JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.13.158.73

198.13.158.73 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 0%: ?

ISP	BL Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399629
Domain Name	blnwx.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.13.158.73

Whois 198.13.158.73

IP Abuse Reports for 198.13.158.73:

This IP address has been reported a total of 5 times from 4 distinct sources. 198.13.158.73 was first reported on March 5th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 infraestrutura	2026-03-30 13:57:00 (2 months ago)		SSH
🇺🇸 heyzg	2026-03-05 19:16:16 (3 months ago)	SSH honeypot \| Reconnaissance \| 2 auths, 20 cmds, 1.9m \| go_scanner \| URLs: hxxp://198[.]13[.]158[.] ... show more SSH honeypot \| Reconnaissance \| 2 auths, 20 cmds, 1.9m \| go_scanner \| URLs: hxxp://198[.]13[.]158[.]73:24334/kal64, hxxp://198[.]13[.]158[.]73:24334/amd64 show less	Hacking Exploited Host SSH
🇺🇸 psh-ack	2026-03-05 19:07:47 (3 months ago)	Go SSH client conducted 3 authentication attempts using weak/default credentials (root/root and root ... show more Go SSH client conducted 3 authentication attempts using weak/default credentials (root/root and root with profanity-laden password). Successfully authenticated once and executed uname -s to identify the system kernel type. Activity indicates automated reconnaissance using a custom Go-based SSH tool, consistent with botnet scanning behavior. No persistence mechanisms, lateral movement, downloads, or secondary payloads observed. Attack duration under 7 minutes suggests rapid enumeration across target ranges. show less	Brute-Force SSH
🇩🇪 heyzg	2026-03-05 19:00:35 (3 months ago)	SSH honeypot \| Reconnaissance \| 1 auths, 10 cmds, 10s \| go_scanner (likely bot) \| URLs: hxxp://198[. ... show more SSH honeypot \| Reconnaissance \| 1 auths, 10 cmds, 10s \| go_scanner (likely bot) \| URLs: hxxp://198[.]13[.]158[.]73:24334/kal64, hxxp://198[.]13[.]158[.]73:24334/amd64 show less	Hacking Exploited Host SSH
🇺🇸 Execoop	2026-03-05 19:00:30 (3 months ago)	SSH honeypot \| Reconnaissance \| 1 auths, 10 cmds, 16s \| go_scanner \| URLs: hxxp://198[.]13[.]158[.]7 ... show more SSH honeypot \| Reconnaissance \| 1 auths, 10 cmds, 16s \| go_scanner \| URLs: hxxp://198[.]13[.]158[.]73:24334/kal64, hxxp://198[.]13[.]158[.]73:24334/amd64 show less	Hacking Exploited Host SSH

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 201.182.112.170

🇳🇴 193.90.12.122

🇳🇱 192.87.173.76

🇧🇷 102.211.152.138

🇨🇦 68.183.204.69

🇮🇩 2406:da19:776:6e01:105c:eed2:112b:ee1a

🇪🇸 185.242.251.217

🇺🇸 185.187.171.15

🇷🇺 185.42.43.102

🇮🇩 182.253.48.60

🇵🇰 182.181.235.195

🇰🇷 118.216.88.229

🇺🇸 113.20.0.58

🇭🇰 101.36.106.78

🇺🇸 43.159.139.164

🇧🇪 35.187.190.34

🇧🇷 181.174.254.12

🇵🇪 179.6.2.117

🇮🇷 151.233.0.188

🇺🇸 107.174.161.99