JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.220.121.219

158.220.121.219 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3541451.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.220.121.219

Whois 158.220.121.219

IP Abuse Reports for 158.220.121.219:

This IP address has been reported a total of 49 times from 31 distinct sources. 158.220.121.219 was first reported on September 9th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 its101	2026-09-11 18:00:48 (1 hour ago)	Detected by LockdownAccess security monitoring. Flags: Identified as bot/crawler by user agent. Secu ... show more Detected by LockdownAccess security monitoring. Flags: Identified as bot/crawler by user agent. Security scanner detected: go-http-client show less	Bad Web Bot Port Scan Web App Attack
🇫🇮 mnazibo	2026-09-11 18:00:23 (1 hour ago)	Date: Sep 11 20:54:42 2026 EAT \| Reported IP: 158.220.121.219 mod_security \| id: 920350 \| FR/usernam ... show more Date: Sep 11 20:54:42 2026 EAT \| Reported IP: 158.220.121.219 mod_security \| id: 920350 \| FR/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address show less	SQL Injection Brute-Force Bad Web Bot
🇺🇸 xxkodedxx	2026-09-11 17:58:59 (1 hour ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: DE / AS51167 Contabo GmbH Active: 17:58:34 UTC Volume: 1 HTTP req Probed: / Status mix: 444×1 Vhost fishing: 67.217.240.72 UA: "Go-http-client/1.1" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-09-11 17:58:48 (1 hour ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-09-11 17:57:24 (1 hour ago)	Unauthorized access (80/tcp/http)	Port Scan Web App Attack
🇩🇪 derLoosi	2026-09-11 17:52:39 (1 hour ago)	HV1.2 Blocked by UFW	Port Scan
🇩🇪 ghostwarriors	2026-09-11 17:50:33 (1 hour ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ratcarcher-labs	2026-09-11 17:14:59 (1 hour ago)	[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=60 attacks=9 depth=2 ... show more [Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=60 attacks=9 depth=2 node=node-eu-west canary=no human_score=65 agentic=0 cc=FR asn=Contabo GmbH \| Data provided by Ratcarcher Labs · https://ratcarcher-labs.com · docs https://api.ratcarcher-labs.com/api/v1/public/docs show less	Port Scan Bad Web Bot
🇸🇬 celestialcity	2026-09-11 16:37:14 (2 hours ago)	Blocked by UFW on celestialcityas [8081/tcp] \| SPT: 35624 \| TTL: 232 \| LEN: 40 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityas [8081/tcp] \| SPT: 35624 \| TTL: 232 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-11 16:31:42 (2 hours ago)	Sep 11 12:15:59 localhost kernel: [117488475.289978] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Sep 11 12:15:59 localhost kernel: [117488475.289978] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.220.121.219 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=237 ID=54321 PROTO=TCP SPT=56958 DPT=8081 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 11 12:15:59 localhost kernel: [117488475.289997] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.220.121.219 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=237 ID=54321 PROTO=TCP SPT=56958 DPT=8081 SEQ=1254896690 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 11 12:31:42 localhost kernel: [117489418.342838] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.220.121.219 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=238 ID=54321 PROTO=TCP SPT=49112 DPT=8081 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 11 12:31:42 localhost kernel: [117489418.342853] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.220.121.219 DST=[mungedIP2] L show less	Port Scan
🇩🇪 zupan	2026-09-11 16:25:49 (2 hours ago)	Blocked by UFW on vps [8081/tcp] \| SPT: 35067 \| TTL: 245 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [8081/tcp] \| SPT: 35067 \| TTL: 245 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 iNetWorker	2026-09-11 16:20:54 (2 hours ago)	trying to access non-authorized port	Port Scan
🇩🇪 luxuria.cfd	2026-09-11 16:20:24 (2 hours ago)	Honeypot port scan detected. Auto-blocked by XUI Shield.	DDoS Attack Port Scan
Anonymous	2026-09-11 16:15:48 (2 hours ago)	8081/tcp (1 or more attempts)	Port Scan
🇬🇧 kiwi.network	2026-09-11 16:14:56 (2 hours ago)	Incessant port scan:	Port Scan Hacking Exploited Host

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a00:1450:4013:c14::12c

🇨🇳 218.203.113.135

🇳🇱 195.178.110.26

🇧🇷 191.227.223.121

🇺🇸 172.253.86.116

🇸🇬 157.245.157.155

🇧🇷 152.32.199.115

🇧🇬 109.160.32.102

🇧🇬 109.160.32.76

🇺🇸 66.132.186.181

🇫🇷 51.91.96.79

🇸🇬 43.172.182.235

🇫🇷 37.187.35.26

🇦🇺 34.129.166.57

🇧🇪 34.76.8.52

🇻🇳 27.118.20.168

🇻🇳 171.244.201.80

🇳🇱 158.94.209.22

🇧🇩 103.139.236.70

🇷🇴 92.118.39.77