JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.220.101.141

158.220.101.141 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 7%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3306826.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.220.101.141

Whois 158.220.101.141

IP Abuse Reports for 158.220.101.141:

This IP address has been reported a total of 71 times from 50 distinct sources. 158.220.101.141 was first reported on April 5th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:02:46 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-04-13 10:18:35 (1 month ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Exploited Host
Anonymous	2026-04-07 10:02:04 (2 months ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Exploited Host
🇫🇷 SpaceHost-Server	2026-04-05 22:32:32 (2 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-04-05 22:17:02 (2 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/158.220.101.141	SSH
🇫🇷 security.rdmc.fr	2026-04-05 21:07:44 (2 months ago)	Port Scan Attack proto:TCP src:64195 dst:23	Port Scan
🇺🇸 bigscoots.com	2026-04-05 20:30:00 (2 months ago)	(sshd) Failed SSH login from 158.220.101.141 (DE/Germany/vmi3207650.contaboserver.net): 5 in the las ... show more (sshd) Failed SSH login from 158.220.101.141 (DE/Germany/vmi3207650.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 5 15:28:41 15532 sshd[18811]: Invalid user admin from 158.220.101.141 port 46088 Apr 5 15:28:43 15532 sshd[18811]: Failed password for invalid user admin from 158.220.101.141 port 46088 ssh2 Apr 5 15:29:14 15532 sshd[18958]: Invalid user orangepi from 158.220.101.141 port 59762 Apr 5 15:29:17 15532 sshd[18958]: Failed password for invalid user orangepi from 158.220.101.141 port 59762 ssh2 Apr 5 15:29:48 15532 sshd[18987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.220.101.141 user=root show less	Brute-Force SSH
🇵🇱 wikdomain	2026-04-05 20:26:24 (2 months ago)	WEB Apache HTTP Server Path traversal (CVE-2021-41773) Attack at 2026-04-05T20:26:24+00:00, Source: ... show more WEB Apache HTTP Server Path traversal (CVE-2021-41773) Attack at 2026-04-05T20:26:24+00:00, Source: 158.220.101.141, Destination: 192.168.1.52 show less	Brute-Force
🇳🇱 bitosis	2026-04-05 20:25:58 (2 months ago)	2026-04-05T21:24:57.192262+01:00 jumphost sshd-session[185917]: Invalid user admin from 158.220.101. ... show more 2026-04-05T21:24:57.192262+01:00 jumphost sshd-session[185917]: Invalid user admin from 158.220.101.141 port 54920 2026-04-05T21:25:27.452365+01:00 jumphost sshd-session[185919]: Invalid user orangepi from 158.220.101.141 port 53698 2026-04-05T21:25:57.724064+01:00 jumphost sshd-session[185924]: User root from 158.220.101.141 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-05 20:14:00 (2 months ago)	(sshd) Failed SSH login from 158.220.101.141 (DE/Germany/vmi3207650.contaboserver.net): 5 in the las ... show more (sshd) Failed SSH login from 158.220.101.141 (DE/Germany/vmi3207650.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 5 15:12:32 14506 sshd[16939]: Invalid user admin from 158.220.101.141 port 51854 Apr 5 15:12:34 14506 sshd[16939]: Failed password for invalid user admin from 158.220.101.141 port 51854 ssh2 Apr 5 15:13:05 14506 sshd[17031]: Invalid user orangepi from 158.220.101.141 port 39084 Apr 5 15:13:07 14506 sshd[17031]: Failed password for invalid user orangepi from 158.220.101.141 port 39084 ssh2 Apr 5 15:13:38 14506 sshd[17098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.220.101.141 user=root show less	Brute-Force SSH
