JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.89.50

158.173.89.50 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Sofia, Bulgaria
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.89.50

Whois 158.173.89.50

IP Abuse Reports for 158.173.89.50:

This IP address has been reported a total of 146 times from 36 distinct sources. 158.173.89.50 was first reported on April 29th 2026, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-24 15:34:53 (22 minutes ago)	2026-09-24T10:58:17.062281 SPARTAN sshd[14642]: pam_unix(sshd:auth): authentication failure; logname ... show more 2026-09-24T10:58:17.062281 SPARTAN sshd[14642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.173.89.50 2026-09-24T10:58:19.115699 SPARTAN sshd[14642]: Failed password for invalid user administrator from 158.173.89.50 port 55543 ssh2 2026-09-24T11:34:39.505244 SPARTAN sshd[27743]: Invalid user ansible from 158.173.89.50 port 45538 2026-09-24T11:34:39.509629 SPARTAN sshd[27743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.173.89.50 2026-09-24T11:34:41.447801 SPARTAN sshd[27743]: Failed password for invalid user ansible from 158.173.89.50 port 45538 ssh2 ... show less	Brute-Force SSH
🇩🇪 DerDoktor	2026-09-24 15:10:02 (47 minutes ago)	I0924 13:26:09.41135 fail2ban action triggered	Port Scan Brute-Force SSH
🇺🇸 aboschke	2026-09-24 15:00:22 (56 minutes ago)	SSH brute force attempt. Tried invalid user: debug	Brute-Force SSH
🇩🇪 DerDoktor	2026-09-24 14:10:02 (1 hour ago)	I0924 12:13:50.39489 fail2ban action triggered	Port Scan Brute-Force SSH
🇨🇦 hpg	2026-09-24 13:51:04 (2 hours ago)	48 invalid SSH login attempts from 158.173.89.50 in the last 13.7 hours	Brute-Force SSH
🇩🇪 DerDoktor	2026-09-24 13:10:02 (2 hours ago)	I0924 11:38:02.13992 fail2ban action triggered	Port Scan Brute-Force SSH
🇩🇪 DerDoktor	2026-09-24 12:10:02 (3 hours ago)	I0924 10:27:35.17182 fail2ban action triggered	Port Scan Brute-Force SSH
🇩🇪 DerDoktor	2026-09-24 11:10:02 (4 hours ago)	I0924 09:15:30.65875 fail2ban action triggered	Port Scan Brute-Force SSH
🇺🇸 ras07	2026-09-24 11:00:10 (4 hours ago)	Brute force SSH login attempts.	Brute-Force SSH
🇨🇦 Sakusen	2026-09-24 10:34:47 (5 hours ago)	SSH (TCP/22): 42 login attempts, 14 distinct usernames, 39 distinct passwords	Brute-Force SSH
🇩🇪 DerDoktor	2026-09-24 10:10:17 (5 hours ago)	I0924 08:39:34.46727 fail2ban action triggered	Port Scan Brute-Force SSH
Anonymous	2026-09-24 09:32:53 (6 hours ago)	(sshd) Failed SSH login from 158.173.89.50 (DK/Denmark/-): 5 in the last 3600 secs; Ports: ; Direct ... show more (sshd) Failed SSH login from 158.173.89.50 (DK/Denmark/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Sep 24 04:56:39 server5 sshd[22561]: Invalid user admin from 158.173.89.50 Sep 24 04:56:39 server5 sshd[22561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.173.89.50 Sep 24 04:56:40 server5 sshd[22561]: Failed password for invalid user admin from 158.173.89.50 port 58607 ssh2 Sep 24 05:32:47 server5 sshd[11963]: Invalid user admin from 158.173.89.50 Sep 24 05:32:47 server5 sshd[11963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.173.89.50 show less	Brute-Force
🇩🇪 DerDoktor	2026-09-24 09:10:02 (6 hours ago)	I0924 07:29:34.38174 fail2ban action triggered	Port Scan Brute-Force SSH
🇺🇸 theunixguy	2026-09-24 09:01:55 (6 hours ago)		Brute-Force SSH
🇩🇪 DerDoktor	2026-09-24 08:10:02 (7 hours ago)	I0924 06:19:06.00762 fail2ban action triggered	Port Scan Brute-Force SSH

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.81.240.158

🇨🇴 190.242.142.56

🇩🇪 167.94.145.21

🇫🇮 147.185.133.223

🇨🇳 2408:8722:1900:4::219

🇧🇪 35.205.40.47

🇺🇸 35.196.233.40

🇷🇴 2.57.121.112

🇮🇳 2404:7c80:8d:6536:9101:a090:7f50:5bdb

🇺🇦 188.190.75.175

🇧🇷 187.84.6.88

🇮🇹 185.30.47.121

🇺🇸 67.60.144.157

🇺🇸 50.114.167.23

🇺🇸 20.38.35.186

🇺🇸 198.251.84.69

🇸🇬 193.37.32.199

🇲🇽 187.188.45.165

🇨🇳 175.6.158.150

🇮🇳 128.185.33.241