AbuseIPDB » 173.249.2.158

173.249.2.158 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vmi203459.contaboserver.net
Domain Name	contabo.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 173.249.2.158

Whois 173.249.2.158

IP Abuse Reports for 173.249.2.158:

This IP address has been reported a total of 125 times from 89 distinct sources. 173.249.2.158 was first reported on September 10th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
shimizu	2024-10-03 15:01:01 (1 week ago)	4 times SMTP brute-force	Hacking Brute-Force
Dario MB	2024-10-03 01:04:38 (1 week ago)	Oct 3 02:01:05 vmi1756752 sshd[3206859]: Failed password for root from 173.249.2.158 port 39304 ssh ... show moreOct 3 02:01:05 vmi1756752 sshd[3206859]: Failed password for root from 173.249.2.158 port 39304 ssh2 Oct 3 02:02:26 vmi1756752 sshd[3207267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=ubuntu Oct 3 02:02:28 vmi1756752 sshd[3207267]: Failed password for ubuntu from 173.249.2.158 port 55986 ssh2 Oct 3 02:04:35 vmi1756752 sshd[3207806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 3 02:04:38 vmi1756752 sshd[3207806]: Failed password for root from 173.249.2.158 port 52766 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-10-03 01:02:38 (1 week ago)	Fail2Ban SSH Brute Force	Brute-Force SSH
Max la Menace	2024-10-02 23:21:50 (1 week ago)	SSH Brute Force (F)	Brute-Force SSH
Anonymous	2024-10-02 23:05:39 (1 week ago)	...	Brute-Force SSH
SANYALnet Labs	2024-10-02 22:46:08 (1 week ago)	Oct 2 22:46:03 hecnet-us-east-gw sshd[493788]: pam_unix(sshd:auth): authentication failure; logname ... show moreOct 2 22:46:03 hecnet-us-east-gw sshd[493788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 22:46:06 hecnet-us-east-gw sshd[493788]: Failed password for invalid user root from 173.249.2.158 port 41054 ssh2 Oct 2 22:46:07 hecnet-us-east-gw sshd[493788]: Disconnected from invalid user root 173.249.2.158 port 41054 [preauth] ... show less	Brute-Force
anon333	2024-10-02 22:33:17 (1 week ago)	Login hacks found during syslog review at 2024-10-02T22:33+00:00	Brute-Force SSH
oh.mg	2024-10-02 20:16:04 (1 week ago)	(sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 1 in the last 3 ... show more(sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 2 20:16:01 joshua sshd[1975649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root show less	Port Scan
Anonymous	2024-10-02 17:31:15 (1 week ago)	Oct 2 19:29:07 rendez-vous sshd[193391]: Failed password for root from 173.249.2.158 port 45898 ssh ... show moreOct 2 19:29:07 rendez-vous sshd[193391]: Failed password for root from 173.249.2.158 port 45898 ssh2 Oct 2 19:31:12 rendez-vous sshd[193436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 19:31:15 rendez-vous sshd[193436]: Failed password for root from 173.249.2.158 port 42362 ssh2 show less	Brute-Force
Filli Group	2024-10-02 16:30:15 (1 week ago)	2024-10-02T18:24:10.685359+02:00 zrh02.ch.pop.as202427.net sshd[1393012]: User root from 173.249.2.1 ... show more2024-10-02T18:24:10.685359+02:00 zrh02.ch.pop.as202427.net sshd[1393012]: User root from 173.249.2.158 not allowed because not listed in AllowUsers 2024-10-02T18:27:45.417673+02:00 zrh02.ch.pop.as202427.net sshd[1393636]: User root from 173.249.2.158 not allowed because not listed in AllowUsers 2024-10-02T18:30:13.709344+02:00 zrh02.ch.pop.as202427.net sshd[1394179]: User root from 173.249.2.158 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
diego	2024-10-02 16:16:52 (1 week ago)	[rede-164-29] (sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 5 ... show more[rede-164-29] (sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 2 13:06:52 sshd[6997]: Failed password for [USERNAME] from 173.249.2.158 port 46268 ssh2 Oct 2 13:12:28 sshd[7385]: Failed password for [USERNAME] from 173.249.2.158 port 36382 ssh2 Oct 2 13:13:57 sshd[7458]: Failed password for [USERNAME] from 173.249.2.158 port 53522 ssh2 Oct 2 13:14:40 sshd[7511]: Failed password for [USERNAME] from 173.249.2.158 port 33858 ssh2 Oct 2 13:16:49 sshd[7953]: Failed password for [USERNAME] from 173.249.2.158 port 59564 ssh2 show less	Port Scan
v-lo.krakow.pl	2024-10-02 16:16:12 (1 week ago)	SSH BruteForce attack	Brute-Force SSH
nohacefaltapapel-et.net	2024-10-02 14:18:47 (1 week ago)	2024-10-02T16:18:08.600906milloweb sshd[23953]: Failed password for root from 173.249.2.158 port 555 ... show more2024-10-02T16:18:08.600906milloweb sshd[23953]: Failed password for root from 173.249.2.158 port 55562 ssh2 2024-10-02T16:18:45.220792milloweb sshd[24106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi203459.contaboserver.net user=root 2024-10-02T16:18:47.270636milloweb sshd[24106]: Failed password for root from 173.249.2.158 port 34906 ssh2 ... show less	Brute-Force SSH
applemooz	2024-10-02 12:29:54 (1 week ago)	Oct 2 14:29:12 lnxweb62 sshd[25269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreOct 2 14:29:12 lnxweb62 sshd[25269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 14:29:15 lnxweb62 sshd[25269]: Failed password for root from 173.249.2.158 port 34588 ssh2 Oct 2 14:29:16 lnxweb62 sshd[25269]: Disconnected from authenticating user root 173.249.2.158 port 34588 [preauth] Oct 2 14:29:50 lnxweb62 sshd[25566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 14:29:52 lnxweb62 sshd[25566]: Failed password for root from 173.249.2.158 port 42348 ssh2 ... show less	Brute-Force SSH
PulseServers	2024-10-02 12:11:13 (1 week ago)	SSH Brute-Force Attack on a server hosted by PulseServers.com - US11 ...	Brute-Force SSH