158.220.103.199

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
30 reports
15 reporters · latest 1 month ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi2762427.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

158.220.103.199 has been reported 30 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
30 from 15 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to mySQL port 3306) detectado de 158.220.103.199
Port Scan Brute-Force SSH
🇺🇸 RAP
2026-09-14 01:17:36 UTC Unauthorized activity to TCP port 3306.
Port Scan
🇺🇸 OceanTreasure
tcp/3306; SCAN Suspicious inbound to mySQL port 3306 @ 2026-09-13T21:14:31Z
Port Scan
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to mySQL port 3306) detectado de 158.220.103.199
Port Scan Brute-Force SSH
🇦🇹 begou.dev
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/3306
Port Scan
🇳🇱 Cloud86 B.V.
categories: Brute-Force
Brute-Force
🇦🇷 Bruno
Port Scanner: 158.220.103.199
Port Scan
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to PostgreSQL port 5432) detectado de 158.220.103.199
Port Scan Brute-Force SSH
Anonymous
denied traffic to a honeypot network. destination port 3306.
Port Scan Hacking
🇺🇸 RAP
2026-09-10 06:34:48 UTC Unauthorized activity to TCP port 3306.
Port Scan
🇧🇷 diego
[rede-164-29] 09/09/2026-23:21:56.584542, 158.220.103.199, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306
Hacking
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to PostgreSQL port 5432) detectado de 158.220.103.199
Port Scan Brute-Force SSH
🇺🇸 RAP
2026-09-08 12:58:38 UTC Unauthorized activity to TCP port 3306.
Port Scan
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to PostgreSQL port 5432) detectado de 158.220.103.199
Port Scan Brute-Force SSH
🇭🇺 tokyohost.eu
Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇪 217.211.15.160
🇺🇸 216.25.90.45
🇨🇦 167.99.179.244
🇺🇸 162.216.150.25
🇺🇸 159.223.157.20
🇺🇦 31.134.89.138
🇷🇴 2.57.121.25
🇭🇰 172.71.215.213
🇧🇩 103.166.58.226
🇫🇷 85.217.140.52
🇰🇷 14.51.12.142
🇺🇦 176.103.25.138
🇧🇪 198.235.24.178
🇳🇱 193.47.62.69
🇯🇵 153.204.95.54
🇺🇸 148.153.56.174
🇺🇸 107.180.88.176
🇬🇧 193.176.29.15
🇧🇾 178.172.210.135
🇮🇳 152.32.159.62
feedback