🇳🇱 DrLex0	2026-04-05 20:00:16 (2 months ago)	Stupid attempts at going above server root and other libredtail garbage 158.220.101.141 80 - [05/Ap ... show more Stupid attempts at going above server root and other libredtail garbage 158.220.101.141 80 - [05/Apr/2026:20:00:16 +0000] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 400 528 "-" "libredtail-http" 158.220.101.141 80 - [05/Apr/2026:20:00:16 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 528 "-" "libredtail-http" 158.220.101.141 80 - [05/Apr/2026:20:00:16 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 528 "-" "libredtail-http" show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 bigscoots.com	2026-04-05 19:58:17 (2 months ago)	(sshd) Failed SSH login from 158.220.101.141 (DE/Germany/vmi3207650.contaboserver.net): 5 in the las ... show more (sshd) Failed SSH login from 158.220.101.141 (DE/Germany/vmi3207650.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 5 14:57:04 14214 sshd[17379]: Invalid user admin from 158.220.101.141 port 59386 Apr 5 14:57:06 14214 sshd[17379]: Failed password for invalid user admin from 158.220.101.141 port 59386 ssh2 Apr 5 14:57:37 14214 sshd[17389]: Invalid user orangepi from 158.220.101.141 port 53466 Apr 5 14:57:39 14214 sshd[17389]: Failed password for invalid user orangepi from 158.220.101.141 port 53466 ssh2 Apr 5 14:58:10 14214 sshd[17454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.220.101.141 user=root show less	Brute-Force SSH
🇩🇪 ValtonTahiri	2026-04-05 19:50:19 (2 months ago)	Honeypot hit: SSH handshake/banner (24 bytes) Payload: SSH-2.0-libssh2_1.11.1 on 2222/TCP (1 attempt ... show more Honeypot hit: SSH handshake/banner (24 bytes) Payload: SSH-2.0-libssh2_1.11.1 on 2222/TCP (1 attempt) show less	SSH
🇺🇸 LotPhantom	2026-04-05 19:48:59 (2 months ago)	2026-04-05T19:48:41.452912+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-04-05T19:48:41.452912+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=158.220.101.141 DST=157.230.217.55 LEN=40 TOS=0x08 PREC=0x40 TTL=48 ID=58077 PROTO=TCP SPT=59092 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 2026-04-05T19:48:41.452937+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=158.220.101.141 DST=157.230.217.55 LEN=40 TOS=0x08 PREC=0x40 TTL=48 ID=58077 PROTO=TCP SPT=59092 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 bigscoots.com	2026-04-05 19:42:57 (2 months ago)	(sshd) Failed SSH login from 158.220.101.141 (DE/Germany/vmi3207650.contaboserver.net): 5 in the las ... show more (sshd) Failed SSH login from 158.220.101.141 (DE/Germany/vmi3207650.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 5 14:41:33 14994 sshd[14376]: Invalid user admin from 158.220.101.141 port 56428 Apr 5 14:41:35 14994 sshd[14376]: Failed password for invalid user admin from 158.220.101.141 port 56428 ssh2 Apr 5 14:42:06 14994 sshd[14439]: Invalid user orangepi from 158.220.101.141 port 39120 Apr 5 14:42:08 14994 sshd[14439]: Failed password for invalid user orangepi from 158.220.101.141 port 39120 ssh2 Apr 5 14:42:39 14994 sshd[14450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.220.101.141 user=root show less	Brute-Force SSH

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 132.243.24.226

🇺🇸 216.25.89.155

🇮🇷 185.129.234.17

🇺🇸 147.185.132.216

🇮🇩 103.112.5.7

🇱🇹 81.30.98.158

🇺🇸 76.89.128.40

🇳🇱 45.148.10.141

🇧🇪 35.233.108.192

🇺🇸 34.26.226.183

🇺🇸 209.50.175.245

🇻🇳 171.231.192.52

🇵🇰 139.135.44.81

🇫🇷 91.231.89.58

🇧🇬 79.124.60.146

🇩🇪 69.5.169.196

🇨🇳 59.110.239.11

🇺🇸 34.181.231.109

🇩🇪 34.32.52.249

🇸🇬 188.166.210.196