JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.20.71

158.173.20.71 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 5%: ?

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.20.71

Whois 158.173.20.71

IP Abuse Reports for 158.173.20.71:

This IP address has been reported a total of 16 times from 10 distinct sources. 158.173.20.71 was first reported on December 9th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-21 17:14:49 (8 hours ago)	Blocked by UFW (TCP on 55493) Source port: 45820 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 55493) Source port: 45820 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 158.173.20.71) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-21 05:14:08 (20 hours ago)	Blocked by UFW (TCP on 55493) Source port: 48650 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 55493) Source port: 48650 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 158.173.20.71) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-20 15:12:57 (1 day ago)	Blocked by UFW (TCP on 51413) Source port: 49159 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 49159 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.20.71) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-18 03:37:59 (3 days ago)	Blocked by UFW (TCP on 9050) Source port: 26067 TTL: 49 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9050) Source port: 26067 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 158.173.20.71) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-14 21:35:59 (1 week ago)	Blocked by UFW (TCP on 20625) Source port: 61844 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 20625) Source port: 61844 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.20.71) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-02-14 00:25:28 (4 months ago)	Blocked by UFW (TCP on 17708) Source port: 19499 TTL: 49 Packet length: 64 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 17708) Source port: 19499 TTL: 49 Packet length: 64 TOS: 0x08 This report (for 158.173.20.71) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 bigscoots.com	2026-02-11 14:54:56 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.71 (NL/The Netherlands/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.71 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-11 09:54:29 dovecot_plain authenticator failed for H=([10.31.18.153]) [158.173.20.71]:35424: 535 Incorrect authentication data ([email protected]) 2026-02-11 09:54:35 dovecot_login authenticator failed for H=([10.31.18.153]) [158.173.20.71]:35424: 535 Incorrect authentication data ([email protected]) 2026-02-11 09:54:42 dovecot_plain authenticator failed for H=([10.31.18.153]) [158.173.20.71]:52887: 535 Incorrect authentication data ([email protected]) 2026-02-11 09:54:44 dovecot_login authenticator failed for H=([10.31.18.153]) [158.173.20.71]:52887: 535 Incorrect authentication data ([email protected]) 2026-02-11 09:54:53 dovecot_plain authenticator failed for H=([10.31.18.153]) [158.173.20.71]:53087: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2026-02-11 14:21:16 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.71 (NL/The Netherlands/-)	Brute-Force
🇷🇸 Smel	2026-02-11 05:49:01 (4 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
Anonymous	2026-02-11 05:36:01 (4 months ago)	Authentication failure	Brute-Force
Anonymous	2026-02-09 04:30:34 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇧🇷 chronos	2026-02-08 20:59:24 (4 months ago)	Generic malicious activity detected: Tentativa de varredura de porta TCP... \| Proto: TCP \| Port: 596 ... show more Generic malicious activity detected: Tentativa de varredura de porta TCP... \| Proto: TCP \| Port: 59601 \| Location: The Netherlands, Amsterdam show less	Port Scan Hacking
🇨🇿 lp	2026-02-08 03:00:32 (4 months ago)	Email account brute force: 4 attempts were recorded from 158.173.20.71 2026-02-08T02:51:13+01:00 war ... show more Email account brute force: 4 attempts were recorded from 158.173.20.71 2026-02-08T02:51:13+01:00 warning: unknown[158.173.20.71]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-08T02:51:13+01:00 warning: unknown[158.173.20.71]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-08T02:51:13+01:00 warning: unknown[158.173.20.71]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-08T02:51:13+01:00 warning: unknown[158.173.20.71]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇭 backslash	2026-02-04 20:25:03 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 bigscoots.com	2026-01-28 13:21:44 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.71 (NL/The Netherlands/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.71 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-28 08:21:24 dovecot_plain authenticator failed for H=([10.31.18.77]) [158.173.20.71]:27477: 535 Incorrect authentication data ([email protected]) 2026-01-28 08:21:30 dovecot_login authenticator failed for H=([10.31.18.77]) [158.173.20.71]:27477: 535 Incorrect authentication data ([email protected]) 2026-01-28 08:21:39 dovecot_plain authenticator failed for H=([10.31.18.77]) [158.173.20.71]:48414: 535 Incorrect authentication data ([email protected]) 2026-01-28 08:21:41 dovecot_login authenticator failed for H=([10.31.18.77]) [158.173.20.71]:48414: 535 Incorrect authentication data ([email protected]) 2026-01-28 08:21:43 dovecot_plain authenticator failed for H=([10.31.18.77]) [158.173.20.71]:32549: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:9e97:5001

🇰🇷 211.57.200.119

🇬🇧 217.146.80.123

🇳🇱 195.62.32.180

🇺🇸 143.42.1.123

🇨🇳 115.28.184.230

🇳🇴 87.120.104.75

🇷🇴 80.94.92.165

🇺🇸 64.62.197.175

🇺🇸 64.62.156.153

🇳🇱 45.148.10.31

🇺🇸 2604:a880:400:d1:0:4:9e97:6001

🇧🇷 205.210.31.202

🇮🇳 117.205.41.212

🇩🇪 87.106.255.77

🇺🇸 20.51.235.107

🇰🇿 185.35.223.45

🇮🇩 157.15.67.253

🇰🇿 95.57.74.207

🇩🇪 69.5.169.114