JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.152.53

158.173.152.53 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Zurich, Switzerland
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.152.53

Whois 158.173.152.53

IP Abuse Reports for 158.173.152.53:

This IP address has been reported a total of 22 times from 13 distinct sources. 158.173.152.53 was first reported on October 28th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-05-08 06:24:58 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: settlex.pw:443 show less	Open Proxy Port Scan
🇺🇸 xmission.com	2026-04-24 06:56:48 (2 months ago)	Blocked by UFW (TCP on 1) Source port: 50217 TTL: 45 Packet length: 52 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 1) Source port: 50217 TTL: 45 Packet length: 52 TOS: 0x08 This report (for 158.173.152.53) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 afleventoffice.com.au	2026-03-06 10:45:49 (3 months ago)	GET /xmlrpc.php HTTP/1.1	Web App Attack
Anonymous	2026-03-03 05:50:20 (3 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 TPI-Abuse	2026-02-13 01:51:48 (4 months ago)	(mod_security) mod_security (id:232920) triggered by 158.173.152.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:232920) triggered by 158.173.152.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:51:44.797660 2026] [security2:error] [pid 17305:tid 17305] [client 158.173.152.53:60539] ModSecurity: Access denied with code 403 (phase 2). String match "/wp-admin/admin-post.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6482"] [id "232920"] [rev "1"] [msg "COMODO WAF: RFI vulnerability in social warfare plugin before 3.5.3 for WordPress(CVE-2019-9978)\|\|chinookdrivingacademy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "chinookdrivingacademy.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aY6DsN-pbYyIu5avYizXxAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-11 08:15:06 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-08 08:10:08 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-05 08:05:24 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-01-31 04:30:56 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2026-01-31 04:03:24 (4 months ago)	6x Postfix SASL LOGIN authentication failed	Brute-Force
🇷🇺 Agrohim	2026-01-30 00:00:37 (4 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
Anonymous	2026-01-27 14:51:01 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 nowyouknow	2026-01-19 03:23:48 (5 months ago)	(From [email protected]) Vertyowdiwjodko kofkosfjwgojfsjf oijwfwsfjowehgewjiofwj jewfkwkfdoeguhrfk ... show more (From [email protected]) Vertyowdiwjodko kofkosfjwgojfsjf oijwfwsfjowehgewjiofwj jewfkwkfdoeguhrfkadwknfew ijedkaoaswnfeugjfkadcajsfn aberdeenfamilychiropractic.com show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-01-18 23:20:19 (5 months ago)	(From [email protected]) Vertyowdiwjodko kofkosfjwgojfsjf oijwfwsfjowehgewjiofwj jewfkwkfdoeguhrfk ... show more (From [email protected]) Vertyowdiwjodko kofkosfjwgojfsjf oijwfwsfjowehgewjiofwj jewfkwkfdoeguhrfkadwknfew ijedkaoaswnfeugjfkadcajsfn abcchiropractic.net show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2026-01-18 19:14:29 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 158.173.152.53 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 158.173.152.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 14:14:23.931282 2026] [security2:error] [pid 4884:tid 4884] [client 158.173.152.53:39752] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aavondalervstorage.com\|F\|2"] [data ".aavondalepetboarding.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aavondalervstorage.com"] [uri "/www.aavondalepetboarding.com"] [unique_id "aW0xD8-Z-eQoc-RYc1d3mwAAAAQ"], referer: http://aavondalervstorage.com/www.aavondalepetboarding.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.198.62.180

🇩🇪 87.106.29.151

🇳🇱 45.142.193.164

🇯🇵 8.216.9.195

🇺🇸 216.25.89.79

🇺🇸 205.210.31.71

🇿🇲 165.56.14.32

🇺🇸 104.152.52.200

🇭🇰 223.197.178.95

🇳🇱 192.144.91.85

🇷🇺 178.178.194.131

🇨🇳 111.226.26.221

🇱🇹 62.60.130.219

🇨🇳 8.138.35.149

🇫🇷 2001:41d0:33a:a00::402

🇧🇷 198.1.195.197

🇬🇧 188.240.59.59

🇨🇳 163.204.70.97

🇺🇸 157.55.39.53

🇺🇸 104.152.52.210