JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.21.48

158.173.21.48 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 2%: ?

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.21.48

Whois 158.173.21.48

IP Abuse Reports for 158.173.21.48:

This IP address has been reported a total of 13 times from 10 distinct sources. 158.173.21.48 was first reported on October 14th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-03 06:02:43 (1 week ago)	Try to connect to Port_Scan_2221_stealth	Port Scan
🇺🇸 xmission.com	2026-02-28 05:11:48 (3 months ago)	Blocked by UFW (TCP on 9050) Source port: 29553 TTL: 48 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9050) Source port: 29553 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.21.48) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 lp	2026-02-08 14:53:38 (4 months ago)	Email account brute force: 6 attempts were recorded from 158.173.21.48 2026-02-08T14:38:17+01:00 war ... show more Email account brute force: 6 attempts were recorded from 158.173.21.48 2026-02-08T14:38:17+01:00 warning: unknown[158.173.21.48]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-08T14:38:17+01:00 warning: unknown[158.173.21.48]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-08T14:38:17+01:00 warning: unknown[158.173.21.48]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-08T14:38:17+01:00 warning: unknown[158.173.21.48]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-08T14:38:24+01:00 warning: unknown[158.173.21.48]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-08T14:38:24+01:00 warning: unknown[158.173.21.48]: SASL LOGIN authentication failed: authen show less	Brute-Force
🇨🇿 lp	2026-02-08 01:24:24 (4 months ago)	Email account brute force: 5 attempts were recorded from 158.173.21.48 2026-02-08T02:04:00+01:00 war ... show more Email account brute force: 5 attempts were recorded from 158.173.21.48 2026-02-08T02:04:00+01:00 warning: unknown[158.173.21.48]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-08T02:04:00+01:00 warning: unknown[158.173.21.48]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-08T02:04:01+01:00 warning: unknown[158.173.21.48]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-02-08T02:04:01+01:00 warning: unknown[158.173.21.48]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-02-08T02:04:07+01:00 warning: unknown[158.173.21.48]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇺🇸 bigscoots.com	2026-02-08 01:02:57 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.21.48 (NL/The Netherlands/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.173.21.48 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-07 20:02:26 dovecot_plain authenticator failed for H=([10.22.18.131]) [158.173.21.48]:1438: 535 Incorrect authentication data ([email protected]) 2026-02-07 20:02:32 dovecot_login authenticator failed for H=([10.22.18.131]) [158.173.21.48]:1438: 535 Incorrect authentication data ([email protected]) 2026-02-07 20:02:38 dovecot_plain authenticator failed for H=([10.22.18.131]) [158.173.21.48]:52919: 535 Incorrect authentication data ([email protected]) 2026-02-07 20:02:44 dovecot_login authenticator failed for H=([10.22.18.131]) [158.173.21.48]:52919: 535 Incorrect authentication data ([email protected]) 2026-02-07 20:02:56 dovecot_plain authenticator failed for H=([10.22.18.131]) [158.173.21.48]:11021: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇪 grassau.com	2026-02-08 01:02:10 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.21.48 (NL/The Netherlands/-)	Brute-Force
🇮🇹 Progetto1	2026-02-07 17:49:02 (4 months ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
Anonymous	2025-12-17 19:10:11 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-12-14 05:45:11 (6 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-11-05 03:03:59 (7 months ago)	Try to connect to Port_Scan_1521_stealth	Port Scan
Anonymous	2025-10-18 14:08:00 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 SCHAPPY	2025-10-15 17:59:58 (8 months ago)	Probing for non-installed web apps or current vulnerabilities.	Hacking Web App Attack
Anonymous	2025-10-14 04:30:24 (8 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.170.175.95

🇧🇬 193.24.211.107

🇩🇪 91.132.145.3

🇺🇸 35.254.232.101

🇳🇱 178.16.53.230

🇻🇳 171.251.111.168

🇭🇷 149.102.247.241

🇫🇷 51.68.34.131

🇳🇱 45.148.10.183

🇻🇳 27.79.46.5

🇻🇳 14.225.7.70

🇨🇳 14.103.118.186

🇮🇱 5.100.255.168

🇺🇸 2607:f8b0:400e:c1e::128

🇺🇸 198.44.167.111

🇰🇷 168.110.107.79

🇺🇸 165.1.64.235

🇭🇰 119.28.47.247

🇧🇩 103.86.198.162

🇳🇱 91.92.40.28