JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.20.154

158.173.20.154 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 23%: ?

23%

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.20.154

Whois 158.173.20.154

IP Abuse Reports for 158.173.20.154:

This IP address has been reported a total of 48 times from 33 distinct sources. 158.173.20.154 was first reported on October 31st 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-06-10 22:12:34 (3 days ago)	2026-06-07 14:43:04,114 fail2ban.actions [1104]: NOTICE [webadmin-badips] Ban 158.173.20.154 ... show more 2026-06-07 14:43:04,114 fail2ban.actions [1104]: NOTICE [webadmin-badips] Ban 158.173.20.154 2026-06-10 00:05:07,868 fail2ban.actions [1080]: NOTICE [webadmin-badips] Ban 158.173.20.154 2026-06-07 14:43:04,114 fail2ban.actions [1104]: NOTICE [webadmin-badips] Ban 158.173.20.154 2026-06-10 00:05:07,868 fail2ban.actions [1080]: NOTICE [webadmin-badips] Ban 158.173.20.154 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇨🇿 plzenskypruvodce.cz	2026-06-07 12:26:03 (1 week ago)	2026-06-07T14:26:02.607980+02:00 web wordpress(varhanykolin.cz)[989784]: Immediately block connectio ... show more 2026-06-07T14:26:02.607980+02:00 web wordpress(varhanykolin.cz)[989784]: Immediately block connections from 158.173.20.154 ... show less	Brute-Force
🇮🇹 eliosbrocchi	2026-06-07 12:22:24 (1 week ago)	2026-06-07T14:22:23.286071+02:00 thunderchild wordpress(vocidallapiazzaliberta.ddns.net)[1035448]: I ... show more 2026-06-07T14:22:23.286071+02:00 thunderchild wordpress(vocidallapiazzaliberta.ddns.net)[1035448]: Immediately block connections from 158.173.20.154 ... show less	VPN IP
🇬🇧 consul.to	2026-04-25 07:07:13 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 Ticlem	2026-04-04 01:03:18 (2 months ago)	2026-04-04T02:33:16.588094+02:00 clement-turlure kernel: [3642183.220497] [UFW BLOCK] IN=enp0s31f6 O ... show more 2026-04-04T02:33:16.588094+02:00 clement-turlure kernel: [3642183.220497] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=158.173.20.154 DST=95.216.21.136 LEN=132 TOS=0x00 PREC=0x00 TTL=55 ID=43092 PROTO=UDP SPT=42524 DPT=6881 LEN=112 2026-04-04T02:48:16.469107+02:00 clement-turlure kernel: [3643083.109222] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=158.173.20.154 DST=95.216.21.136 LEN=132 TOS=0x00 PREC=0x00 TTL=55 ID=55555 PROTO=UDP SPT=45838 DPT=6881 LEN=112 2026-04-04T03:03:17.299729+02:00 clement-turlure kernel: [3643983.948845] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=158.173.20.154 DST=95.216.21.136 LEN=132 TOS=0x00 PREC=0x00 TTL=55 ID=59945 PROTO=UDP SPT=24046 DPT=6881 LEN=112 ... show less	Port Scan
🇨🇿 lp	2026-02-11 13:22:15 (4 months ago)	Email account brute force: 4 attempts were recorded from 158.173.20.154 2026-02-11T14:04:43+01:00 wa ... show more Email account brute force: 4 attempts were recorded from 158.173.20.154 2026-02-11T14:04:43+01:00 warning: unknown[158.173.20.154]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-11T14:04:43+01:00 warning: unknown[158.173.20.154]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-11T14:04:44+01:00 warning: unknown[158.173.20.154]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-11T14:04:44+01:00 warning: unknown[158.173.20.154]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇹🇭 thaizone.com	2026-02-11 13:06:20 (4 months ago)	Mail credential brute-force attack (SMG1 [2]) #1	Email Spam Brute-Force
