JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.20.17

158.173.20.17 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.20.17

Whois 158.173.20.17

IP Abuse Reports for 158.173.20.17:

This IP address has been reported a total of 17 times from 16 distinct sources. 158.173.20.17 was first reported on January 9th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-04-09 13:06:25 (2 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇺🇸 xmission.com	2026-03-05 10:07:08 (3 months ago)	Blocked by UFW (TCP on 1) Source port: 50735 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 50735 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.20.17) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 rtbh.com.tr	2026-02-18 20:11:38 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇿 lp	2026-02-16 16:22:53 (4 months ago)	Email account brute force: 6 attempts were recorded from 158.173.20.17 2026-02-16T16:47:02+01:00 war ... show more Email account brute force: 6 attempts were recorded from 158.173.20.17 2026-02-16T16:47:02+01:00 warning: unknown[158.173.20.17]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:02+01:00 warning: unknown[158.173.20.17]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:03+01:00 warning: unknown[158.173.20.17]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:03+01:00 warning: unknown[158.173.20.17]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:09+01:00 warning: unknown[158.173.20.17]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-16T16:47:09+01:00 warning: unknown[158.173.20.17]: SASL LOGIN authentication failed: authen show less	Brute-Force
🇳🇱 Sonar	2026-02-16 16:20:06 (4 months ago)	Bad_host	Brute-Force
🇬🇧 gaztronics	2026-02-16 14:00:45 (4 months ago)	2026-02-16T14:00:41.938759 liberator sendmail[39979]: 61GE0fCQ039979: [158.173.20.17] did not issue ... show more 2026-02-16T14:00:41.938759 liberator sendmail[39979]: 61GE0fCQ039979: [158.173.20.17] did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA ... show less	Brute-Force
Anonymous	2026-02-16 13:59:03 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.17 (NL/Netherlands/-)	Brute-Force
🇳🇱 maxxsense	2026-02-16 13:41:58 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.17 (NL/The Netherlands/-)	Brute-Force
Anonymous	2026-02-09 15:54:02 (4 months ago)	...	Brute-Force
🇨🇭 Origon	2026-02-09 15:37:21 (4 months ago)	postfix-spam - IP: 158.173.20.17 - time="2026-02-09T16:37:21+01:00" level=info msg="(555f66b4f6a745 ... show more postfix-spam - IP: 158.173.20.17 - time="2026-02-09T16:37:21+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-spam by ip 158.173.20.17 (NL/212238) : 4h ban on Ip 158.173.20.17" module=db show less	Email Spam
🇺🇸 bigscoots.com	2026-02-09 15:36:53 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.17 (NL/The Netherlands/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.17 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-09 10:36:27 dovecot_plain authenticator failed for H=([10.17.18.21]) [158.173.20.17]:1823: 535 Incorrect authentication data ([email protected]) 2026-02-09 10:36:33 dovecot_login authenticator failed for H=([10.17.18.21]) [158.173.20.17]:1823: 535 Incorrect authentication data ([email protected]) 2026-02-09 10:36:40 dovecot_plain authenticator failed for H=([10.17.18.21]) [158.173.20.17]:46327: 535 Incorrect authentication data ([email protected]) 2026-02-09 10:36:42 dovecot_login authenticator failed for H=([10.17.18.21]) [158.173.20.17]:46327: 535 Incorrect authentication data ([email protected]) 2026-02-09 10:36:52 dovecot_plain authenticator failed for H=([10.17.18.21]) [158.173.20.17]:65157: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-02-09 13:41:13 (4 months ago)	2026-02-09T15:41:12.962581+02:00 soli-gate postfix/submission/smtpd[1786188]: warning: unknown[158.1 ... show more 2026-02-09T15:41:12.962581+02:00 soli-gate postfix/submission/smtpd[1786188]: warning: unknown[158.173.20.17]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇫🇷 UM3	2026-02-08 18:50:43 (4 months ago)	Exim Auth Failed	Brute-Force
Anonymous	2026-02-04 13:20:21 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇿🇦 maximonline.co.za	2026-01-12 07:50:10 (5 months ago)	Brute Force SMTP AUTH Attack	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.132.186.240

🇳🇱 51.158.205.47

🇬🇧 35.203.211.116

🇨🇦 4.206.92.183

🇹🇭 203.150.107.244

🇮🇳 103.47.151.208

🇰🇿 91.147.111.106

🇫🇷 85.217.140.36

🇺🇸 47.254.43.235

🇬🇧 185.247.137.21

🇮🇹 151.59.156.71

🇩🇪 69.5.169.71

🇳🇱 45.148.10.21

🇩🇪 43.165.7.135

🇯🇵 8.216.13.169

🇨🇳 115.190.192.112

🇧🇩 103.179.198.19

🇬🇧 195.96.139.150

🇺🇸 162.216.150.169

🇦🇪 86.97.243.182