JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.212.216.253

173.212.216.253 was found in our database!

This IP was reported 206 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3321670.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.212.216.253

Whois 173.212.216.253

IP Abuse Reports for 173.212.216.253:

This IP address has been reported a total of 206 times from 121 distinct sources. 173.212.216.253 was first reported on April 8th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-26 05:53:22 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇸🇮 administrator	2026-05-04 16:20:28 (3 months ago)	2026-04-09 03:57:43,603 fail2ban.actions [1117]: NOTICE [apache-badbots] Ban 173.212.216.253 ... show more 2026-04-09 03:57:43,603 fail2ban.actions [1117]: NOTICE [apache-badbots] Ban 173.212.216.253 2026-04-09 03:57:43,632 fail2ban.actions [1117]: NOTICE [apache-custom] Ban 173.212.216.253 2026-04-09 03:57:43,975 fail2ban.actions [1117]: NOTICE [malwarenetworks] Ban 173.212.216.253 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇫🇮 nNordic	2026-04-25 08:37:36 (4 months ago)	Connection attempt blocked by IDS/IPS from 173.212.216.253/32	Hacking
🇺🇸 c y	2026-04-22 11:28:37 (4 months ago)	Cmd Injection attack detected	SSH
🇦🇹 urnilxfgbez	2026-04-20 22:45:00 (4 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇪 AutosOnShow	2026-04-20 17:13:05 (4 months ago)	blocked for webapp attack \| path requested: /index.php \| seen at 2026-04-20 17:12:09.530 \|	Web App Attack
Anonymous	2026-04-20 17:01:11 (4 months ago)	Try to connect to Port_Scan_2222_stealth	Port Scan
🇺🇸 bigscoots.com	2026-04-20 16:34:54 (4 months ago)	(sshd) Failed SSH login from 173.212.216.253 (DE/Germany/vmi3154211.contaboserver.net): 5 in the las ... show more (sshd) Failed SSH login from 173.212.216.253 (DE/Germany/vmi3154211.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 20 11:33:41 14106 sshd[26319]: Invalid user admin from 173.212.216.253 port 53198 Apr 20 11:33:43 14106 sshd[26319]: Failed password for invalid user admin from 173.212.216.253 port 53198 ssh2 Apr 20 11:34:14 14106 sshd[26393]: Invalid user orangepi from 173.212.216.253 port 33414 Apr 20 11:34:15 14106 sshd[26393]: Failed password for invalid user orangepi from 173.212.216.253 port 33414 ssh2 Apr 20 11:34:46 14106 sshd[26398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.212.216.253 user=root show less	Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia	2026-04-20 16:20:32 (4 months ago)	Honeypot hit: HTTP/1.1 request on 2375 GET /containers/json User-Agent: libredtail-http Accept: / ... show more Honeypot hit: HTTP/1.1 request on 2375 GET /containers/json User-Agent: libredtail-http Accept: /; 2375 [1] TCP show less	Web App Attack
🇺🇸 yzfdude1	2026-04-20 15:59:08 (4 months ago)	Apr 20 09:59:04 b146-54 sshd[952338]: Invalid user orangepi from 173.212.216.253 port 33874 Apr 20 0 ... show more Apr 20 09:59:04 b146-54 sshd[952338]: Invalid user orangepi from 173.212.216.253 port 33874 Apr 20 09:59:04 b146-54 sshd[952338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.212.216.253 Apr 20 09:59:07 b146-54 sshd[952338]: Failed password for invalid user orangepi from 173.212.216.253 port 33874 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-04-20 15:57:17 (4 months ago)	Fail2ban Nginx log integration.	Brute-Force SSH Port Scan
🇺🇸 MPL	2026-04-20 15:49:04 (4 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇩🇪 lumbermatt_de	2026-04-20 15:28:01 (4 months ago)	Vulnerability exploit attack detected	Web App Attack
🇺🇸 bigscoots.com	2026-04-20 15:27:49 (4 months ago)	(sshd) Failed SSH login from 173.212.216.253 (DE/Germany/vmi3154211.contaboserver.net): 5 in the las ... show more (sshd) Failed SSH login from 173.212.216.253 (DE/Germany/vmi3154211.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 20 10:26:22 15623 sshd[12100]: Invalid user admin from 173.212.216.253 port 42692 Apr 20 10:26:24 15623 sshd[12100]: Failed password for invalid user admin from 173.212.216.253 port 42692 ssh2 Apr 20 10:26:55 15623 sshd[12107]: Invalid user orangepi from 173.212.216.253 port 43636 Apr 20 10:26:57 15623 sshd[12107]: Failed password for invalid user orangepi from 173.212.216.253 port 43636 ssh2 Apr 20 10:27:29 15623 sshd[12182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.212.216.253 user=root show less	Brute-Force SSH
🇨🇿 Honzas	2026-04-20 15:13:23 (4 months ago)	Unsolicited connection attemp, port 443/TCP	Brute-Force

Showing 1 to 15 of 206 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.109.200.241

🇮🇩 157.15.67.253

🇺🇸 149.19.253.163

🇸🇬 104.22.66.248

🇫🇷 91.231.89.105

🇳🇱 45.148.10.157

🇭🇰 2602:80d:1003::33

🇹🇼 198.235.24.120

🇨🇳 183.198.166.152

🇧🇷 177.181.3.120

🇧🇷 168.205.220.213

🇳🇱 160.119.71.92

🇺🇸 143.42.164.97

🇷🇴 92.118.39.77

🇳🇱 89.248.172.11

🇺🇸 85.239.151.10

🇨🇦 85.217.149.70

🇧🇷 45.164.217.222

🇭🇰 34.92.12.88

🇰🇷 220.90.56.237