JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.20.5

158.173.20.5 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 15%: ?

15%

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.20.5

Whois 158.173.20.5

IP Abuse Reports for 158.173.20.5:

This IP address has been reported a total of 11 times from 10 distinct sources. 158.173.20.5 was first reported on October 13th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-06-05 07:34:03 (2 weeks ago)	158.173.20.5 - - [05/Jun/2026:10:33:49 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.tx ... show more 158.173.20.5 - - [05/Jun/2026:10:33:49 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 404 628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 158.173.20.5 - - [05/Jun/2026:10:34:02 +0300] "GET /wp-content/plugins/advanced-custom-post-type/changelog.md HTTP/1.1" 404 628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 157cd6d7-1140-4c75-95c6-4a267aae4754	DDoS Attack
🇧🇪 cmbplf	2026-05-11 11:28:12 (1 month ago)	20 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) Apple ... show more 20 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 Instagram 306.0.0.20.118 (iPhone12,1; iOS 15_6_1; en_GB; en; scale=2.00; 828x1792; 529083166) NW/3 19 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:0.9.3) Gecko/20010802 16 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021208 Debian/1.2.1-2 12 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.28.7586 show less	Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-03-21 21:11:12 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 xmission.com	2026-03-18 08:48:28 (3 months ago)	Blocked by UFW (TCP on 6881) Source port: 49165 TTL: 48 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 49165 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.20.5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-03-12 00:23:09 (3 months ago)	Blocked by UFW (TCP on 9050) Source port: 20677 TTL: 49 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9050) Source port: 20677 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 158.173.20.5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-02-26 17:47:08 (3 months ago)	158.173.20.5 - - [26/Feb/2026:17:47:06 +0000] "GET /bothole/stinkwell.php?keywords=mFym&t=32005%29%2 ... show more 158.173.20.5 - - [26/Feb/2026:17:47:06 +0000] "GET /bothole/stinkwell.php?keywords=mFym&t=32005%29%20AND%201923%3D1923%20AND%20%285181%3D5181&sf=msgonly&sid=9d05025caf2301fa91cfcd54721fc263 HTTP/1.1" 307 6143 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; fr-fr) AppleWebKit/523.10.3 (KHTML, like Gecko) Version/3.0.4 Safari/523.10" ... show less	SQL Injection
🇺🇸 bigscoots.com	2026-02-11 17:26:21 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.5 (NL/The Netherlands/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.5 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-11 12:25:51 dovecot_plain authenticator failed for H=([10.5.18.121]) [158.173.20.5]:33536: 535 Incorrect authentication data ([email protected]) 2026-02-11 12:25:57 dovecot_login authenticator failed for H=([10.5.18.121]) [158.173.20.5]:33536: 535 Incorrect authentication data ([email protected]) 2026-02-11 12:26:03 dovecot_plain authenticator failed for H=([10.5.18.121]) [158.173.20.5]:49924: 535 Incorrect authentication data ([email protected]) 2026-02-11 12:26:09 dovecot_login authenticator failed for H=([10.5.18.121]) [158.173.20.5]:49924: 535 Incorrect authentication data ([email protected]) 2026-02-11 12:26:18 dovecot_plain authenticator failed for H=([10.5.18.121]) [158.173.20.5]:26294: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 Freenex1911	2025-10-27 02:43:28 (7 months ago)	2025-10-27T02:43:27Z - RDP login from 158.173.20.5 failed multiple times.	Brute-Force
🇩🇪 DoSammy	2025-10-27 02:39:59 (7 months ago)	neu-RDP-Brute-Force	Brute-Force
🇨🇭 backslash	2025-10-13 19:30:01 (8 months ago)		Web Spam

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.119

🇺🇸 147.185.132.70

🇲🇦 81.192.46.32

🇺🇸 65.49.1.91

🇳🇱 34.91.0.68

🇹🇭 223.204.247.141

🇧🇷 187.51.208.158

🇩🇪 172.217.34.27

🇮🇳 157.32.121.28

🇨🇦 149.56.160.232

🇹🇼 118.171.26.35

🇨🇳 106.117.108.25

🇫🇷 91.231.89.113

🇺🇸 66.132.195.116

🇳🇱 45.153.34.114

🇨🇳 36.212.135.187

🇸🇬 118.26.111.107

🇸🇦 50.60.125.168

🇪🇬 197.121.28.86

🇬🇧 195.140.214.29