158.220.125.92
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- vmi2889867.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇫🇷 France
- City
- Lauterbourg, Grand Est
Abuse Reports
Total reports
38 from
23 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-09 UTC.
|
Brute-Force | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| 🇷🇺 vladimir.shramov |
SSH brute-force: 23 failed password/invalid-user attempts against our server taskrium.com (188.243.192.232:22), observed up to 2026-11-09 UTC in auth.log of two hosts. 0 successful logins.
|
Brute-Force | |
| 🇧🇾 hbars.by |
2026-11-05T12:20:59.823021+03:00 radionet sshd[1734838]: Invalid user ora_root from 158.220.125.92 port 34260
|
Brute-Force SSH | |
| 🇧🇾 hbars.by |
2026-11-05T07:19:13.347324+03:00 radionet sshd[1702254]: Invalid user nagios from 158.220.125.92 port 35858
|
Brute-Force SSH | |
| 🇩🇪 yakakliker.org |
|
Brute-Force | |
| Anonymous |
...
|
Brute-Force SSH | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: mikrotik:mikrotik
• Number of login attempts: 1
• Client: SSH-2.0-Go
|
Hacking SSH | |
| 🇯🇵 Xingyu Xue |
|
Brute-Force SSH | |
| 🇸🇰 Spyerfox |
Nov 4 22:15:23 <server> sshd\[12532\]: Invalid user media from 158.220.125.92Nov 4 22:15:26 <server> sshd\[12532\]: Failed password for invalid user media from 158.220.125.92 port 57220 ssh2
...
|
Brute-Force SSH | |
| 🇸🇰 Spyerfox |
Nov 4 19:00:43 <server> sshd\[2558\]: User mail from vmi2889867.contaboserver.net not allowed because not listed in AllowUsersNov 4 19:00:45 <server> sshd\[2558\]: Failed password for invalid user mail from 158.220.125.92 port 36610 ssh2
...
|
Brute-Force SSH | |
| 🇸🇰 Spyerfox |
Nov 4 15:50:07 <server> sshd\[25329\]: Invalid user inspur from 158.220.125.92Nov 4 15:50:10 <server> sshd\[25329\]: Failed password for invalid user inspur from 158.220.125.92 port 34278 ssh2
...
|
Brute-Force SSH | |
| 🇫🇷 Omar Martínez |
|
Phishing Email Spam Blog Spam | |
| 🇸🇰 Spyerfox |
Nov 4 11:59:54 <server> sshd\[12742\]: Invalid user gitlab from 158.220.125.92Nov 4 11:59:57 <server> sshd\[12742\]: Failed password for invalid user gitlab from 158.220.125.92 port 46508 ssh2
...
|
Brute-Force SSH | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: factorio:factorio
• Number of login attempts: 1
• Client: SSH-2.0-Go
|
Hacking SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown