JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 75.119.140.66

75.119.140.66 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	www.dkwings.kylos.pl
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 75.119.140.66

Whois 75.119.140.66

IP Abuse Reports for 75.119.140.66:

This IP address has been reported a total of 42 times from 23 distinct sources. 75.119.140.66 was first reported on November 17th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Diskominfo Lumajang	2025-11-23 04:45:03 (7 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=2	Brute-Force
🇮🇩 Diskominfo Lumajang	2025-11-21 04:45:03 (7 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=2	Brute-Force
🇮🇩 Diskominfo Lumajang	2025-11-19 04:45:02 (7 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=2	Brute-Force
🇮🇩 Diskominfo Lumajang	2025-11-18 04:45:01 (7 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=2	Brute-Force
🇦🇹 urnilxfgbez	2025-11-17 23:45:00 (7 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 Hugopvigo	2025-11-17 22:11:35 (7 months ago)	"2025-11-17 22:11:34+00:00 75.119.140.66 IP con score alto (100) detectada en el log."	Brute-Force SSH
🇯🇵 zwh	2025-11-17 18:12:35 (7 months ago)	Port Scan	Port Scan
🇺🇸 bigscoots.com	2025-11-17 13:04:30 (7 months ago)	(sshd) Failed SSH login from 75.119.140.66 (GB/United Kingdom/mail.cupple.at): 5 in the last 3600 se ... show more (sshd) Failed SSH login from 75.119.140.66 (GB/United Kingdom/mail.cupple.at): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Nov 16 19:40:59 12283 sshd[29122]: Invalid user admin from 75.119.140.66 port 44018 Nov 16 19:41:00 12283 sshd[29122]: Failed password for invalid user admin from 75.119.140.66 port 44018 ssh2 Nov 16 19:41:13 12283 sshd[29189]: Invalid user orangepi from 75.119.140.66 port 42440 Nov 16 19:41:14 12283 sshd[29189]: Failed password for invalid user orangepi from 75.119.140.66 port 42440 ssh2 Nov 16 19:41:26 12283 sshd[29193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.119.140.66 user=root show less	Brute-Force SSH
🇮🇹 LTM	2025-11-17 07:20:01 (7 months ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇩🇪 Grizzlytools	2025-11-17 06:37:51 (7 months ago)	Kingcopy(AI-IDS)RouterOS: Portscanner detected.	Port Scan
🇺🇸 TPI-Abuse	2025-11-17 05:56:18 (7 months ago)	(mod_security) mod_security (id:218420) triggered by 75.119.140.66 (mail.cupple.at): 1 in the last 3 ... show more (mod_security) mod_security (id:218420) triggered by 75.119.140.66 (mail.cupple.at): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 00:56:13.022270 2025] [security2:error] [pid 5664:tid 5664] [client 75.119.140.66:56586] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.96:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.96"] [uri "/hello.world"] [unique_id "aRq4_W4oOaxnWbCings-mAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 KPS	2025-11-17 05:38:16 (7 months ago)	PortscanN	Port Scan
🇺🇸 bigscoots.com	2025-11-17 05:24:50 (7 months ago)	(sshd) Failed SSH login from 75.119.140.66 (GB/-/mail.cupple.at): 5 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 75.119.140.66 (GB/-/mail.cupple.at): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 17 05:24:15 23198 sshd[2352]: Invalid user admin from 75.119.140.66 port 57798 Nov 17 05:24:17 23198 sshd[2352]: Failed password for invalid user admin from 75.119.140.66 port 57798 ssh2 Nov 17 05:24:32 23198 sshd[2369]: Invalid user orangepi from 75.119.140.66 port 47234 Nov 17 05:24:35 23198 sshd[2369]: Failed password for invalid user orangepi from 75.119.140.66 port 47234 ssh2 Nov 17 05:24:46 23198 sshd[2384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.119.140.66 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-17 05:08:50 (7 months ago)	(sshd) Failed SSH login from 75.119.140.66 (GB/United Kingdom/mail.cupple.at): 5 in the last 3600 se ... show more (sshd) Failed SSH login from 75.119.140.66 (GB/United Kingdom/mail.cupple.at): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Nov 16 23:08:09 20603 sshd[7343]: Invalid user admin from 75.119.140.66 port 37958 Nov 16 23:08:11 20603 sshd[7343]: Failed password for invalid user admin from 75.119.140.66 port 37958 ssh2 Nov 16 23:08:23 20603 sshd[7408]: Invalid user orangepi from 75.119.140.66 port 42578 Nov 16 23:08:25 20603 sshd[7408]: Failed password for invalid user orangepi from 75.119.140.66 port 42578 ssh2 Nov 16 23:08:35 20603 sshd[7412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.119.140.66 user=root show less	Brute-Force SSH
🇮🇩 Diskominfo Lumajang	2025-11-17 04:40:02 (7 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=2	Brute-Force

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 54.234.126.11

🇺🇸 216.25.89.139

🇲🇽 192.154.196.23

🇺🇸 146.190.112.200

🇺🇸 137.184.122.78

🇨🇳 123.56.24.159

🇨🇳 113.125.165.132

🇸🇬 47.245.127.202

🇸🇬 47.237.178.25

🇸🇬 47.237.171.232

🇨🇳 27.215.181.185

🇸🇬 8.222.180.242

🇳🇱 172.71.182.128

🇪🇸 79.112.70.88

🇯🇲 66.9.166.55

🇱🇹 45.227.254.170

🇵🇪 38.25.95.14

🇴🇲 37.41.49.107

🇸🇪 2a03:d780:0:196::13a8:c07d

🇵🇱 176.53.159.198