JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.20.137

158.173.20.137 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 21%: ?

21%

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.20.137

Whois 158.173.20.137

IP Abuse Reports for 158.173.20.137:

This IP address has been reported a total of 27 times from 15 distinct sources. 158.173.20.137 was first reported on November 25th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-06-12 13:30:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-12 13:05:37 (1 week ago)	Too many Status 40X (11) Scanning/Probing (20)	Brute-Force Web App Attack
🇺🇸 xmission.com	2026-06-02 17:00:19 (2 weeks ago)	Blocked by UFW (TCP on 51765) Source port: 45291 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51765) Source port: 45291 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.20.137) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-02 00:26:39 (2 weeks ago)	Blocked by UFW (TCP on 65535) Source port: 6774 TTL: 49 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 65535) Source port: 6774 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 158.173.20.137) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-26 02:52:39 (3 weeks ago)	Blocked by UFW (TCP on 49442) Source port: 56178 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 49442) Source port: 56178 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.20.137) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2026-04-05 05:25:35 (2 months ago)	Honeypot hit: Empty payload (likely service probe); 1111 [1], 8085 [1], 3128 [1], 8081 [1] TCP Repor ... show more Honeypot hit: Empty payload (likely service probe); 1111 [1], 8085 [1], 3128 [1], 8081 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 MPL	2026-03-31 20:28:23 (2 months ago)	tcp/8888 (6 or more attempts)	Port Scan
🇩🇪 D3RP4UL	2026-03-27 16:08:46 (2 months ago)	Honeypot hit: Empty payload (likely service probe); 8081 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 8081 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇵🇱 sefinek.net	2026-03-26 23:51:38 (2 months ago)	Honeypot hit: Empty payload (likely service probe); 9002 [2], 8085 [1], 5678 [1] TCP Reported by: ht ... show more Honeypot hit: Empty payload (likely service probe); 9002 [2], 8085 [1], 5678 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 D3RP4UL	2026-03-24 05:34:46 (2 months ago)	Honeypot hit: Empty payload (likely service probe); 8081 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 8081 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 Cyber Crusader	2026-03-11 08:28:43 (3 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇩🇪 D3RP4UL	2026-03-09 00:18:55 (3 months ago)	Honeypot hit: Empty payload (likely service probe); 8081 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 8081 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇵🇱 sefinek.net	2026-03-05 20:19:29 (3 months ago)	Honeypot hit: Empty payload (likely service probe); 8181 [1], 3128 [1], 3129 [1], 5678 [1], 8888 [1] ... show more Honeypot hit: Empty payload (likely service probe); 8181 [1], 3128 [1], 3129 [1], 5678 [1], 8888 [1], 3125 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 D3RP4UL	2026-03-05 05:45:43 (3 months ago)	Honeypot hit: Unauthorized traffic (22 bytes of payload); 8081 [1] TCP Reported by: https://github.c ... show more Honeypot hit: Unauthorized traffic (22 bytes of payload); 8081 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 D3RP4UL	2026-03-02 12:42:47 (3 months ago)	Honeypot hit: Empty payload (likely service probe); 8081 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 8081 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.226

🇳🇱 176.65.139.181

🇭🇰 152.32.128.85

🇨🇳 119.53.253.2

🇨🇳 47.98.173.211

🇪🇬 41.128.181.199

🇬🇧 35.203.210.108

🇺🇸 20.14.75.2

🇩🇪 213.209.159.228

🇩🇪 178.104.76.193

🇺🇸 152.32.233.36

🇺🇸 143.198.174.13

🇱🇹 81.30.98.44

🇺🇸 66.132.172.236

🇺🇸 20.245.71.147

🇹🇼 198.235.24.106

🇦🇷 190.151.165.192

🇺🇸 74.7.175.188

🇮🇳 66.116.205.19

🇧🇬 62.182.118.138