JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.157.1

158.173.157.1 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 1%: ?

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.157.1

Whois 158.173.157.1

IP Abuse Reports for 158.173.157.1:

This IP address has been reported a total of 20 times from 17 distinct sources. 158.173.157.1 was first reported on February 3rd 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-05-20 22:08:28 (4 weeks ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇦🇷 Turu	2026-02-19 21:00:00 (3 months ago)	DDoS attack + email spoofing + phishing + malware delivery targeting SMTP mail server (TCP/25). Mult ... show more DDoS attack + email spoofing + phishing + malware delivery targeting SMTP mail server (TCP/25). Multiple connection attempts detected. Detected on 2026-02-19, Buenos Aires, Argentina. show less	DDoS Attack Open Proxy Email Spam Port Scan Brute-Force
🇹🇷 rtbh.com.tr	2026-02-10 00:11:29 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-06 20:11:25 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-02-06 16:35:35 (4 months ago)	Port scanning: unknown[158.173.157.1] unknown[158.173.157.1] unknown[158.173.157.1]	Brute-Force
Anonymous	2026-02-05 21:40:13 (4 months ago)	Feb 5 22:40:06 mx4 postfix/submission/smtpd[730120]: warning: unknown[158.173.157.1]: SASL PLAIN au ... show more Feb 5 22:40:06 mx4 postfix/submission/smtpd[730120]: warning: unknown[158.173.157.1]: SASL PLAIN authentication failed: Feb 5 22:40:12 mx4 postfix/submission/smtpd[730120]: warning: unknown[158.173.157.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇺🇸 bigscoots.com	2026-02-05 17:10:01 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.157.1 (FR/France/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 158.173.157.1 (FR/France/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-05 12:08:49 dovecot_plain authenticator failed for H=([192.168.11.101]) [158.173.157.1]:50484: 535 Incorrect authentication data ([email protected]) 2026-02-05 12:08:55 dovecot_login authenticator failed for H=([192.168.11.101]) [158.173.157.1]:50484: 535 Incorrect authentication data ([email protected]) 2026-02-05 12:09:07 dovecot_plain authenticator failed for H=([192.168.11.101]) [158.173.157.1]:5054: 535 Incorrect authentication data ([email protected]) 2026-02-05 12:09:09 dovecot_login authenticator failed for H=([192.168.11.101]) [158.173.157.1]:5054: 535 Incorrect authentication data ([email protected]) 2026-02-05 12:09:59 dovecot_plain authenticator failed for H=([192.168.11.101]) [158.173.157.1]:23475: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-02-05 15:53:17 (4 months ago)	Feb 4 20:29:17 mx1 postfix/smtps/smtpd[2258]: warning: unknown[158.173.157.1]: SASL LOGIN authentic ... show more Feb 4 20:29:17 mx1 postfix/smtps/smtpd[2258]: warning: unknown[158.173.157.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 20:29:38 mx1 postfix/smtps/smtpd[2258]: warning: unknown[158.173.157.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 5 16:53:16 mx1 postfix/smtps/smtpd[3679]: warning: unknown[158.173.157.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇮🇹 Progetto1	2026-02-05 10:23:02 (4 months ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇩🇪 ksol-hostmaster	2026-02-05 07:01:55 (4 months ago)	Feb 5 08:01:54 ksol postfix/submissions-465/smtpd[89134]: NOQUEUE: reject: CONNECT from unknown[158 ... show more Feb 5 08:01:54 ksol postfix/submissions-465/smtpd[89134]: NOQUEUE: reject: CONNECT from unknown[158.173.157.1]:3335: 554 5.7.1 Service unavailable; Client host [158.173.157.1] blocked using sbl-xbl.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/158.173.157.1 / Listed by XBL, see https://check.spamhaus.org/query/ip/158.173.157.1; proto=SMTP Feb 5 08:01:55 ksol postfix/submissions-465/smtpd[89134]: NOQUEUE: reject: CONNECT from unknown[158.173.157.1]:3485: 554 5.7.1 Service unavailable; Client host [158.173.157.1] blocked using sbl-xbl.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/158.173.157.1 / Listed by XBL, see https://check.spamhaus.org/query/ip/158.173.157.1; proto=SMTP ... show less	Email Spam
🇨🇿 mapik	2026-02-05 05:33:41 (4 months ago)	srv=DP host=mail1.dolnipodluzi.cz / send 2026-02-05 06:33:38 \| SASL_POSTFIX=4 / SASL_ABUSE=4 / Reci ... show more srv=DP host=mail1.dolnipodluzi.cz / send 2026-02-05 06:33:38 \| SASL_POSTFIX=4 / SASL_ABUSE=4 / Recidive=23 / show less	Brute-Force
🇭🇺 Lacika555	2026-02-05 05:27:51 (4 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 zumbo.net	2026-02-05 01:52:50 (4 months ago)	Feb 05 04:52:50 auth: Info: passwd-file([email protected],158.173.157.1): unknown user Feb 05 04:52:50 ... show more Feb 05 04:52:50 auth: Info: passwd-file([email protected],158.173.157.1): unknown user Feb 05 04:52:50 auth: Info: passwd-file([email protected],158.173.157.1): unknown user ... show less	Brute-Force
🇩🇪 iNetWorker	2026-02-05 01:30:14 (4 months ago)	smtp	Brute-Force
🇺🇸 bigscoots.com	2026-02-05 01:25:58 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.157.1 (FR/France/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 158.173.157.1 (FR/France/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-04 20:03:18 dovecot_login authenticator failed for H=(localhost.localdomain) [158.173.157.1]:37885: 535 Incorrect authentication data ([email protected]) 2026-02-04 20:03:18 dovecot_login authenticator failed for H=(localhost.localdomain) [158.173.157.1]:37886: 535 Incorrect authentication data ([email protected]) 2026-02-04 20:03:25 dovecot_login authenticator failed for H=(localhost.localdomain) [158.173.157.1]:61843: 535 Incorrect authentication data ([email protected]) 2026-02-04 20:03:25 dovecot_login authenticator failed for H=(localhost.localdomain) [158.173.157.1]:61842: 535 Incorrect authentication data ([email protected]) 2026-02-04 20:25:58 dovecot_login authenticator failed for H=(localhost.localdomain) [158.173.157.1]:8077: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.63.52.54

🇮🇩 114.10.47.235

🇩🇪 213.209.159.56

🇺🇸 205.210.31.60

🇬🇧 188.240.59.16

🇺🇸 159.65.225.222

🇺🇸 158.94.187.14

🇫🇮 147.185.133.5

🇹🇼 128.14.227.52

🇭🇰 123.58.210.86

🇸🇪 31.134.3.212

🇳🇱 188.227.84.5

🇺🇸 162.216.149.13

🇱🇾 102.211.7.162

🇷🇺 82.204.185.138

🇺🇸 64.62.197.75

🇺🇸 52.165.81.92

🇧🇪 34.156.226.226

🇺🇸 172.217.107.25

🇺🇸 172.56.167.14