JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

213.225.32.158

Neutral Activity

Abuse confidence score ?

0% Low Risk

59 reports

38 reporters · latest 9 months ago

ISP	A1 Telekom Austria AG
Usage Type	Mobile ISP
ASN	AS8447
Hostname(s)	213-225-32-158.nat.highway.a1.net
Domain Name	a1.net
Country	🇦🇹 Austria
City	Wiener Neustadt, Lower Austria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

213.225.32.158 has been reported 59 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 213.225.32.158

Export CSV

This IP address has been reported a total of 59 times from 38 distinct sources. 213.225.32.158 was first reported on March 13th 2023, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2025-12-24 04:30:28 (9 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇫🇷 NXO WAN	2023-03-14 23:05:38 (3 years ago)	: SSH login attempts with invalid user	Brute-Force SSH
🇳🇱 Filli Group	2023-03-14 09:46:38 (3 years ago)	2023-03-14T10:41:55.159348edge01-ams.as202427.net sshd[248135]: Invalid user ftpuser from 213.225.32 ... show more 2023-03-14T10:41:55.159348edge01-ams.as202427.net sshd[248135]: Invalid user ftpuser from 213.225.32.158 port 21663 2023-03-14T10:43:27.559507edge01-ams.as202427.net sshd[248245]: Invalid user postgres from 213.225.32.158 port 21664 2023-03-14T10:46:38.092396edge01-ams.as202427.net sshd[248478]: Invalid user er from 213.225.32.158 port 21669 ... show less	Brute-Force SSH
🇺🇸 Ukn0w1t	2023-03-14 09:45:59 (3 years ago)	Mar 14 09:41:22 edge sshd[1758688]: Invalid user ftpuser from 213.225.32.158 port 3084 Mar 14 09:41: ... show more Mar 14 09:41:22 edge sshd[1758688]: Invalid user ftpuser from 213.225.32.158 port 3084 Mar 14 09:41:24 edge sshd[1758688]: Failed password for invalid user ftpuser from 213.225.32.158 port 3084 ssh2 Mar 14 09:44:22 edge sshd[1759200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.32.158 user=root Mar 14 09:44:25 edge sshd[1759200]: Failed password for root from 213.225.32.158 port 3085 ssh2 Mar 14 09:45:58 edge sshd[1759360]: Invalid user er from 213.225.32.158 port 3086 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-14 09:39:32 (3 years ago)	213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account ... show more 213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 14 04:39:21 13547 sshd[10259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.48.121.154 user=root Mar 14 04:39:23 13547 sshd[10259]: Failed password for root from 77.48.121.154 port 44673 ssh2 Mar 14 04:36:57 13547 sshd[10068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.32.158 user=root Mar 14 04:36:59 13547 sshd[10068]: Failed password for root from 213.225.32.158 port 62582 ssh2 Mar 14 04:01:52 13547 sshd[7446]: Failed password for root from 178.62.69.56 port 35792 ssh2 IP Addresses Blocked: 77.48.121.154 (CZ/Czechia/ip-77-48-121-154.net.vodafone.cz) show less	Brute-Force SSH
🇩🇪 uestueno	2023-03-14 08:15:31 (3 years ago)	SSH Bruteforce	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-14 08:11:49 (3 years ago)	213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account ... show more 213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 14 03:08:25 17903 sshd[32760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.32.158 user=root Mar 14 03:08:27 17903 sshd[32760]: Failed password for root from 213.225.32.158 port 12987 ssh2 Mar 14 03:10:39 17903 sshd[405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.157.236 user=root Mar 14 03:10:42 17903 sshd[405]: Failed password for root from 139.59.157.236 port 54314 ssh2 Mar 14 03:11:29 17903 sshd[470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.2.160.19 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-14 07:31:52 (3 years ago)	213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account ... show more 213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 14 02:31:30 18157 sshd[10680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.213.25.79 user=root Mar 14 02:31:32 18157 sshd[10680]: Failed password for root from 8.213.25.79 port 38412 ssh2 Mar 14 02:30:00 18157 sshd[10593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.32.158 user=root Mar 14 02:30:01 18157 sshd[10593]: Failed password for root from 213.225.32.158 port 56401 ssh2 Mar 14 02:17:10 18157 sshd[9994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.42.49.103 user=root IP Addresses Blocked: 8.213.25.79 (SA/Saudi Arabia/-) show less	Brute-Force SSH
