AbuseIPDB » 173.249.2.158

173.249.2.158 was found in our database!

This IP was reported 362 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2414573.contaboserver.net
Domain Name	contabo.com
Country	Germany
City	Nurnberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 173.249.2.158

Whois 173.249.2.158

IP Abuse Reports for 173.249.2.158:

This IP address has been reported a total of 362 times from 211 distinct sources. 173.249.2.158 was first reported on September 10th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-10-03 01:02:38 (3 months ago)	Fail2Ban SSH Brute Force	Brute-Force SSH
Max la Menace	2024-10-02 23:21:50 (3 months ago)	SSH Brute Force (F)	Brute-Force SSH
Anonymous	2024-10-02 23:05:39 (3 months ago)	...	Brute-Force SSH
SANYALnet Labs	2024-10-02 22:46:08 (3 months ago)	Oct 2 22:46:03 hecnet-us-east-gw sshd[493788]: pam_unix(sshd:auth): authentication failure; logname ... show moreOct 2 22:46:03 hecnet-us-east-gw sshd[493788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 22:46:06 hecnet-us-east-gw sshd[493788]: Failed password for invalid user root from 173.249.2.158 port 41054 ssh2 Oct 2 22:46:07 hecnet-us-east-gw sshd[493788]: Disconnected from invalid user root 173.249.2.158 port 41054 [preauth] ... show less	Brute-Force
anon333	2024-10-02 22:33:17 (3 months ago)	Login hacks found during syslog review at 2024-10-02T22:33+00:00	Brute-Force SSH
oh.mg	2024-10-02 20:16:04 (3 months ago)	(sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 1 in the last 3 ... show more(sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 2 20:16:01 joshua sshd[1975649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root show less	Port Scan
Anonymous	2024-10-02 17:31:15 (3 months ago)	Oct 2 19:29:07 rendez-vous sshd[193391]: Failed password for root from 173.249.2.158 port 45898 ssh ... show moreOct 2 19:29:07 rendez-vous sshd[193391]: Failed password for root from 173.249.2.158 port 45898 ssh2 Oct 2 19:31:12 rendez-vous sshd[193436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 19:31:15 rendez-vous sshd[193436]: Failed password for root from 173.249.2.158 port 42362 ssh2 show less	Brute-Force
Filli Group	2024-10-02 16:30:15 (3 months ago)	2024-10-02T18:24:10.685359+02:00 zrh02.ch.pop.as202427.net sshd[1393012]: User root from 173.249.2.1 ... show more2024-10-02T18:24:10.685359+02:00 zrh02.ch.pop.as202427.net sshd[1393012]: User root from 173.249.2.158 not allowed because not listed in AllowUsers 2024-10-02T18:27:45.417673+02:00 zrh02.ch.pop.as202427.net sshd[1393636]: User root from 173.249.2.158 not allowed because not listed in AllowUsers 2024-10-02T18:30:13.709344+02:00 zrh02.ch.pop.as202427.net sshd[1394179]: User root from 173.249.2.158 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
diego	2024-10-02 16:16:52 (3 months ago)	[rede-164-29] (sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 5 ... show more[rede-164-29] (sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 2 13:06:52 sshd[6997]: Failed password for [USERNAME] from 173.249.2.158 port 46268 ssh2 Oct 2 13:12:28 sshd[7385]: Failed password for [USERNAME] from 173.249.2.158 port 36382 ssh2 Oct 2 13:13:57 sshd[7458]: Failed password for [USERNAME] from 173.249.2.158 port 53522 ssh2 Oct 2 13:14:40 sshd[7511]: Failed password for [USERNAME] from 173.249.2.158 port 33858 ssh2 Oct 2 13:16:49 sshd[7953]: Failed password for [USERNAME] from 173.249.2.158 port 59564 ssh2 show less	Port Scan
v-lo.krakow.pl	2024-10-02 16:16:12 (3 months ago)	SSH BruteForce attack	Brute-Force SSH
nohacefaltapapel-et.net	2024-10-02 14:18:47 (3 months ago)	2024-10-02T16:18:08.600906milloweb sshd[23953]: Failed password for root from 173.249.2.158 port 555 ... show more2024-10-02T16:18:08.600906milloweb sshd[23953]: Failed password for root from 173.249.2.158 port 55562 ssh2 2024-10-02T16:18:45.220792milloweb sshd[24106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi203459.contaboserver.net user=root 2024-10-02T16:18:47.270636milloweb sshd[24106]: Failed password for root from 173.249.2.158 port 34906 ssh2 ... show less	Brute-Force SSH
applemooz	2024-10-02 12:29:54 (3 months ago)	Oct 2 14:29:12 lnxweb62 sshd[25269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreOct 2 14:29:12 lnxweb62 sshd[25269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 14:29:15 lnxweb62 sshd[25269]: Failed password for root from 173.249.2.158 port 34588 ssh2 Oct 2 14:29:16 lnxweb62 sshd[25269]: Disconnected from authenticating user root 173.249.2.158 port 34588 [preauth] Oct 2 14:29:50 lnxweb62 sshd[25566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 14:29:52 lnxweb62 sshd[25566]: Failed password for root from 173.249.2.158 port 42348 ssh2 ... show less	Brute-Force SSH
PulseServers	2024-10-02 12:11:13 (3 months ago)	SSH Brute-Force Attack on a server hosted by PulseServers.com - US11 ...	Brute-Force SSH
aorth	2024-10-02 10:18:38 (3 months ago)	Oct 02 12:45:38 Failed password for invalid user root from 173.249.2.158 port 44478	Brute-Force SSH
horax	2024-10-02 09:44:46 (3 months ago)	Oct 2 11:44:43 RP2 sshd[2231721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreOct 2 11:44:43 RP2 sshd[2231721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 11:44:46 RP2 sshd[2231721]: Failed password for root from 173.249.2.158 port 48124 ssh2 ... show less	Brute-Force SSH