JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.220.102.129

158.220.102.129 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 89%: ?

89%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmd194923.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.220.102.129

Whois 158.220.102.129

IP Abuse Reports for 158.220.102.129:

This IP address has been reported a total of 26 times from 16 distinct sources. 158.220.102.129 was first reported on June 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 sthoyer.de	2026-06-23 07:50:20 (1 day ago)	158.220.102.129 - - [23/Jun/2026:09:50:19 +0200] "GET /.env.local HTTP/1.1" 302 495 "-" "Mozilla/5.0 ... show more 158.220.102.129 - - [23/Jun/2026:09:50:19 +0200] "GET /.env.local HTTP/1.1" 302 495 "-" "Mozilla/5.0 (compatible)" 158.220.102.129 - - [23/Jun/2026:09:50:19 +0200] "GET /.env.prod HTTP/1.1" 302 495 "-" "Mozilla/5.0 (compatible)" 158.220.102.129 - - [23/Jun/2026:09:50:19 +0200] "GET /.env.old HTTP/1.1" 302 495 "-" "Mozilla/5.0 (compatible)" ... show less	Web App Attack
Anonymous	2026-06-22 23:27:06 (1 day ago)	158.220.102.129 detected on srv02	Port Scan
🇫🇷 sthoyer.de	2026-06-22 23:17:40 (1 day ago)	Jun 23 01:15:29 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jun 23 01:15:29 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.220.102.129 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=19147 PROTO=TCP SPT=49890 DPT=4000 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 23 01:16:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.220.102.129 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=50130 PROTO=TCP SPT=49890 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 23 01:16:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.220.102.129 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=50130 PROTO=TCP SPT=49890 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 23 01:17:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.220.102.129 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=54919 PROTO=TCP SPT=49890 DPT=7001 WINDOW=10 ... show less	Port Scan
🇩🇪 ISPLtd	2026-06-22 23:14:44 (1 day ago)	Jun 22 20:11:33 158.220.102.129 TCP SPT=49890 DPT=8443 SYN Jun 22 20:12:45 158.220.102.129 TCP SPT=4 ... show more Jun 22 20:11:33 158.220.102.129 TCP SPT=49890 DPT=8443 SYN Jun 22 20:12:45 158.220.102.129 TCP SPT=49890 DPT=7001 SYN Jun 22 20:14:44 158.220.102.129 TCP SPT=49890 DPT=8888 ... show less	Port Scan
🇩🇪 ManagedStack	2026-06-21 20:00:01 (2 days ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇩🇪 hackthetime	2026-06-21 19:43:29 (2 days ago)	Tried to access .env file (`/.env.prod`) [which does not exist]	Web App Attack
🇩🇪 paissangroup	2026-06-21 15:42:41 (2 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 mattk	2026-06-21 14:07:25 (2 days ago)	port scan	Port Scan
🇩🇪 ValtonTahiri	2026-06-21 14:03:40 (2 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=158.220.102.129; proto=TCP; source_port=50003; target_port=8443; flags=SYN show less	Port Scan
🇬🇧 WebServ	2026-06-21 13:21:38 (2 days ago)	Blocked by ufw after 5 attempts in last 300s.	Brute-Force
🇫🇷 sthoyer.de	2026-06-21 13:19:04 (2 days ago)	Jun 21 15:14:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jun 21 15:14:42 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.220.102.129 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=57121 PROTO=TCP SPT=47445 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 21 15:17:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.220.102.129 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=4349 PROTO=TCP SPT=47445 DPT=8000 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 21 15:17:45 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.220.102.129 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=15002 PROTO=TCP SPT=47445 DPT=8983 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 21 15:18:50 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.220.102.129 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=251 ID=16093 PROTO=TCP SPT=47445 DPT=8888 WINDOW=102 ... show less	Port Scan
🇩🇪 ISPLtd	2026-06-21 13:19:00 (2 days ago)	Jun 21 10:11:20 158.220.102.129 TCP SPT=47445 DPT=8888 SYN Jun 21 10:13:57 158.220.102.129 TCP SPT=4 ... show more Jun 21 10:11:20 158.220.102.129 TCP SPT=47445 DPT=8888 SYN Jun 21 10:13:57 158.220.102.129 TCP SPT=47445 DPT=7001 SYN Jun 21 10:18:59 158.220.102.129 TCP SPT=47445 DPT=3000 ... show less	Port Scan
🇫🇷 Little Iguana	2026-06-21 13:11:59 (2 days ago)	trying to access non-authorized port	Port Scan
🇺🇸 drewf.ink	2026-06-20 07:04:03 (4 days ago)	[07:04] Port scanning. Port(s) scanned: TCP/8888	Port Scan
🇺🇸 drewf.ink	2026-06-20 06:32:56 (4 days ago)	[06:32] Port scanning. Port(s) scanned: TCP/5000	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 152.32.156.158

🇨🇳 117.175.180.208

🇩🇪 47.245.140.167

🇳🇱 45.148.10.147

🇺🇸 44.109.219.65

🇺🇸 44.85.98.27

🇺🇸 20.65.194.142

🇺🇸 216.24.210.187

🇮🇳 202.88.209.51

🇳🇴 185.12.59.118

🇳🇱 176.65.132.17

🇭🇰 152.32.226.8

🇪🇸 82.223.49.127

🇸🇬 47.236.157.27

🇺🇸 44.202.68.228

🇨🇦 44.32.45.95

🇬🇧 213.166.84.58

🇮🇩 180.252.147.158

🇭🇰 162.211.181.66

🇸🇬 159.65.2.73