🇩🇪 nextweb	2023-03-14 07:26:38 (3 years ago)	(sshd) Failed SSH login from 213.225.32.158 (AT/Austria/Vienna/Vienna/213-225-32-158.nat.highway.a1. ... show more (sshd) Failed SSH login from 213.225.32.158 (AT/Austria/Vienna/Vienna/213-225-32-158.nat.highway.a1.net/[AS12793 A1 Telekom Austria AG]): 2 in the last 3600 secs show less	Brute-Force SSH
🇩🇪 lewisakura	2023-03-14 06:42:25 (3 years ago)	Mar 14 06:39:27 onepixel sshd[153559]: Failed password for invalid user stephen from 213.225.32.158 ... show more Mar 14 06:39:27 onepixel sshd[153559]: Failed password for invalid user stephen from 213.225.32.158 port 58855 ssh2 Mar 14 06:40:50 onepixel sshd[153933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.32.158 user=steam Mar 14 06:40:52 onepixel sshd[153933]: Failed password for steam from 213.225.32.158 port 58856 ssh2 Mar 14 06:42:23 onepixel sshd[154401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.32.158 user=root Mar 14 06:42:24 onepixel sshd[154401]: Failed password for root from 213.225.32.158 port 58857 ssh2 show less	Brute-Force SSH
Anonymous	2023-03-14 06:03:29 (3 years ago)	Mar 14 06:01:37 f2b auth.info sshd[20855]: Failed password for root from 213.225.32.158 port 62575 s ... show more Mar 14 06:01:37 f2b auth.info sshd[20855]: Failed password for root from 213.225.32.158 port 62575 ssh2 Mar 14 06:03:29 f2b auth.info sshd[20863]: Invalid user tester from 213.225.32.158 port 62576 Mar 14 06:03:29 f2b auth.info sshd[20863]: Failed password for invalid user tester from 213.225.32.158 port 62576 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-14 06:02:09 (3 years ago)	213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account ... show more 213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 14 00:58:59 16770 sshd[20017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.132.225.1 user=root Mar 14 01:00:50 16770 sshd[20157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.245.80.17 user=root Mar 14 01:00:53 16770 sshd[20157]: Failed password for root from 46.245.80.17 port 56020 ssh2 Mar 14 01:01:47 16770 sshd[20230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.32.158 user=root Mar 14 01:01:49 16770 sshd[20230]: Failed password for root from 213.225.32.158 port 8013 ssh2 IP Addresses Blocked: 94.132.225.1 (PT/Portugal/a94-132-225-1.cpe.netcabo.pt) 46.245.80.17 (IR/Iran/-) show less	Brute-Force SSH
Anonymous	2023-03-14 05:39:38 (3 years ago)	Repeated unauthorized connection attempt from 213.225.32.158	Brute-Force SSH
🇮🇹 Dario B.	2023-03-14 05:25:13 (3 years ago)	DATE:2023-03-14 06:25:13, IP:213.225.32.158, PORT:ssh SSH brute force auth on honeypot server (epe-h ... show more DATE:2023-03-14 06:25:13, IP:213.225.32.158, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-03-14 05:25:07 (3 years ago)	213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account ... show more 213.225.32.158 (AT/Austria/213-225-32-158.nat.highway.a1.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 14 00:24:32 15907 sshd[21577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.242.202.229 user=root Mar 14 00:24:34 15907 sshd[21577]: Failed password for root from 47.242.202.229 port 59022 ssh2 Mar 14 00:05:29 15907 sshd[20251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.253.32 user=root Mar 14 00:05:31 15907 sshd[20251]: Failed password for root from 34.80.253.32 port 55096 ssh2 Mar 14 00:25:02 15907 sshd[21586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.32.158 user=root IP Addresses Blocked: 47.242.202.229 (HK/Hong Kong/-) 34.80.253.32 (TW/Taiwan/32.253.80.34.bc.googleusercontent.com) show less	Brute-Force SSH

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.8.64.94

🇷🇺 82.162.56.186

🇷🇺 80.95.38.14

🇰🇷 14.46.87.209

🇮🇷 2.180.161.39

🇧🇷 189.18.97.198

🇨🇳 106.75.173.118

🇧🇩 103.159.2.113

🇺🇸 71.232.119.181

🇺🇸 50.114.236.89

🇨🇦 45.198.224.60

🇺🇸 40.124.123.120

🇺🇸 205.210.31.54

🇳🇱 188.166.90.102

🇺🇦 178.151.253.37

🇺🇸 91.230.168.8

🇹🇷 78.182.130.28

🇺🇸 2604:a880:400:d1:0:5:264a:c001

🇺🇸 216.180.246.47

🇫🇷 195.81.231.44