JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 87.139.199.109

87.139.199.109 was found in our database!

This IP was reported 568 times. Confidence of Abuse is 100%: ?

100%

ISP	Deutsche Telekom AG
Usage Type	Fixed Line ISP
ASN	AS3320
Hostname(s)	p578bc76d.dip0.t-ipconnect.de
Domain Name	telekom.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 87.139.199.109

Whois 87.139.199.109

IP Abuse Reports for 87.139.199.109:

This IP address has been reported a total of 568 times from 192 distinct sources. 87.139.199.109 was first reported on December 21st 2025, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 s@ch@	2026-06-11 11:45:02 (13 minutes ago)	Jail: ssh \| SSH brute-force	Brute-Force SSH
🇫🇮 Kotiacat_one	2026-06-10 23:22:36 (12 hours ago)	2026-06-11T02:22:35.415579+03:00 gre sshd-session[24602]: Invalid user ubnt from 87.139.199.109 port ... show more 2026-06-11T02:22:35.415579+03:00 gre sshd-session[24602]: Invalid user ubnt from 87.139.199.109 port 60308 ... show less	Brute-Force SSH
🇫🇮 Kotiacat_one	2026-06-10 21:51:45 (14 hours ago)	2026-06-10T23:51:44.583385+02:00 game2 sshd-session[1017823]: Invalid user supervisor from 87.139.19 ... show more 2026-06-10T23:51:44.583385+02:00 game2 sshd-session[1017823]: Invalid user supervisor from 87.139.199.109 port 64035 ... show less	Brute-Force SSH
🇫🇷 LegitMT	2026-06-10 21:43:33 (14 hours ago)	Honeypot: cowrie SSH brute-force login as 'supervisor'/'default' from 87.139.199.109 at 2026-06-10T2 ... show more Honeypot: cowrie SSH brute-force login as 'supervisor'/'default' from 87.139.199.109 at 2026-06-10T21:43:31.729533Z show less	Brute-Force SSH
Anonymous	2026-06-10 15:20:53 (20 hours ago)	2026-06-10T18:50:50.455899+03:30 digitalogic sshd-session[331870]: pam_unix(sshd:auth): authenticati ... show more 2026-06-10T18:50:50.455899+03:30 digitalogic sshd-session[331870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.139.199.109 2026-06-10T18:50:52.155479+03:30 digitalogic sshd-session[331870]: Failed password for invalid user unknown from 87.139.199.109 port 62938 ssh2 2026-06-10T18:50:52.740096+03:30 digitalogic sshd-session[331870]: Connection closed by invalid user unknown 87.139.199.109 port 62938 [preauth] ... show less	Brute-Force SSH
🇩🇪 licen777	2026-06-10 14:51:11 (21 hours ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-10T14:32:45Z and 2026-06-1 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-10T14:32:45Z and 2026-06-10T14:51:11Z show less	Brute-Force SSH
🇺🇸 Deltron3030	2026-06-10 06:46:21 (1 day ago)	SSH brute-force attempt from 87.139.199.109 blocked by NewYork5.	Brute-Force SSH
🇺🇸 wristhulk	2026-06-09 23:59:48 (1 day ago)	Honeypot: credential brute-force on Cowrie SSH honeypot (port 22). Username: 'ubnt' Password: 'admin ... show more Honeypot: credential brute-force on Cowrie SSH honeypot (port 22). Username: 'ubnt' Password: 'admin'. show less	Brute-Force SSH
🇺🇸 [email protected]	2026-06-09 21:10:39 (1 day ago)	Total attacks: 1	Brute-Force
🇫🇷 ImMarvolo	2026-06-09 17:42:18 (1 day ago)	Unauthorized connection attempt detected neo-backup, SSH Brute-Force	Brute-Force SSH
🇩🇪 licen777	2026-06-09 14:29:34 (1 day ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-09T14:16:32Z and 2026-06-0 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-09T14:16:32Z and 2026-06-09T14:29:34Z show less	Brute-Force SSH
🇮🇩 sockominfo	2026-06-08 14:00:53 (2 days ago)	Zimbra: Login failures from malicious IP: 87.139.199.109. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 87.139.199.109. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-08 13:00:09 (2 days ago)	Zimbra: Login failures from malicious IP: 87.139.199.109. Threat Score: 4.9/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 87.139.199.109. Threat Score: 4.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 Paul Smith	2026-05-28 18:21:05 (1 week ago)	Email Auth Brute force attack 5/5 in last day	Brute-Force
🇬🇧 Aetherweb Ark	2026-05-28 09:42:06 (2 weeks ago)	87.139.199.109 (DE/Germany/p578bc76d.dip0.t-ipconnect.de), N distributed smtpauth attacks on account ... show more 87.139.199.109 (DE/Germany/p578bc76d.dip0.t-ipconnect.de), N distributed smtpauth attacks on account in the last X secs show less	Brute-Force

Showing 1 to 15 of 568 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.2.140.186

🇪🇹 196.189.51.246

🇳🇱 193.176.31.223

🇺🇦 192.162.117.212

🇩🇪 162.55.99.72

🇺🇸 157.245.123.148

🇵🇭 143.44.146.87

🇺🇦 91.228.217.59

🇺🇸 34.145.134.40

🇳🇱 5.187.35.142

🇺🇸 216.73.217.172

🇪🇪 213.35.128.24

🇧🇬 212.70.152.153

🇳🇱 212.30.37.40

🇬🇧 193.163.125.146

🇳🇱 185.223.235.14

🇺🇦 176.103.2.236

🇵🇰 153.117.7.17

🇨🇳 114.96.86.176

🇺🇸 92.119.36.66