JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.20.120

158.173.20.120 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 3%: ?

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.20.120

Whois 158.173.20.120

IP Abuse Reports for 158.173.20.120:

This IP address has been reported a total of 14 times from 14 distinct sources. 158.173.20.120 was first reported on October 30th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 matthieul.dev	2026-06-16 05:10:15 (5 days ago)	Blocked by os-abuseipdb; 7 hits, proto=tcp,udp, ports=20464,25826	Port Scan Brute-Force
🇫🇷 masterguru	2026-03-26 01:17:27 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 158.173.20.120 (NL/The Netherlands/-) ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 158.173.20.120 (NL/The Netherlands/-): 2 in the last 3600 secs (0-201) show less	Hacking
🇨🇭 Origon	2026-02-13 08:29:18 (4 months ago)	postfix-spam - IP: 158.173.20.120 - time="2026-02-13T09:29:18+01:00" level=info msg="(555f66b4f6a74 ... show more postfix-spam - IP: 158.173.20.120 - time="2026-02-13T09:29:18+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-spam by ip 158.173.20.120 (NL/212238) : 4h ban on Ip 158.173.20.120" module=db show less	Email Spam
🇺🇸 bigscoots.com	2026-02-13 08:26:50 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.120 (NL/The Netherlands/-): 5 in the last 3600 sec ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.120 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-13 03:26:25 dovecot_plain authenticator failed for H=([10.40.18.86]) [158.173.20.120]:10971: 535 Incorrect authentication data ([email protected]) 2026-02-13 03:26:31 dovecot_login authenticator failed for H=([10.40.18.86]) [158.173.20.120]:10971: 535 Incorrect authentication data ([email protected]) 2026-02-13 03:26:38 dovecot_plain authenticator failed for H=([10.40.18.86]) [158.173.20.120]:56569: 535 Incorrect authentication data ([email protected]) 2026-02-13 03:26:40 dovecot_login authenticator failed for H=([10.40.18.86]) [158.173.20.120]:56569: 535 Incorrect authentication data ([email protected]) 2026-02-13 03:26:49 dovecot_plain authenticator failed for H=([10.40.18.86]) [158.173.20.120]:35891: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇨🇿 lp	2026-02-09 05:56:19 (4 months ago)	Email account brute force: 8 attempts were recorded from 158.173.20.120 2026-02-09T06:30:17+01:00 wa ... show more Email account brute force: 8 attempts were recorded from 158.173.20.120 2026-02-09T06:30:17+01:00 warning: unknown[158.173.20.120]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-09T06:30:17+01:00 warning: unknown[158.173.20.120]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-09T06:30:18+01:00 warning: unknown[158.173.20.120]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-09T06:30:18+01:00 warning: unknown[158.173.20.120]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-09T06:30:24+01:00 warning: unknown[158.173.20.120]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-09T06:30:24+01:00 warning: unknown[158.173.20.120]: SASL LOGIN authentication failed: show less	Brute-Force
🇮🇹 VHosting	2026-02-08 14:10:25 (4 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-02-08 14:10:21 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.120 (NL/The Netherlands/North Holland/Amsterdam/-/ ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.120 (NL/The Netherlands/North Holland/Amsterdam/-/[redacted]) show less	Brute-Force
🇫🇷 Kimax	2026-02-06 17:18:48 (4 months ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
Anonymous	2026-01-19 10:54:00 (5 months ago)	Triggered by Scraper Score: 5 / reCAPTCHA challenge timed out	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Julio Covolato	2025-12-13 08:50:03 (6 months ago)	Imap or Submission login brute-force attacks.	Brute-Force
Anonymous	2025-12-13 08:46:03 (6 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇩🇪 check-the-sum.fr	2025-11-11 21:35:47 (7 months ago)	Port Scanning	Port Scan
🇧🇪 cmbplf	2025-11-07 07:20:22 (7 months ago)	529 limiting connections by zone (13m59s)	DDoS Attack
🇺🇸 xmission.com	2025-10-30 14:55:44 (7 months ago)	Blocked by UFW (TCP on 33546) Source port: 5319 TTL: 48 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 33546) Source port: 5319 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.20.120) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 81.19.216.104

🇲🇾 47.250.43.129

🇺🇸 209.46.125.221

🇭🇰 199.45.154.177

🇺🇸 195.184.76.135

🇺🇸 195.184.76.131

🇳🇱 193.176.31.251

🇳🇱 193.176.31.220

🇳🇱 193.176.31.219

🇰🇷 121.131.220.135

🇨🇳 106.13.120.65

🇳🇱 89.21.67.152

🇳🇱 89.21.67.148

🇺🇸 65.49.1.91

🇨🇳 61.129.70.208

🇳🇱 51.15.41.182

🇳🇱 45.153.34.181

🇨🇳 39.152.240.15

🇺🇸 20.14.88.205

🇨🇳 218.63.75.44