This IP address has been reported a total of
267
times from
189 distinct
sources.
158.158.52.178 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/158.158.52.178
2026-03- ...
show moreThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/158.158.52.178
2026-03-03 21:25:08 /alfa-rex.php7
2026-03-03 21:25:10 //h.php
2026-03-03 21:25:07 /wp-content/plugins/hellopress/wp_filemanager.php
2026-03-03 21:25:08 //koiy.php
2026-03-03 21:25:09 /eauu.php
2026-03-03 21:25:10 //wp-includes/js/tinymce/themes/inlite
2026-03-03 21:25:09 /a2.php
2026-03-03 21:25:09 /bes.php
2026-03-03 21:25:11 /sty.php
show less
Web App Attack
Anonymous
Aggressive automated vulnerability scanner from Madrid, Spain. 160+ requests targeting common PHP ba ...
show moreAggressive automated vulnerability scanner from Madrid, Spain. 160+ requests targeting common PHP backdoor names and intentional typos of core files, such as "wp-conflg.php" (targeting common misspellings of wp-config.php). Probing for web shells like "xqq.php", "ms-edit.php", and "god.php". The bot operates at high frequency, hitting multiple endpoints per second. Blocked by Wordfence for accessing the "Immediately block" URL list.
show less
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
Hacking