158.220.119.216

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
27 reports
25 reporters · latest 3 days ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi2617592.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 25 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 6 🇬🇧 United Kingdom of Great Britain and Northern Ireland 5
Most common categories Port Scan 17 Hacking 9 Brute-Force 6 Fraud VoIP 5 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
🇺🇸 NetGuard
Web App Attack
🇬🇧 openstrike.co.uk
6 packets to port 5060
Brute-Force
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇧🇷 chronos
SIP: Connection attempt to the VoIP signaling service, commonly probed by SIP scanners. Port scanning activity detected. | Port: 5060 | Proto: UDP | rDNS: vmi2617592.contaboserver.net | AS: AS51167 Contabo GmbH | Location: France, Lauterbourg (~20km)
Port Scan
🇧🇷 diego
[rede-top188] 11/01/2026-16:54:18.765199, 158.220.119.216, Protocol: 17, ET SCAN Sipvicious Scan
Port Scan
Anonymous
Automated vulnerability scanning.
Hacking
🇧🇷 diego
[rede-164-29] 11/01/2026-16:35:51.560493, 158.220.119.216, Protocol: 17, ET SCAN Sipvicious Scan
Port Scan
🇩🇪 iNetWorker
firewall-block, port(s): 5060/udp
Port Scan
🇩🇪 _ArminS_
SIP I/O/R 5137:5060 detected 2026.11.01 20:16:38 blocked until 2026.12.21 13:19:25
Brute-Force Fraud VoIP
🇬🇧 Nov
Unauthorized access attempt (udp/5060)
Port Scan
Anonymous
suricata IPS/IDS detection, ruleset ET SCAN Sipvicious User-Agent Detected (friendly-scanner), ET SCAN Sipvicious Scan
Port Scan
🇬🇧 myintarweb
"sipvicious"<sip:[email protected]>;tag=35333937653933393133633401313734343139313939
Fraud VoIP
🇫🇷 Petre 21_ip
2026-11-01T13:18:36.625324+01:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=158.220.119.216 DST=155.133.26.57 LEN=433 TOS=0x00 PREC=0x00 TTL=60 ID=30169 DF PROTO=UDP SPT=5150 DPT=5060 LEN=413 ...
Port Scan
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.180.246.206
🇲🇽 201.124.171.198
🇧🇴 200.58.81.226
🇵🇪 200.37.103.36
🇨🇳 175.6.54.21
🇫🇷 169.40.142.172
🇦🇷 148.222.194.54
🇬🇧 146.70.119.56
🇧🇷 143.202.67.186
🇨🇳 111.21.60.158
🇺🇸 73.112.94.209
🇨🇴 45.191.44.11
🇨🇳 223.198.162.22
🇺🇸 216.180.246.1
🇧🇷 187.73.183.12
🇩🇪 185.204.171.55
🇮🇹 185.15.170.71
🇰🇷 183.106.237.242
🇨🇳 183.63.216.198
🇫🇷 169.40.142.134
feedback