AbuseIPDB » 173.249.2.158

173.249.2.158 was found in our database!

This IP was reported 362 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	ip-158-2-249-173.static.contabo.net
Domain Name	contabo.com
Country	Germany
City	Nurnberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 173.249.2.158

Whois 173.249.2.158

IP Abuse Reports for 173.249.2.158:

This IP address has been reported a total of 362 times from 211 distinct sources. 173.249.2.158 was first reported on September 10th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
formality	2024-10-01 19:42:22 (3 months ago)	Invalid user ubuntu from 173.249.2.158 port 44934	Brute-Force SSH
Anonymous	2024-10-01 16:19:43 (3 months ago)	37_X43_F2B_ACTION	Brute-Force SSH
PulseServers	2024-10-01 15:48:18 (3 months ago)	SSH Brute-Force Attack on a server hosted by PulseServers.com - US10 ...	Brute-Force SSH
Stuart Reid	2024-10-01 14:03:35 (3 months ago)	...	SSH
diego	2024-10-01 13:59:35 (3 months ago)	[rede-44-49] (sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 5 ... show more[rede-44-49] (sshd) Failed SSH login from 173.249.2.158 (DE/Germany/vmi203459.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 1 10:52:04 sshd[14617]: Failed password for [USERNAME] from 173.249.2.158 port 45750 ssh2 Oct 1 10:57:35 sshd[15169]: Failed password for [USERNAME] from 173.249.2.158 port 40238 ssh2 Oct 1 10:58:15 sshd[15237]: Failed password for [USERNAME] from 173.249.2.158 port 48132 ssh2 Oct 1 10:58:54 sshd[15318]: Failed password for [USERNAME] from 173.249.2.158 port 56028 ssh2 Oct 1 10:59:31 sshd[15368]: Failed password for [USERNAME] from 173.249.2.158 port 35688 ssh2 show less	Port Scan
Anonymous	2024-10-01 12:20:02 (3 months ago)	sshd	Brute-Force SSH
Spyerfox	2024-10-01 11:54:01 (3 months ago)	Oct 1 13:53:58 <server> sshd\[10499\]: User root from vmi203459.contaboserver.net not allowed becau ... show moreOct 1 13:53:58 <server> sshd\[10499\]: User root from vmi203459.contaboserver.net not allowed because not listed in AllowUsersOct 1 13:54:00 <server> sshd\[10499\]: Failed password for invalid user root from 173.249.2.158 port 44434 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-10-01 10:10:54 (3 months ago)	2024-10-01T17:56:25.859758+08:00 ocLObk1008638 sshd[1430246]: Invalid user elemental from 173.249.2. ... show more2024-10-01T17:56:25.859758+08:00 ocLObk1008638 sshd[1430246]: Invalid user elemental from 173.249.2.158 port 52456 2024-10-01T18:02:49.244063+08:00 ocLObk1008638 sshd[1430580]: Invalid user iptv from 173.249.2.158 port 50838 2024-10-01T18:09:09.757874+08:00 ocLObk1008638 sshd[1430749]: Invalid user kafka from 173.249.2.158 port 42614 2024-10-01T18:10:53.462265+08:00 ocLObk1008638 sshd[1430954]: Invalid user oracle from 173.249.2.158 port 36226 ... show less	Brute-Force SSH
rtbh.com.tr	2024-09-25 20:54:18 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-09-24 20:54:20 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
paradoxnetworks	2024-09-24 02:15:01 (3 months ago)	2024-09-24T02:09:45.599695+00:00 edge-hiv-lax01.int.pdx.net.uk sshd[3766298]: Invalid user sysadmin ... show more2024-09-24T02:09:45.599695+00:00 edge-hiv-lax01.int.pdx.net.uk sshd[3766298]: Invalid user sysadmin from 173.249.2.158 port 41670 2024-09-24T02:13:34.944336+00:00 edge-hiv-lax01.int.pdx.net.uk sshd[3766466]: Invalid user nginx from 173.249.2.158 port 49742 2024-09-24T02:15:00.706575+00:00 edge-hiv-lax01.int.pdx.net.uk sshd[3766534]: Invalid user postgres from 173.249.2.158 port 39088 ... show less	Brute-Force SSH
Anonymous	2024-09-24 01:55:31 (3 months ago)	2024-09-24T08:54:50.480118lasik.tangerangselatankota.go.id sshd[157967]: Disconnected from 173.249.2 ... show more2024-09-24T08:54:50.480118lasik.tangerangselatankota.go.id sshd[157967]: Disconnected from 173.249.2.158 port 43454 [preauth] 2024-09-24T08:55:26.697658lasik.tangerangselatankota.go.id sshd[158278]: Connection from 173.249.2.158 port 51368 on 192.168.200.92 port 22 2024-09-24T08:55:27.668545lasik.tangerangselatankota.go.id sshd[158278]: Invalid user tuan from 173.249.2.158 port 51368 2024-09-24T08:55:27.670190lasik.tangerangselatankota.go.id sshd[158278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 2024-09-24T08:55:29.465316lasik.tangerangselatankota.go.id sshd[158278]: Failed password for invalid user tuan from 173.249.2.158 port 51368 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-09-24 01:33:40 (3 months ago)	2024-09-24T08:27:17.889804lasik.tangerangselatankota.go.id sshd[147214]: Disconnected from 173.249.2 ... show more2024-09-24T08:27:17.889804lasik.tangerangselatankota.go.id sshd[147214]: Disconnected from 173.249.2.158 port 40250 [preauth] 2024-09-24T08:33:36.136848lasik.tangerangselatankota.go.id sshd[148825]: Connection from 173.249.2.158 port 36500 on 192.168.200.92 port 22 2024-09-24T08:33:37.092982lasik.tangerangselatankota.go.id sshd[148825]: Invalid user svn from 173.249.2.158 port 36500 2024-09-24T08:33:37.094470lasik.tangerangselatankota.go.id sshd[148825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 2024-09-24T08:33:39.050215lasik.tangerangselatankota.go.id sshd[148825]: Failed password for invalid user svn from 173.249.2.158 port 36500 ssh2 ... show less	Brute-Force SSH
PulseServers	2024-09-24 01:31:37 (3 months ago)	SSH Brute-Force Attack on a server hosted by PulseServers.com - CA10 ...	Brute-Force SSH
Thomas Abzieher-Kanai	2024-09-24 01:01:38 (3 months ago)	Sep 24 02:58:39 SFEEDS sshd[280932]: Failed password for invalid user kafka from 173.249.2.158 port ... show moreSep 24 02:58:39 SFEEDS sshd[280932]: Failed password for invalid user kafka from 173.249.2.158 port 42614 ssh2 Sep 24 03:00:57 SFEEDS sshd[281012]: Invalid user portal from 173.249.2.158 port 41726 Sep 24 03:00:57 SFEEDS sshd[281012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 Sep 24 03:00:59 SFEEDS sshd[281012]: Failed password for invalid user portal from 173.249.2.158 port 41726 ssh2 Sep 24 03:01:37 SFEEDS sshd[281051]: Invalid user odoo from 173.249.2.158 port 50338 ... show less	Brute-Force SSH