JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

209.145.55.25

Recent Activity

Abuse Confidence Score

37% Elevated

185 reports

63 reporters · latest 5 hours ago

ISP: Contabo Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS40021
Hostname(s): vmi2996631.contaboserver.net
Domain Name: contabo.com
Country: 🇺🇸 United States of America
City: St. Louis, Missouri

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

185 from 63 distinct reporters

First reported

August 3rd 2021

Most recent report

5 hours ago

Last 60 days

Top reporter locations 🇫🇷 France 3 🇨🇭 Switzerland 1 🇫🇮 Finland 1

Most common categories Port Scan 6 Hacking 1 SSH 1 Brute-Force 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 noi	2026-11-10 11:56:13 UTC · (5 hours ago)	honeypot proto=TCP dpt=6379 flags=SYN hits=1 window=1h	Port Scan
🇨🇭 Elysium Security	2026-11-10 09:32:20 UTC · (8 hours ago)	Mass port scanning on a whole network	Port Scan
🇫🇷 wiredalter	2026-11-10 05:28:35 UTC · (12 hours ago)	Blocked by fail2ban on o2VPS [6380/tcp] Source Port: 58486 TTL: 43 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com	Brute-Force SSH
🇹🇷 mixnet	2026-11-07 21:55:19 UTC · (2 days ago)	Port scan: SYN-only probes to 115 hosts / 4 ports (6379, 6380, 6381, 16379) in 10 minutes. Detected by Mixnet network flow monitoring.	Port Scan
🇺🇸 k3rn3l109	2026-11-06 10:14:23 UTC · (4 days ago)	Sentinel honeypot: opencanary-redis hit on fake Redis service (server-01-CA) UA=opencanary	Port Scan Hacking
🇫🇮 iamxorum	2026-11-06 10:03:39 UTC · (4 days ago)	Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-11-06T10:03:38.736329+00:00 XRM-00 kernel: [516893.489941] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=209.145.55.25 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=54 I ... show more Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-11-06T10:03:38.736329+00:00 XRM-00 kernel: [516893.489941] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=209.145.55.25 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=11217 DF PROTO=TCP SPT=40984 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 thecocasio	2026-11-06 09:01:43 UTC · (4 days ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 6379 (Redis) on a host running no such service. Automated port-scan detection at 2026-11-06T09:01:42Z.	Port Scan
🇺🇸 Mashpot	2021-09-06 04:25:21 UTC · (5 years ago)	Multiple SSH authentication failures from 209.145.55.25	Brute-Force SSH
🇸🇪 mmamljn	2021-08-11 12:02:50 UTC · (5 years ago)		SSH
🇮🇳 Parth Maniar	2021-08-09 03:26:45 UTC · (5 years ago)	SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout on @parthmaniar on twitter.	Brute-Force SSH
🇿🇦 IrisFlower	2021-08-08 10:05:07 UTC · (5 years ago)	Unauthorized connection attempt detected from IP address 209.145.55.25 to port 2220 [J]	Port Scan Hacking
🇩🇪 WebTejo	2021-08-08 08:55:04 UTC · (5 years ago)	Aug 8 13:53:06 dev sshd[1646542]: Failed password for root from 209.145.55.25 port 55748 ssh2 Aug 8 13:55:01 dev sshd[1646858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.145.55.25 user=root Aug 8 ... show more Aug 8 13:53:06 dev sshd[1646542]: Failed password for root from 209.145.55.25 port 55748 ssh2 Aug 8 13:55:01 dev sshd[1646858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.145.55.25 user=root Aug 8 13:55:03 dev sshd[1646858]: Failed password for root from 209.145.55.25 port 35634 ssh2 ... show less	Brute-Force SSH
🇩🇪 WebTejo	2021-08-08 08:39:29 UTC · (5 years ago)	Aug 8 13:37:32 dev sshd[1643962]: Failed password for root from 209.145.55.25 port 47280 ssh2 Aug 8 13:39:27 dev sshd[1644314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.145.55.25 user=root Aug 8 ... show more Aug 8 13:37:32 dev sshd[1643962]: Failed password for root from 209.145.55.25 port 47280 ssh2 Aug 8 13:39:27 dev sshd[1644314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.145.55.25 user=root Aug 8 13:39:28 dev sshd[1644314]: Failed password for root from 209.145.55.25 port 55416 ssh2 ... show less	Brute-Force SSH
🇩🇪 WebTejo	2021-08-08 08:21:59 UTC · (5 years ago)	Aug 8 13:20:08 dev sshd[1641171]: Failed password for root from 209.145.55.25 port 57204 ssh2 Aug 8 13:21:57 dev sshd[1641425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.145.55.25 user=root Aug 8 ... show more Aug 8 13:20:08 dev sshd[1641171]: Failed password for root from 209.145.55.25 port 57204 ssh2 Aug 8 13:21:57 dev sshd[1641425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.145.55.25 user=root Aug 8 13:21:58 dev sshd[1641425]: Failed password for root from 209.145.55.25 port 37264 ssh2 ... show less	Brute-Force SSH
🇩🇪 WebTejo	2021-08-08 08:06:36 UTC · (5 years ago)	Aug 8 13:04:34 dev sshd[1638459]: Failed password for root from 209.145.55.25 port 46922 ssh2 Aug 8 13:06:33 dev sshd[1638777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.145.55.25 user=root Aug 8 ... show more Aug 8 13:04:34 dev sshd[1638459]: Failed password for root from 209.145.55.25 port 46922 ssh2 Aug 8 13:06:33 dev sshd[1638777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.145.55.25 user=root Aug 8 13:06:35 dev sshd[1638777]: Failed password for root from 209.145.55.25 port 55344 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 185 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇿 172.196.43.109

🇧🇪 207.175.218.17

🇲🇽 187.142.83.233

🇧🇷 187.84.165.189

🇺🇸 147.93.189.166

🇪🇬 41.176.107.108

🇬🇧 2a06:4882:1000::d

🇳🇱 193.47.62.20

🇻🇳 123.21.12.227

🇭🇰 43.129.207.247

🇺🇸 2606:5e00:1:3bb::1

🇸🇬 2401:4c20:d8:ff08:0:84d4:3187:1343

🇰🇷 211.248.32.245

🇵🇾 181.123.166.161

🇦🇷 181.21.32.204

🇺🇸 104.197.36.108

🇬🇧 81.19.219.252

🇨🇿 77.75.79.62

🇧🇪 34.62.41.110

🇸🇪 16.16.193.224