AbuseIPDB » 173.249.2.158

173.249.2.158 was found in our database!

This IP was reported 362 times. Confidence of Abuse is 0%: ?

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2414573.contaboserver.net
Domain Name	contabo.com
Country	Germany
City	Nurnberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 173.249.2.158

Whois 173.249.2.158

IP Abuse Reports for 173.249.2.158:

This IP address has been reported a total of 362 times from 211 distinct sources. 173.249.2.158 was first reported on September 10th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
deangelys	2024-09-23 08:25:00 (4 months ago)	Honeypot activity: Unauthorized login attempt on port 22: SSH	Brute-Force SSH
pongohub.com	2024-09-14 22:00:10 (4 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-slow-bf	Brute-Force SSH
rtbh.com.tr	2024-09-12 20:54:43 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-09-11 20:54:45 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
nicosqc	2024-09-11 03:10:04 (4 months ago)	Invalid user team06 from 173.249.2.158 port 47926	Brute-Force SSH
nicosqc	2024-09-11 03:10:04 (4 months ago)	Invalid user team06 from 173.249.2.158 port 47926	Brute-Force SSH
nicosqc	2024-09-11 03:10:04 (4 months ago)	Invalid user team06 from 173.249.2.158 port 47926	Brute-Force SSH
nicosqc	2024-09-11 03:10:04 (4 months ago)	Invalid user team06 from 173.249.2.158 port 47926	Brute-Force SSH
formality	2024-09-11 03:01:51 (4 months ago)	Invalid user vhpadmin from 173.249.2.158 port 59286	Brute-Force SSH
marioselgreco	2024-09-11 02:54:43 (4 months ago)	2024-09-11T04:54:41.256782vmi1639287.contaboserver.net sshd[973756]: pam_unix(sshd:auth): authentica ... show more2024-09-11T04:54:41.256782vmi1639287.contaboserver.net sshd[973756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 user=root 2024-09-11T04:54:42.823695vmi1639287.contaboserver.net sshd[973756]: Failed password for root from 173.249.2.158 port 46742 ssh2 ... show less	Brute-Force SSH
timedin	2024-09-11 00:16:51 (4 months ago)	Sep 11 02:06:05 vps2 sshd[1469264]: Invalid user curso from 173.249.2.158 port 38564 Sep 11 02 ... show moreSep 11 02:06:05 vps2 sshd[1469264]: Invalid user curso from 173.249.2.158 port 38564 Sep 11 02:12:29 vps2 sshd[1469382]: Invalid user qwe123 from 173.249.2.158 port 52662 Sep 11 02:13:35 vps2 sshd[1469424]: Invalid user vastbase from 173.249.2.158 port 34750 Sep 11 02:16:50 vps2 sshd[1469491]: Invalid user wekan from 173.249.2.158 port 37444 ... show less	Brute-Force SSH
saima	2024-09-11 00:00:06 (4 months ago)	Detected 302 times. SSH Brute-Force from address 173.249.2.158	Brute-Force SSH
James Calum	2024-09-10 23:25:24 (4 months ago)	Sep 10 23:25:22 Sildom2 sshd[1370246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreSep 10 23:25:22 Sildom2 sshd[1370246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.2.158 Sep 10 23:25:24 Sildom2 sshd[1370246]: Failed password for invalid user api from 173.249.2.158 port 33124 ssh2 ... show less	Brute-Force SSH
DAUGDE	2024-09-10 22:51:30 (4 months ago)	Sep 10 22:42:18 mail-mx2 sshd[88856]: Invalid user ftpuser from 173.249.2.158 port 59414 Sep 1 ... show moreSep 10 22:42:18 mail-mx2 sshd[88856]: Invalid user ftpuser from 173.249.2.158 port 59414 Sep 10 22:49:19 mail-mx2 sshd[88912]: Invalid user hyper from 173.249.2.158 port 53308 Sep 10 22:51:29 mail-mx2 sshd[88943]: Invalid user ociisstd from 173.249.2.158 port 45314 ... show less	Brute-Force SSH
Click-Networks	2024-09-10 22:06:06 (4 months ago)	Sep 10 23:22:05 wh01 sshd[1612744]: Invalid user ubuntu from 173.249.2.158 port 49460 Sep 10 2 ... show moreSep 10 23:22:05 wh01 sshd[1612744]: Invalid user ubuntu from 173.249.2.158 port 49460 Sep 10 23:22:05 wh01 sshd[1612744]: Received disconnect from 173.249.2.158 port 49460:11: Bye Bye [preauth] Sep 10 23:22:05 wh01 sshd[1612744]: Disconnected from invalid user ubuntu 173.249.2.158 port 49460 [preauth] Sep 10 23:26:20 wh01 sshd[1613344]: Invalid user dasusr1 from 173.249.2.158 port 54408 Sep 10 23:26:20 wh01 sshd[1613344]: Received disconnect from 173.249.2.158 port 54408:11: Bye Bye [preauth] Sep 10 23:26:20 wh01 sshd[1613344]: Disconnected from invalid user dasusr1 173.249.2.158 port 54408 [preauth] Sep 10 23:28:26 wh01 sshd[1613637]: Received disconnect from 173.249.2.158 port 46564:11: Bye Bye [preauth] Sep 10 23:28:26 wh01 sshd[1613637]: Disconnected from authenticating user root 173.249.2.158 port 46564 [preauth] Sep 10 23:30:32 wh01 sshd[1613926]: Received disconnect from 173.249.2.158 port 38722:11: Bye Bye [preauth] Sep 10 23:30:32 wh01 sshd[1613926]: Disconnected from authenti show less	Brute-Force Exploited Host SSH