JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.25.139

158.173.25.139 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer New York City, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.25.139

Whois 158.173.25.139

IP Abuse Reports for 158.173.25.139:

This IP address has been reported a total of 16 times from 12 distinct sources. 158.173.25.139 was first reported on October 12th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-04-01 00:55:10 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇮🇩 aaKenshin	2026-03-18 15:13:04 (2 months ago)	Suspicious activity detected from IP 158.173.25.139 based on mailserver logs. Sample logs: 2026-03-1 ... show more Suspicious activity detected from IP 158.173.25.139 based on mailserver logs. Sample logs: 2026-03-18 23:12:14,423 INFO [qtp2102534528-158592] [name=*@.id;ip=172.16.0.182;oip=158.173.25.139;oport=2849;oproto=smtp;port=35798;soapId=2e797d66;] soap - AuthRequest elapsed=74 2026-03-18 23:12:15,363 INFO [qtp2102534528-158581] [name=*@.id;ip=172.16.0.182;oip=158.173.25.139;oport=2849;oproto=smtp;port=35814;soapId=2e797d67;] SoapEngine - handler exception: authentication failed for [], LDAP error: - unable to ldap authenticate: invalid credentials 2026-03-18 23:12:15,363 INFO [qtp2102534528-158581] [name=@.id;ip=172.16.0.182;oip=158.173.25.139;oport=2849;oproto=smtp;port=35814;soapId=2e797d67;] soap - AuthRequest elapsed=67 2026-03-18 23:12:52,985 INFO [qtp2102534528-158600] [name=@.id;ip=172.16.0.182;oip=158.173.25.139;oport=33599;oproto=smtp;port=49446;soapId=2e797d68;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authentica show less	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-15 20:12:04 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-14 20:12:03 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2026-03-13 23:20:55 (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-13 14:12:01 (3 months ago)	...	Brute-Force
Anonymous	2026-03-13 14:11:19 (3 months ago)	2026-03-13T15:11:03.135636+01:00 postfix/smtpd[2464679]: warning: unknown[158.173.25.139]: SASL PLA ... show more 2026-03-13T15:11:03.135636+01:00 postfix/smtpd[2464679]: warning: unknown[158.173.25.139]: SASL PLAIN authentication failed: (reason unavailable), 2026-03-13T15:11:09.366300+01:00 postfix/smtpd[2464679]: warning: unknown[158.173.25.139]: SASL LOGIN authentication failed: (reason unavailable), 2026-03-13T15:11:17.142001+01:00 postfix/smtps/smtpd[2465028]: warning: unknown[158.173.25.139]: SASL PLAIN authentication failed: (reason unavailable), show less	Email Spam Brute-Force
Anonymous	2026-03-13 14:02:09 (3 months ago)	Authentication failure	Brute-Force
Anonymous	2026-03-13 13:17:07 (3 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 xmission.com	2026-03-13 13:04:26 (3 months ago)	Blocked by UFW (TCP on 9800) Source port: 44813 TTL: 25 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9800) Source port: 44813 TTL: 25 Packet length: 44 TOS: 0x00 This report (for 158.173.25.139) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 lp	2026-03-03 14:56:38 (3 months ago)	Email account brute force: 1 attempts were recorded from 158.173.25.139 2026-03-03T06:48:49+01:00 wa ... show more Email account brute force: 1 attempts were recorded from 158.173.25.139 2026-03-03T06:48:49+01:00 warning: unknown[158.173.25.139]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇮🇹 VHosting	2026-03-03 13:18:47 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇷🇪 hodi.host	2026-01-23 02:49:17 (4 months ago)	(CT) IP 158.173.25.139 (US/United States/-) found to have 2 connections; Ports: ; Direction: inout; ... show more (CT) IP 158.173.25.139 (US/United States/-) found to have 2 connections; Ports: ; Direction: inout; Trigger: CT_LIMIT; Logs: tcp: 158.173.25.139:56457 -> 192.168.161.12:443 (TIME_WAIT) tcp: 158.173.25.139:27695 -> 192.168.161.12:80 (TIME_WAIT) show less	Port Scan
🇨🇿 lp	2025-11-11 08:53:03 (7 months ago)	Email account brute force: 1 attempts were recorded from 158.173.25.139 2025-11-11T08:21:15+01:00 wa ... show more Email account brute force: 1 attempts were recorded from 158.173.25.139 2025-11-11T08:21:15+01:00 warning: unknown[158.173.25.139]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇮🇹 VHosting	2025-10-21 02:31:30 (7 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.2

🇧🇪 198.235.24.186

🇨🇳 175.30.48.196

🇩🇪 167.94.146.66

🇩🇪 156.236.31.85

🇳🇱 91.92.40.8

🇲🇦 81.192.46.29

🇬🇧 35.203.210.3

🇸🇬 188.166.251.103

🇹🇷 185.255.95.139

🇩🇪 185.14.92.28

🇳🇱 176.65.139.85

🇺🇸 162.216.149.33

🇳🇿 121.73.163.143

🇺🇸 91.230.168.200

🇱🇹 46.29.234.126

🇮🇪 34.250.42.81

🇯🇵 8.211.157.94

🇧🇬 91.191.209.74

🇺🇸 35.196.224.84