🇨🇿 lp	2026-02-09 16:22:45 (4 months ago)	Email account brute force: 12 attempts were recorded from 158.173.20.154 2026-02-09T15:59:50+01:00 w ... show more Email account brute force: 12 attempts were recorded from 158.173.20.154 2026-02-09T15:59:50+01:00 warning: unknown[158.173.20.154]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-09T15:59:50+01:00 warning: unknown[158.173.20.154]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-09T15:59:51+01:00 warning: unknown[158.173.20.154]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-09T15:59:51+01:00 warning: unknown[158.173.20.154]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-09T15:59:57+01:00 warning: unknown[158.173.20.154]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-09T15:59:57+01:00 warning: unknown[158.173.20.154]: SASL LOGIN authentication failed show less	Brute-Force
🇩🇪 R.G.	2026-02-09 16:01:32 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.154 (NL/The Netherlands/-): 5 in the last 900 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.154 (NL/The Netherlands/-): 5 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: show less	Brute-Force
Anonymous	2026-02-09 14:46:01 (4 months ago)	...	Brute-Force
Anonymous	2026-02-09 14:30:26 (4 months ago)	2026-02-09 15:30:24.116 [1522346] no host name found for IP address 158.173.20.154 2026-02-09 15:30: ... show more 2026-02-09 15:30:24.116 [1522346] no host name found for IP address 158.173.20.154 2026-02-09 15:30:24.137 [1522342] no host name found for IP address 158.173.20.154 2026-02-09 15:30:24.141 [1522342] no MAIL in SMTP connection from [158.173.20.154]:25256 I=[217.197.86.168]:587 Ci=1522342 D=0.116s ... show less	Email Spam
🇮🇩 aaKenshin	2026-02-09 14:15:42 (4 months ago)	Suspicious activity detected from IP 158.173.20.154 based on mailserver logs. Sample logs: 2026-02-0 ... show more Suspicious activity detected from IP 158.173.20.154 based on mailserver logs. Sample logs: 2026-02-09 22:15:26,435 INFO [qtp2102534528-21489] [ip=172.16.0.182;oip=158.173.20.154;oport=60689;oproto=smtp;port=49792;soapId=2e788000;] SoapEngine - handler exception: authentication failed for [], account not found 2026-02-09 22:15:26,435 INFO [qtp2102534528-21489] [ip=172.16.0.182;oip=158.173.20.154;oport=60689;oproto=smtp;port=49792;soapId=2e788000;] soap - AuthRequest elapsed=1 2026-02-09 22:15:38,008 INFO [qtp2102534528-21509] [ip=172.16.0.182;oip=158.173.20.154;oport=63174;oproto=smtp;port=46350;soapId=2e788002;] account - Error occurred during authentication: authentication failed for []. Reason: account not found. 2026-02-09 22:15:38,008 INFO [qtp2102534528-21509] [ip=172.16.0.182;oip=158.173.20.154;oport=63174;oproto=smtp;port=46350;soapId=2e788002;] SoapEngine - handler exception: authentication failed for [**], account not found 2026-02-09 22:15:38,008 INFO [qtp2102534528- show less	Brute-Force
🇺🇸 nowyouknow	2025-11-10 16:06:45 (7 months ago)	(From [email protected]) METRYTRE888677MARETRYTR	Phishing Web Spam
🇦🇺 oncord	2025-11-10 09:51:30 (7 months ago)	Form spam	Web Spam
🇩🇪 KI-Netzwerk	2025-11-02 11:51:02 (7 months ago)	Bad Calls: Webpage scraping, Web App Attack	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.219

🇫🇷 51.68.34.131

🇨🇦 209.50.178.124

🇺🇸 209.50.174.248

🇺🇸 209.50.167.84

🇧🇷 205.210.31.185

🇧🇷 187.62.249.128

🇮🇳 168.144.113.21

🇮🇳 122.187.230.130

🇻🇳 103.75.182.132

🇭🇰 101.36.106.134

🇺🇸 100.50.17.159

🇱🇧 94.187.14.76

🇺🇸 65.111.1.107

🇺🇸 64.62.156.135

🇺🇸 47.89.192.29

🇺🇸 45.3.51.141

🇺🇸 44.153.120.187

🇺🇸 31.204.10.184

🇩🇪 4.184.246.230