JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.58.137.184

169.58.137.184 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3491597.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.58.137.184

Whois 169.58.137.184

IP Abuse Reports for 169.58.137.184:

This IP address has been reported a total of 91 times from 69 distinct sources. 169.58.137.184 was first reported on August 12th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-08-14 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇳 Parth Maniar	2026-08-14 18:56:58 (1 week ago)	This IP address carried out 35 port scanning attempts on 14-08-2026. For more information or to repo ... show more This IP address carried out 35 port scanning attempts on 14-08-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇮🇳 Parth Maniar	2026-08-14 18:37:58 (1 week ago)	This IP address carried out 4 SSH credential attack (attempts) on 14-08-2026. For more information o ... show more This IP address carried out 4 SSH credential attack (attempts) on 14-08-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-08-14 08:35:09 (1 week ago)	(sshd) Failed SSH login from 169.58.137.184 (DE/Germany/vmi3491597.contaboserver.net): 5 in the last ... show more (sshd) Failed SSH login from 169.58.137.184 (DE/Germany/vmi3491597.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 14 03:33:49 14193 sshd[31929]: Invalid user admin from 169.58.137.184 port 47454 Aug 14 03:33:50 14193 sshd[31929]: Failed password for invalid user admin from 169.58.137.184 port 47454 ssh2 Aug 14 03:34:21 14193 sshd[32385]: Invalid user orangepi from 169.58.137.184 port 52288 Aug 14 03:34:24 14193 sshd[32385]: Failed password for invalid user orangepi from 169.58.137.184 port 52288 ssh2 Aug 14 03:34:55 14193 sshd[32569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.58.137.184 user=root show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-14 08:32:02 (1 week ago)	(mod_security) mod_security (id:218420) triggered by 169.58.137.184 (vmi3491597.contaboserver.net): ... show more (mod_security) mod_security (id:218420) triggered by 169.58.137.184 (vmi3491597.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 04:31:55.102933 2026] [security2:error] [pid 29665:tid 29665] [client 169.58.137.184:57364] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.69:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.69"] [uri "/hello.world"] [unique_id "an7Se2DKIJo72djhjK0kuAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-14 08:20:28 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 mxpgmbh	2026-08-14 08:09:05 (1 week ago)	2026-08-14T10:08:28.910426+02:00 ** sshd-session[34013]: pam_unix(sshd:auth): authentication failu ... show more 2026-08-14T10:08:28.910426+02:00 sshd-session[34013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.58.137.184 user=root 2026-08-14T10:08:30.844197+02:00 sshd-session[34013]: Failed password for root from 169.58.137.184 port 45714 ssh2 2026-08-14T10:09:02.303026+02:00 sshd-session[35689]: Invalid user from 169.58.137.184 port 35880 2026-08-14T10:09:02.310081+02:00 sshd-session[35689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.58.137.184 2026-08-14T10:09:04.714290+02:00 sshd-session[35689]: Failed password for invalid user ** from 169.58.137.184 port 35880 ssh2 show less	Brute-Force SSH
🇹🇭 MWA SOC	2026-08-14 08:07:27 (1 week ago)		Hacking
🇯🇵 KuhA	2026-08-14 08:04:28 (1 week ago)	GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\ ... show more GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\hi\));?>+/tmp/index1.php show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 07:59:36 (1 week ago)	(mod_security) mod_security (id:218420) triggered by 169.58.137.184 (vmi3491597.contaboserver.net): ... show more (mod_security) mod_security (id:218420) triggered by 169.58.137.184 (vmi3491597.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 03:59:28.624266 2026] [security2:error] [pid 27755:tid 27755] [client 169.58.137.184:34494] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.106:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.106"] [uri "/hello.world"] [unique_id "an7K4CFBLuTWbsnE8VH7tQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 vtchost.com	2026-08-14 07:49:34 (1 week ago)	2026-08-14T09:49:33.876596+02:00 vmi3491693 kernel: [657643.078401] PORTSCAN: IN=eth0 OUT= MAC=00:50 ... show more 2026-08-14T09:49:33.876596+02:00 vmi3491693 kernel: [657643.078401] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=169.58.137.184 DST=169.58.138.2 LEN=40 TOS=0x00 PREC=0x00 TTL=60 ID=11041 PROTO=TCP SPT=37473 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-08-14 07:49:21 (1 week ago)	tcp/23 (2 or more attempts)	Port Scan
🇨🇭 pingusurmars	2026-08-14 07:34:43 (1 week ago)	Blocked by UFW on ampereone [2375/tcp] Source port: 51802 TTL: 58 Packet length: 40 TOS: 0x00 This ... show more Blocked by UFW on ampereone [2375/tcp] Source port: 51802 TTL: 58 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 ManagedStack	2026-08-14 07:30:01 (1 week ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇩🇪 VentryShield	2026-08-14 07:03:09 (1 week ago)	p0t honeypot: telnet connection on port 23/tcp, 88 bytes received from client	IoT Targeted Brute-Force

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.127.148.6

🇺🇸 209.85.217.48

🇯🇵 202.212.191.16

🇦🇷 181.104.43.225

🇻🇳 180.93.245.203

🇺🇸 172.203.212.141

🇫🇷 146.59.148.192

🇺🇸 100.29.192.118

🇺🇸 91.230.168.129

🇳🇱 91.92.42.168

🇫🇷 38.242.235.206

🇸🇪 2a05:d016:268:8b01:63d8:e501:a68d:a7d

🇺🇸 2400:cb00:119:1000:96e2:76df:123b:8e52

🇱🇹 91.224.92.107

🇳🇱 45.148.10.151

🇺🇸 2400:cb00:119:1000:2b31:d6fa:ee9c:2180

🇧🇷 205.210.31.234

🇰🇪 102.211.147.143

🇳🇬 102.88.137.80

🇸🇬 47.82.54.227