JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.21.132

158.173.21.132 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 12%: ?

12%

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.21.132

Whois 158.173.21.132

IP Abuse Reports for 158.173.21.132:

This IP address has been reported a total of 25 times from 18 distinct sources. 158.173.21.132 was first reported on October 6th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-29 22:27:09 (1 day ago)	Blocked by UFW (TCP on 51413) Source port: 50484 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 50484 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.21.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-21 08:17:17 (1 week ago)	Blocked by UFW (TCP on 51413) Source port: 33244 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 33244 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 158.173.21.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-19 04:28:19 (1 month ago)	Blocked by UFW (TCP on 31048) Source port: 1953 TTL: 47 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 31048) Source port: 1953 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 158.173.21.132) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 EGP Abuse Dept	2026-05-16 04:53:05 (1 month ago)	Scraping webshop URLs (www.badgehouder.nl), likely botnet drone	Bad Web Bot Exploited Host
🇸🇮 administrator	2026-03-12 08:22:15 (3 months ago)	2026-03-12 04:35:16,036 fail2ban.actions [1259]: NOTICE [ninjafirewall-syslog] Ban 158.173.2 ... show more 2026-03-12 04:35:16,036 fail2ban.actions [1259]: NOTICE [ninjafirewall-syslog] Ban 158.173.21.132 2026-03-12 06:36:35,355 fail2ban.actions [1259]: NOTICE [ninjafirewall-syslog] Ban 158.173.21.132 2026-03-12 09:22:14,236 fail2ban.actions [1259]: NOTICE [ninjafirewall-syslog] Ban 158.173.21.132 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇸🇬 abuseipreport.darajati	2026-03-12 06:45:16 (3 months ago)	158.173.21.132 - - [2026-03-12T14:44:32+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 131 ... show more 158.173.21.132 - - [2026-03-12T14:44:32+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 1317 "https://hestiaistiviani.com/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 158.173.21.132 - - [2026-03-12T14:44:49+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 1316 "https://hestiaistiviani.com/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 158.173.21.132 - - [2026-03-12T14:44:49+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 1316 "https://hestiaistiviani.com/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 158.173.21.132 - - [2026-03-12T14:45:16+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 1318 "https://hestiaistiviani.com/wp-login.php?action=register" "Mozilla/5.0 (Win ... show less	Web App Attack
🇩🇪 LRob.fr	2026-03-12 04:30:12 (3 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇸🇬 abuseipreport.darajati	2026-03-12 03:51:47 (3 months ago)	158.173.21.132 - - [2026-03-12T11:50:11+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 132 ... show more 158.173.21.132 - - [2026-03-12T11:50:11+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 1325 "https://hestiaistiviani.com/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 158.173.21.132 - - [2026-03-12T11:50:34+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 1322 "https://hestiaistiviani.com/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 158.173.21.132 - - [2026-03-12T11:50:57+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 1319 "https://hestiaistiviani.com/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 158.173.21.132 - - [2026-03-12T11:51:24+08:00] "POST /wp-login.php?action=register HTTP/1.1" 200 1318 "https://hestiaistiviani.com/wp-login.php?action=register" "Mozilla/5.0 (Win ... show less	Web App Attack
Anonymous	2026-02-08 07:34:02 (4 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
Anonymous	2026-01-17 08:55:15 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-01-14 08:50:17 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 ezsystems.com	2026-01-13 16:16:25 (5 months ago)		Web Spam
🇨🇭 backslash	2026-01-13 09:15:07 (5 months ago)	block ruleset 1E8A9918B1655D0828F2EEF05553DD2681055C9A	Web Spam
🇫🇷 France Artisanat	2026-01-12 19:17:57 (5 months ago)	Photos for my escort application are uploaded. Let me know if the quality is good. Preview: ... show more Photos for my escort application are uploaded. Let me know if the quality is good. Preview: https://tinyurl.com/2njeayz7 show less	Web Spam
🇦🇺 oncord	2026-01-12 18:01:59 (5 months ago)	Form spam	Web Spam

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a12:da80:c192:c1cc:8c5a:6b4d:f7b8:41e5

🇨🇦 216.26.241.94

🇨🇦 216.26.239.76

🇺🇸 209.50.171.68

🇺🇸 209.50.161.220

🇮🇩 202.58.193.141

🇩🇪 195.63.31.162

🇬🇧 167.99.192.13

🇫🇷 163.172.143.147

🇸🇬 103.13.206.100

🇫🇷 94.23.152.111

🇱🇹 81.30.98.49

🇱🇹 81.30.98.44

🇧🇬 78.128.113.46

🇳🇱 45.148.10.141

🇳🇱 45.148.10.30

🇺🇸 45.3.33.177

🇩🇿 41.97.18.91

🇲🇦 41.92.108.18

🇺🇸 20.64.105.149