JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

155.133.22.163

Neutral Activity

Abuse Confidence Score

0% Low Risk

34 reports

26 reporters · latest 4 months ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS51167
Hostname(s): vmi3705481.contaboserver.net
Domain Name: contabo.com
Country: 🇫🇷 France
City: Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

155.133.22.163 has been reported 34 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

34 from 26 distinct reporters

First reported

June 3rd 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-16 10:21:13 UTC · (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 wallop.org	2026-06-09 10:43:54 UTC · (5 months ago)	2026-06-09T05:43:19.047619-05:00 whangaparaoa.com sshd-session[611106]: Failed password for invalid user admin from 155.133.22.163 port 43598 ssh2 2026-06-09T05:43:51.486230-05:00 whangaparaoa.com sshd-session[611114]: Invalid user orangepi from 155. ... show more 2026-06-09T05:43:19.047619-05:00 whangaparaoa.com sshd-session[611106]: Failed password for invalid user admin from 155.133.22.163 port 43598 ssh2 2026-06-09T05:43:51.486230-05:00 whangaparaoa.com sshd-session[611114]: Invalid user orangepi from 155.133.22.163 port 55156 2026-06-09T05:43:51.491637-05:00 whangaparaoa.com sshd-session[611114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.133.22.163 2026-06-09T05:43:53.715718-05:00 whangaparaoa.com sshd-session[611114]: Failed password for invalid user orangepi from 155.133.22.163 port 55156 ssh2 ... show less	Brute-Force SSH
🇧🇪 webbie	2026-06-09 05:44:05 UTC · (5 months ago)	155.133.22.163 - - [09/Jun/2026:07:44:02 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 3749 "-" "libredtail-http" 155.133.22.163 - - [09/Jun/2026:07:44:02 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32 ... show more 155.133.22.163 - - [09/Jun/2026:07:44:02 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 3749 "-" "libredtail-http" 155.133.22.163 - - [09/Jun/2026:07:44:02 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 3749 "-" "libredtail-http" 155.133.22.163 - - [09/Jun/2026:07:44:03 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 3754 "-" "libredtail-http" 155.133.22.163 - - [09/Jun/2026:07:44:03 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 458 "-" "libredtail-http" 155.133.22.163 - - [09/Jun/2026:07:44:03 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 458 "-" "libredtail-http" ... show less	Brute-Force Web App Attack
🇮🇩 Diskominfo Lumajang	2026-06-07 03:35:06 UTC · (5 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=4	Brute-Force
🇫🇮 tjs	2026-06-05 15:30:00 UTC · (5 months ago)	web attack, shell attempt	Hacking Web App Attack
🇮🇩 Diskominfo Lumajang	2026-06-05 03:35:05 UTC · (5 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=4	Brute-Force
🇫🇷 security.rdmc.fr	2026-06-04 07:18:56 UTC · (5 months ago)	Port Scan Attack proto:TCP src:51746 dst:23	Port Scan
🇺🇸 xmission.com	2026-06-04 06:51:38 UTC · (5 months ago)	Blocked by UFW (TCP on 2375) Source port: 58634 TTL: 51 Packet length: 40 TOS: 0x00 This report (for 155.133.22.163) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇳🇱 Futunk	2026-06-04 06:26:41 UTC · (5 months ago)	2026-06-04T08:26:40.652386+02:00 ezri sshd[270113]: User root from 155.133.22.163 not allowed because not listed in AllowUsers 2026-06-04T08:26:40.683088+02:00 ezri sshd[270113]: Connection closed by invalid user root 155.133.22.163 port 56696 [preau ... show more 2026-06-04T08:26:40.652386+02:00 ezri sshd[270113]: User root from 155.133.22.163 not allowed because not listed in AllowUsers 2026-06-04T08:26:40.683088+02:00 ezri sshd[270113]: Connection closed by invalid user root 155.133.22.163 port 56696 [preauth] 2026-06-04T08:26:40.813794+02:00 ezri sshd[270117]: User root from 155.133.22.163 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇸🇬 anotherwatcher	2026-06-04 06:15:42 UTC · (5 months ago)	bad bot	Bad Web Bot
🇸🇪 Peter Gabaldon	2026-06-04 05:58:07 UTC · (5 months ago)	Fail2Ban Triggered By 155.133.22.163	Port Scan SSH
🇺🇸 MPL	2026-06-04 05:31:42 UTC · (5 months ago)	tcp/2375 (2 or more attempts)	Port Scan
🇺🇸 bigscoots.com	2026-06-04 04:14:30 UTC · (5 months ago)	(sshd) Failed SSH login from 155.133.22.163 (DE/Germany/vmi3318038.contaboserver.net): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jun 4 04:13:12 23822 sshd[11868]: Invalid user admin from 155.133.22.163 port 55832 Jun ... show more (sshd) Failed SSH login from 155.133.22.163 (DE/Germany/vmi3318038.contaboserver.net): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jun 4 04:13:12 23822 sshd[11868]: Invalid user admin from 155.133.22.163 port 55832 Jun 4 04:13:14 23822 sshd[11868]: Failed password for invalid user admin from 155.133.22.163 port 55832 ssh2 Jun 4 04:13:45 23822 sshd[12077]: Invalid user orangepi from 155.133.22.163 port 54810 Jun 4 04:13:48 23822 sshd[12077]: Failed password for invalid user orangepi from 155.133.22.163 port 54810 ssh2 Jun 4 04:14:19 23822 sshd[12436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.133.22.163 user=root show less	Brute-Force SSH
🇮🇩 Diskominfo Lumajang	2026-06-04 03:35:04 UTC · (5 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=4	Brute-Force
🇺🇸 TPI-Abuse	2026-06-04 03:33:01 UTC · (5 months ago)	(mod_security) mod_security (id:218420) triggered by 155.133.22.163 (vmi3318038.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 23:32:55.680313 2026] [security2:error] [pid 17684:tid 17684] [c ... show more (mod_security) mod_security (id:218420) triggered by 155.133.22.163 (vmi3318038.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 23:32:55.680313 2026] [security2:error] [pid 17684:tid 17684] [client 155.133.22.163:37922] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.202:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.202"] [uri "/hello.world"] [unique_id "aiDx55X3m1wtdhTF3WKS5QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2a06:98c0:3600::103

🇺🇸 2001:470:1:332::8

🇳🇱 195.178.110.137

🇨🇴 190.25.242.149

🇳🇱 185.218.86.14

🇹🇭 165.154.119.158

🇺🇸 162.216.149.160

🇺🇸 159.65.233.253

🇵🇭 122.3.159.164

🇮🇳 121.242.232.216

🇺🇸 93.152.85.51

🇫🇷 85.217.140.49

🇷🇴 80.94.95.115

🇧🇬 79.124.60.194

🇩🇪 64.89.161.160

🇵🇭 45.195.15.171

🇩🇪 36.255.97.229

🇧🇪 35.210.33.79

🇧🇪 35.206.153.176

🇧🇪 35.206.140.186