JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.152.211

158.173.152.211 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 26%: ?

26%

ISP	VPN Consumer Zurich, Switzerland
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.152.211

Whois 158.173.152.211

IP Abuse Reports for 158.173.152.211:

This IP address has been reported a total of 48 times from 22 distinct sources. 158.173.152.211 was first reported on October 6th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-05-05 08:57:28 (1 month ago)	363 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) Appl ... show more 363 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.28.7586 355 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/102.0.5143.178 Chrome/102.0.5143.178 Safari/537.36 352 requests with user_agent.original Dalvik/2.1.0 (Linux; U; Android 11; Tibuta_MasterPad-E100 Build/RP1A.201005.006) 347 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.6) Gecko/20050319 344 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 Instagram 306.0.0.20.118 (iPhone12,1; iOS 15_6_1; en_GB; en; scale=2.00; 828x1792; 529083166) NW/3 343 requests with user_agent.original AppleCoreMedia/1.0.0.23A344 (Macintosh; U; Intel Mac OS X 14_0; da_dk) 343 requests with user_agent.original Mozilla/5.0 (Linux; Android 11; SM- show less	Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-05-02 15:37:01 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-05-01 13:21:58 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇿 Countryman	2026-05-01 13:20:34 (1 month ago)	2026-05-01T15:19:15.198203 orbis.img.cas.cz dovecot[1417]: auth: ldap(kozmik,158.173.152.211): Passw ... show more 2026-05-01T15:19:15.198203 orbis.img.cas.cz dovecot[1417]: auth: ldap(kozmik,158.173.152.211): Password mismatch (for LDAP bind) 2026-05-01T15:19:25.039217 orbis.img.cas.cz dovecot[1417]: auth: ldap(kozmik,158.173.152.211): Password mismatch (for LDAP bind) 2026-05-01T15:19:37.491106 orbis.img.cas.cz dovecot[1417]: auth: ldap(kozmik,158.173.152.211): Password mismatch (for LDAP bind) 2026-05-01T15:19:55.740778 orbis.img.cas.cz dovecot[1417]: auth: ldap(kozmik,158.173.152.211): Password mismatch (for LDAP bind) 2026-05-01T15:20:04.529444 orbis.img.cas.cz dovecot[1417]: auth: ldap(kozmik,158.173.152.211): Password mismatch (for LDAP bind) 2026-05-01T15:20:16.632393 orbis.img.cas.cz dovecot[1417]: auth: ldap(kozmik,158.173.152.211): Password mismatch (for LDAP bind) 2026-05-01T15:20:33.931729 orbis.img.cas.cz dovecot[1417]: auth: ldap(kozmik,158.173.152.211): Password mismatch (for LDAP bind) ... show less	Brute-Force
🇩🇪 Hazzard	2026-05-01 10:11:23 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 158.173.152.211 (CH/Switzerland/Zurich/Zurich/-/[redacted])	Brute-Force
🇫🇷 dihost	2026-05-01 10:04:43 (1 month ago)	(smtpauth) Failed SMTP AUTH login from 158.173.152.211 (CH/Switzerland/-): 5 in the last 3600 secs	Brute-Force
🇳🇱 maxxsense	2026-05-01 07:37:19 (1 month ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 158.173.152.211 (CH/Swi ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 158.173.152.211 (CH/Switzerland/-) show less	Hacking
🇨🇭 Origon	2026-05-01 07:31:09 (1 month ago)	NOQUEUE - IP: 158.173.152.211 - May 1 09:31:09 plesk postfix/smtpd[2211017]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 158.173.152.211 - May 1 09:31:09 plesk postfix/smtpd[2211017]: NOQUEUE: reject: RCPT from unknown[158.173.152.211]: 554 5.7.1 <unknown[158.173.152.211]>: Client host rejected: Access denied; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<hGwhYergk> show less	Email Spam
🇫🇷 debaba	2026-05-01 07:22:31 (1 month ago)	May 1 07:22:05 ichbinaktiv postfix/smtpd[3958286]: warning: unknown[158.173.152.211]: SASL LOGIN au ... show more May 1 07:22:05 ichbinaktiv postfix/smtpd[3958286]: warning: unknown[158.173.152.211]: SASL LOGIN authentication failed: authentication failure, sasl_ ... show less	Spoofing Brute-Force
🇵🇦 iphezimbra	2026-05-01 04:40:23 (1 month ago)	Fail2Ban reported IP from jail zimbra-smtp on <hostname>	Brute-Force SSH
🇵🇱 Robert robert	2026-05-01 04:08:16 (1 month ago)	SASL LOGIN authentication failed	Email Spam
🇬🇧 consul.to	2026-03-10 00:36:20 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇦🇹 urnilxfgbez	2026-03-07 23:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇵🇱 b4un0	2026-02-18 12:02:51 (3 months ago)	Auto-report from pfSense: Detected suspicious activity.	Brute-Force SSH
🇺🇸 xmission.com	2026-02-12 03:30:30 (4 months ago)	Blocked by UFW (TCP on 51413) Source port: 21575 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 21575 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 158.173.152.211) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.76.52.146

🇺🇸 172.184.209.150

🇺🇸 172.104.27.129

🇺🇸 147.185.132.194

🇨🇳 119.97.189.98

🇮🇩 110.136.191.224

🇷🇴 80.94.92.168

🇺🇸 64.62.156.28

🇷🇺 46.8.246.27

🇳🇱 45.156.128.58

🇬🇧 35.203.211.64

🇧🇪 35.195.84.210

🇨🇦 20.220.63.208

🇸🇪 16.171.8.247

🇺🇸 2602:80d:1008::4a

🇳🇮 190.124.35.141

🇧🇷 186.233.118.22

🇧🇷 177.174.89.99

🇩🇪 176.65.132.149

🇺🇸 173.239.218.106