JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.20.17

158.173.20.17 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.20.17

Whois 158.173.20.17

IP Abuse Reports for 158.173.20.17:

This IP address has been reported a total of 17 times from 16 distinct sources. 158.173.20.17 was first reported on January 9th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-04-09 13:06:25 (2 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇺🇸 xmission.com	2026-03-05 10:07:08 (3 months ago)	Blocked by UFW (TCP on 1) Source port: 50735 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 50735 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.20.17) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 rtbh.com.tr	2026-02-18 20:11:38 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇿 lp	2026-02-16 16:22:53 (4 months ago)	Email account brute force: 6 attempts were recorded from 158.173.20.17 2026-02-16T16:47:02+01:00 war ... show more Email account brute force: 6 attempts were recorded from 158.173.20.17 2026-02-16T16:47:02+01:00 warning: unknown[158.173.20.17]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:02+01:00 warning: unknown[158.173.20.17]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:03+01:00 warning: unknown[158.173.20.17]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:03+01:00 warning: unknown[158.173.20.17]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:09+01:00 warning: unknown[158.173.20.17]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:09+01:00 warning: unknown[158.173.20.17]: SASL LOGIN authentication failed: authen show less	Brute-Force
🇳🇱 Sonar	2026-02-16 16:20:06 (4 months ago)	Bad_host	Brute-Force
🇬🇧 gaztronics	2026-02-16 14:00:45 (4 months ago)	2026-02-16T14:00:41.938759 liberator sendmail[39979]: 61GE0fCQ039979: [158.173.20.17] did not issue ... show more 2026-02-16T14:00:41.938759 liberator sendmail[39979]: 61GE0fCQ039979: [158.173.20.17] did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA ... show less	Brute-Force
Anonymous	2026-02-16 13:59:03 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.17 (NL/Netherlands/-)	Brute-Force
🇳🇱 maxxsense	2026-02-16 13:41:58 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.17 (NL/The Netherlands/-)	Brute-Force
Anonymous	2026-02-09 15:54:02 (4 months ago)	...	Brute-Force
🇨🇭 Origon	2026-02-09 15:37:21 (4 months ago)	postfix-spam - IP: 158.173.20.17 - time="2026-02-09T16:37:21+01:00" level=info msg="(555f66b4f6a745 ... show more postfix-spam - IP: 158.173.20.17 - time="2026-02-09T16:37:21+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-spam by ip 158.173.20.17 (NL/212238) : 4h ban on Ip 158.173.20.17" module=db show less	Email Spam
🇺🇸 bigscoots.com	2026-02-09 15:36:53 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.17 (NL/The Netherlands/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.17 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-09 10:36:27 dovecot_plain authenticator failed for H=([10.17.18.21]) [158.173.20.17]:1823: 535 Incorrect authentication data ([email protected]) 2026-02-09 10:36:33 dovecot_login authenticator failed for H=([10.17.18.21]) [158.173.20.17]:1823: 535 Incorrect authentication data ([email protected]) 2026-02-09 10:36:40 dovecot_plain authenticator failed for H=([10.17.18.21]) [158.173.20.17]:46327: 535 Incorrect authentication data ([email protected]) 2026-02-09 10:36:42 dovecot_login authenticator failed for H=([10.17.18.21]) [158.173.20.17]:46327: 535 Incorrect authentication data ([email protected]) 2026-02-09 10:36:52 dovecot_plain authenticator failed for H=([10.17.18.21]) [158.173.20.17]:65157: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-02-09 13:41:13 (4 months ago)	2026-02-09T15:41:12.962581+02:00 soli-gate postfix/submission/smtpd[1786188]: warning: unknown[158.1 ... show more 2026-02-09T15:41:12.962581+02:00 soli-gate postfix/submission/smtpd[1786188]: warning: unknown[158.173.20.17]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇫🇷 UM3	2026-02-08 18:50:43 (4 months ago)	Exim Auth Failed	Brute-Force
Anonymous	2026-02-04 13:20:21 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇿🇦 maximonline.co.za	2026-01-12 07:50:10 (5 months ago)	Brute Force SMTP AUTH Attack	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.208

🇨🇳 182.54.23.215

🇳🇱 158.94.210.251

🇳🇱 146.190.21.73

🇰🇷 125.244.114.221

🇨🇳 112.94.253.26

🇺🇸 50.84.211.204

🇨🇳 221.234.36.123

🇹🇭 165.154.119.217

🇺🇸 147.182.246.240

🇨🇳 144.123.76.151

🇫🇷 37.44.238.68

🇨🇳 36.106.166.165

🇺🇸 216.180.246.224

🇺🇸 216.180.246.18

🇺🇸 172.174.132.252

🇰🇪 102.0.14.42

🇧🇬 79.124.59.78

🇵🇱 70.34.253.190

🇺🇸 69.49.112.62