AbuseIPDB » 173.249.2.158

173.249.2.158 was found in our database!

This IP was reported 362 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2414573.contaboserver.net
Domain Name	contabo.com
Country	Germany
City	Nurnberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 173.249.2.158

Whois 173.249.2.158

IP Abuse Reports for 173.249.2.158:

This IP address has been reported a total of 362 times from 211 distinct sources. 173.249.2.158 was first reported on September 10th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Kaas	2024-10-02 09:39:44 (3 months ago)	Automatic ban by Fail2Ban	Brute-Force SSH
blackpanther	2024-10-02 08:57:21 (3 months ago)	2024-10-02T10:48:17.707495+02:00 ..de sshd[3295141]: Disconnected from authenticating user root 173. ... show more2024-10-02T10:48:17.707495+02:00 ..de sshd[3295141]: Disconnected from authenticating user root 173.249.2.158 port 36304 [preauth] 2024-10-02T10:56:04.207277+02:00 ..de sshd[3299512]: Disconnected from authenticating user root 173.249.2.158 port 46324 [preauth] 2024-10-02T10:57:20.995530+02:00 ..de sshd[3300158]: Disconnected from authenticating user root 173.249.2.158 port 33386 [preauth] show less	Brute-Force SSH
hyperqbe	2024-10-02 08:13:25 (3 months ago)	Oct 2 10:08:06 slaro sshd\[24481\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 ... show moreOct 2 10:08:06 slaro sshd\[24481\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root Oct 2 10:08:09 slaro sshd\[24481\]: Failed password for root from 173.249.2.158 port 40640 ssh2 Oct 2 10:13:24 slaro sshd\[24559\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root ... show less	Brute-Force SSH
vanadrighem.eu	2024-10-02 07:45:35 (3 months ago)	2024-10-02T09:43:29.882448+02:00 pietje sshd[13704]: Failed password for root from 173.249.2.158 por ... show more2024-10-02T09:43:29.882448+02:00 pietje sshd[13704]: Failed password for root from 173.249.2.158 port 47198 ssh2 2024-10-02T09:43:31.923820+02:00 pietje sshd[13704]: Disconnected from authenticating user root 173.249.2.158 port 47198 [preauth] 2024-10-02T09:45:33.678083+02:00 pietje sshd[14018]: Invalid user oracle from 173.249.2.158 port 37846 ... show less	Brute-Force SSH
nikoladd	2024-10-02 07:34:35 (3 months ago)	Oct 2 10:27:59 server2 sshd\[8894\]: User root from vmi203459.contaboserver.net not allowed because ... show moreOct 2 10:27:59 server2 sshd\[8894\]: User root from vmi203459.contaboserver.net not allowed because not listed in AllowUsers Oct 2 10:31:21 server2 sshd\[9596\]: User root from vmi203459.contaboserver.net not allowed because not listed in AllowUsers Oct 2 10:32:00 server2 sshd\[9633\]: User root from vmi203459.contaboserver.net not allowed because not listed in AllowUsers Oct 2 10:32:39 server2 sshd\[9743\]: User root from vmi203459.contaboserver.net not allowed because not listed in AllowUsers Oct 2 10:33:16 server2 sshd\[9861\]: User root from vmi203459.contaboserver.net not allowed because not listed in AllowUsers Oct 2 10:34:34 server2 sshd\[10012\]: User root from vmi203459.contaboserver.net not allowed because not listed in AllowUsers show less	Brute-Force
akcurate.de	2024-10-02 07:24:41 (3 months ago)	2024-10-02T09:24:37.591857 mail3.akcurate.de sshd[2882196]: pam_unix(sshd:auth): authentication fail ... show more2024-10-02T09:24:37.591857 mail3.akcurate.de sshd[2882196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root 2024-10-02T09:24:40.107517 mail3.akcurate.de sshd[2882196]: Failed password for root from 173.249.2.158 port 54076 ssh2 ... show less	Brute-Force SSH
Hector Lorenzo	2024-10-02 06:09:20 (3 months ago)	$f2bV_matches	Brute-Force SSH
Anonymous	2024-10-02 06:07:23 (3 months ago)	SSH attack from fail2ban ...	SSH
Anonymous	2024-10-02 06:06:55 (3 months ago)	Oct 1 23:59:58 turing sshd[20333]: Failed password for invalid user root from 173.249.2.158 port 59 ... show moreOct 1 23:59:58 turing sshd[20333]: Failed password for invalid user root from 173.249.2.158 port 59358 ssh2 Oct 2 00:06:17 turing sshd[22821]: User root from vmi203459.contaboserver.net not allowed because none of user's groups are listed in AllowGroups Oct 2 00:06:17 turing sshd[22821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi203459.contaboserver.net user=root Oct 2 00:06:19 turing sshd[22821]: Failed password for invalid user root from 173.249.2.158 port 55958 ssh2 Oct 2 00:06:54 turing sshd[22986]: User root from vmi203459.contaboserver.net not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
_ArminS_	2024-10-02 04:50:36 (3 months ago)	Bad SSHAUTH 2024.10.02 06:50:35 blocked until 2024.10.09 06:50:35 by HoneyPot US-EAST_as ... show moreBad SSHAUTH 2024.10.02 06:50:35 blocked until 2024.10.09 06:50:35 by HoneyPot US-EAST_ashburn01 show less	Hacking Brute-Force SSH
mailox	2024-10-02 04:08:59 (3 months ago)	SSH Unauthorized connection attempt ...	Brute-Force SSH
Anonymous	2024-10-02 03:18:01 (3 months ago)	Oct 2 05:18:00 eiaf sshd[461227]: Connection from 173.249.2.158 port 45960 on 88.218.224.13 port 51 ... show moreOct 2 05:18:00 eiaf sshd[461227]: Connection from 173.249.2.158 port 45960 on 88.218.224.13 port 5123 rdomain "" Oct 2 05:18:00 eiaf sshd[461227]: User root from 173.249.2.158 not allowed because not listed in AllowUsers ... show less	DDoS Attack Port Scan Brute-Force SSH
MU-star.net	2024-10-02 03:08:40 (3 months ago)	Invalid user ubuntu from 173.249.2.158 port 52372	Port Scan Brute-Force SSH
MU-star.net	2024-10-02 03:08:40 (3 months ago)	Invalid user ubuntu from 173.249.2.158 port 52372	Port Scan Brute-Force SSH
MU-star.net	2024-10-02 03:08:40 (3 months ago)	Invalid user ubuntu from 173.249.2.158 port 52372	Port Scan Brute-Force SSH