JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.152.85

158.173.152.85 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Zurich, Switzerland
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.152.85

Whois 158.173.152.85

IP Abuse Reports for 158.173.152.85:

This IP address has been reported a total of 16 times from 16 distinct sources. 158.173.152.85 was first reported on November 10th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-13 13:53:31 (3 months ago)	10x Postfix SASL LOGIN authentication failed	Brute-Force
🇫🇮 kumiko	2026-02-21 19:37:09 (4 months ago)	[2026-02-21 21:37:08] Unauthorized port scan/probing (3 times on ports 9000, 9200, 11434) Blocked b ... show more [2026-02-21 21:37:08] Unauthorized port scan/probing (3 times on ports 9000, 9200, 11434) Blocked by UFW show less	Port Scan
🇫🇷 masterguru	2026-02-21 18:36:21 (4 months ago)	Port Scan detected from 158.173.152.85 (CH/Switzerland/-). 11 hits in the last 70 seconds (0-195)	Port Scan
Anonymous	2026-02-21 18:01:22 (4 months ago)	Port scan on 36 port(s) from 158.173.152.85 detected: 4000 (19:01:14) 4000 (19:01:15) 4000 (19:01:16 ... show more Port scan on 36 port(s) from 158.173.152.85 detected: 4000 (19:01:14) 4000 (19:01:15) 4000 (19:01:16) 5601 (19:01:26) 5601 (19:01:27) 5601 (19:01:28) 6379 (19:01:23) 6379 (19:01:24) 6379 (19:01:25) 8888 (19:01:29) 8888 (19:01:30) 8888 (19:01:31) 8888 (19:01:32) 8888 (19:01:33) 8888 (19:01:34) 9000 (19:01:35) 9000 (19:01:36) 9000 (19:01:37) 9000 (19:01:38) 9000 (19:01:39) 9000 (19:01:40) 9001 (19:01:41) 9001 (19:01:42) 9001 (19:01:43) 9001 (19:01:44) 9001 (19:01:45) 9001 (19:01:46) 9200 (19:01:17) 9200 (19:01:18) 9200 (19:01:19) 11434 (19:01:11) 11434 (19:01:12) 11434 (19:01:13) 27017 (19:01:20) 27017 (19:01:21) 27017 (19:01:22) show less	Port Scan
Anonymous	2026-02-21 13:54:44 (4 months ago)	...	Web App Attack
🇩🇪 iNetWorker	2026-02-21 08:04:50 (4 months ago)	trying to access non-authorized port	Port Scan
🇫🇷 GabrielJST	2026-02-21 07:49:43 (4 months ago)	Port Scan detected from 158.173.152.85 (CH/Switzerland/-).	Port Scan
Anonymous	2026-02-21 06:54:58 (4 months ago)	Feb 21 01:54:58 localhost kernel: [100002414.532417] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Feb 21 01:54:58 localhost kernel: [100002414.532417] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.173.152.85 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=48477 DF PROTO=TCP SPT=18128 DPT=11434 WINDOW=64343 RES=0x00 SYN URGP=0 Feb 21 01:54:58 localhost kernel: [100002414.532451] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.173.152.85 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=48477 DF PROTO=TCP SPT=18128 DPT=11434 SEQ=1150602895 ACK=0 WINDOW=64343 RES=0x00 SYN URGP=0 OPT (020405500402080A7056F334000000000103030A) Feb 21 01:54:58 localhost kernel: [100002414.653151] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=158.173.152.85 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=25845 DF PROTO=TCP SPT=47420 DPT=4000 WINDOW=64343 RES=0x00 SYN URGP=0 Feb 21 01:54:58 localhost kernel: [100002414.653166] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c: show less	Port Scan
🇧🇷 Vieira Filho	2026-02-21 04:53:56 (4 months ago)	158.173.152.85 - - [21/Feb/2026:01:53:55 -0300] [35.198.31.82] "35.198.31.82" "GET /.env HTTP/1.1" ... show more 158.173.152.85 - - [21/Feb/2026:01:53:55 -0300] [35.198.31.82] "35.198.31.82" "GET /.env HTTP/1.1" 404 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 0.000 ... show less	Brute-Force Web App Attack Exploited Host
🇫🇷 Tanados	2026-02-21 02:13:15 (4 months ago)	Blocked by UFW [4000/tcp] Source port: 54254 TTL: 48 Packet length: 60 TOS: 0x00 This report was ge ... show more Blocked by UFW [4000/tcp] Source port: 54254 TTL: 48 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 acadeova	2026-02-21 01:02:57 (4 months ago)	🚨 Recon detected (nft drop) SRC=158.173.152.85 Observed=TCP dpt=4000 in=enp0s6 ttl=56 Time=recent(jo ... show more 🚨 Recon detected (nft drop) SRC=158.173.152.85 Observed=TCP dpt=4000 in=enp0s6 ttl=56 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 xmission.com	2026-02-06 00:50:28 (4 months ago)	Blocked by UFW (TCP on 1) Source port: 58447 TTL: 109 Packet length: 52 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 1) Source port: 58447 TTL: 109 Packet length: 52 TOS: 0x08 This report (for 158.173.152.85) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 HandyTreff.de	2026-01-26 21:30:28 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -68.697 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -68.697 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-20 04:14:17 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇹🇭 thaizone.com	2025-12-15 05:56:44 (6 months ago)	Password guessing attack (SM11) #1	Email Spam Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:9e97:5001

🇰🇷 211.57.200.119

🇬🇧 217.146.80.123

🇳🇱 195.62.32.180

🇺🇸 143.42.1.123

🇨🇳 115.28.184.230

🇳🇴 87.120.104.75

🇷🇴 80.94.92.165

🇺🇸 64.62.197.175

🇺🇸 64.62.156.153

🇳🇱 45.148.10.31

🇺🇸 2604:a880:400:d1:0:4:9e97:6001

🇧🇷 205.210.31.202

🇮🇳 117.205.41.212

🇩🇪 87.106.255.77

🇺🇸 20.51.235.107

🇰🇿 185.35.223.45

🇮🇩 157.15.67.253

🇰🇿 95.57.74.207

🇩🇪 69.5.169.114