.120.201.109 - - [19/Mar/2026:11:35:59 +0100] "GET /owa/auth/logon.aspx?replaceCurrent=1&url=http ... show more 216.120.201.109 - - [19/Mar/2026:11:35:59 +0100] "GET /owa/auth/logon.aspx?replaceCurrent=1&url=https://51.68.191.188/ecp HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" ... show less	Web App Attack
🇸🇪 peterh	2026-03-19 07:32:00 (3 months ago)	216.120.201.109 - - [19/Mar/2026:06:22:34 +0100] "GET /EWS/Exchange.asmx HTTP/1.1"	Web App Attack Hacking
Anonymous	2026-03-19 05:21:33 (3 months ago)	T: f2b 404 5x	Web App Attack
🇩🇪 barbarella	2026-03-19 02:15:27 (3 months ago)	Multiple (3) times attack on https port 443: Scanning for Outlook Web Access (OWA) & Microsoft Excha ... show more Multiple (3) times attack on https port 443: Scanning for Outlook Web Access (OWA) & Microsoft Exchange Control Panel (GET /owa/auth/logon.aspx?replaceCurrent=1&url=https://85.184.251.46/ecp) 03:16:07 Microsoft Exchange OWASSRF-Exploit-Methode (ProxyNotShell) attack (GET /EWS/Exchange.asmx) 03:16:08 Scanning for Outlook Web Access (OWA) & Microsoft Exchange Control Panel (GET /owa/service.svc) show less	Hacking Web App Attack
🇨🇿 rawnullbyte	2026-03-19 00:16:05 (3 months ago)	🚨 Honeypot triggered! 🖥️ System: NPot 🎯 Target: Unknown 🛣️ Path: /owa/auth/logon.aspx 👤 Attacker IP: ... show more 🚨 Honeypot triggered! 🖥️ System: NPot 🎯 Target: Unknown 🛣️ Path: /owa/auth/logon.aspx 👤 Attacker IP: 216.120.201.109 ⏰ Time: 2026-03-19 00:16:04 📡 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36 show less	Web App Attack
🇸🇰 iplusv	2026-03-18 23:00:11 (3 months ago)	Automatic report from IV firewall log.	Port Scan Hacking Brute-Force
Anonymous	2026-03-18 22:54:33 (3 months ago)	Reported from Nginx log analysis 19. Log: 216.120.201.109 - - [18/Mar/2026:xx:xx:xx 0100] "GET / HT ... show more Reported from Nginx log analysis 19. Log: 216.120.201.109 - - [18/Mar/2026:xx:xx:xx 0100] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.8" "-" "US United States Denver" "AS395092" "Shock Hosting LLC" show less	Port Scan Brute-Force SSH
🇨🇳 ThreatBook.io	2026-03-18 22:31:03 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.120.201.109 2026-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/216.120.201.109 2026-03-18 00:38:18 /owa/auth/logon.aspx?replaceCurrent=1&url=http://47.243.10.103/ecp show less	Web App Attack
🇸🇰 HILKA	2026-03-18 22:30:06 (3 months ago)	Automatic report from HLK firewall log.	Port Scan Hacking Brute-Force
🇸🇰 DSSMART	2026-03-18 22:18:26 (3 months ago)	Automatic report from DSSM firewall log.	Port Scan Hacking Brute-Force

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.194

🇨🇳 183.184.54.61

🇨🇳 180.168.60.146

🇺🇸 162.243.56.26

🇱🇹 141.98.11.11

🇨🇳 112.11.230.160

🇨🇭 107.189.10.124

🇨🇳 101.206.211.72

🇷🇴 92.118.39.77

🇺🇸 91.230.168.96

🇺🇸 91.230.168.94

🇺🇸 66.132.224.81

🇺🇸 66.132.186.132

🇲🇾 49.125.201.64

🇨🇳 218.81.180.21

🇬🇧 213.166.84.44

🇬🇧 213.166.84.36

🇧🇪 198.235.24.219

🇧🇪 198.235.24.178

🇧🇪 198.235.24.176