JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.166.34

158.173.166.34 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 89%: ?

89%

ISP	VPN Consumer Oslo, Norway
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	vpnconsumer.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.166.34

Whois 158.173.166.34

IP Abuse Reports for 158.173.166.34:

This IP address has been reported a total of 25 times from 20 distinct sources. 158.173.166.34 was first reported on May 11th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-09-17 10:59:32 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇳🇱 Site.eu	2026-09-16 04:27:23 (4 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-09-16 03:25:16 (4 days ago)	[redacted] 158.173.166.34 - - [16/Sep/2026:05:25:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" " ... show more [redacted] 158.173.166.34 - - [16/Sep/2026:05:25:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" [redacted] 158.173.166.34 - - [16/Sep/2026:05:25:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" [redacted] 158.173.166.34 - - [16/Sep/2026:05:25:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 158.173.166.34 - - [16/Sep/2026:05:25:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" [redacted] 158.173.166.34 - - [16/Sep/2026:05:25 ... show less	Hacking Web App Attack
Anonymous	2026-09-16 03:23:52 (4 days ago)	158.173.166.34 - - [16/Sep/2026:05:23:51 +0200] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh ... show more 158.173.166.34 - - [16/Sep/2026:05:23:51 +0200] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇫🇷 dynamix	2026-09-16 03:02:33 (4 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-09-16 02:42:03 (4 days ago)	[redacted] 158.173.166.34 - - [16/Sep/2026:04:42:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" " ... show more [redacted] 158.173.166.34 - - [16/Sep/2026:04:42:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 158.173.166.34 - - [16/Sep/2026:04:42:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" [redacted] 158.173.166.34 - - [16/Sep/2026:04:42:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" [redacted] 158.173.166.34 - - [16/Sep/2026:04:42:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" [redacted] 158.173.166.34 - - [16/Sep/2026:04:42:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 ( ... show less	Hacking Web App Attack
🇺🇸 integrantservices.com	2026-09-16 02:17:29 (4 days ago)	(wordpress) Failed wordpress login from 158.173.166.34 (NO/Norway/-)	Brute-Force
🇦🇺 screwlooseit.com.au	2026-09-16 02:16:19 (4 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC DK/Denmark/-	Web App Attack
Anonymous	2026-09-16 02:09:58 (4 days ago)	[redacted] 158.173.166.34 - - [16/Sep/2026:04:09:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 218 "-" " ... show more [redacted] 158.173.166.34 - - [16/Sep/2026:04:09:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 218 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" [redacted] 158.173.166.34 - - [16/Sep/2026:04:09:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 218 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" [redacted] 158.173.166.34 - - [16/Sep/2026:04:09:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 218 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" [redacted] 158.173.166.34 - - [16/Sep/2026:04:09:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" [redacted] 158.173.166.34 - - [16/Sep/2026:04:09:57 +0200] "POST /xmlrpc.php HTTP/1. ... show less	Hacking Web App Attack
🇬🇧 gigatech	2026-09-16 01:15:03 (4 days ago)	Webserver Probing	Web App Attack
🇮🇹 🐷🐷🐷	2026-09-16 01:07:22 (4 days ago)	Multiple WordPress unauthorized access attempts ...	Brute-Force Bad Web Bot
🇩🇪 Skyrider	2026-09-16 00:31:19 (4 days ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇩🇪 spam.must.die	2026-09-16 00:12:41 (4 days ago)	Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-16T00:12:40.745656+00:00 ubuntu-wp wordpres ... show more Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-16T00:12:40.745656+00:00 ubuntu-wp wordpress([redacted-domain])[94293]: Attempted user enumeration from 158.173.166.342026-09-16T00:12:40.838203+00:00 ubuntu-wp wordpress([redacted-domain])[94280]: Attempted user enumeration from 158.173.166.342026-09-16T00:12:40.857677+00:00 ubuntu-wp wordpress([redacted-domain])[94339]: Attempted user enumeration from 158.173.166.342026-09-16T00:12:40.864628+00:00 ubuntu-wp wordpress([redacted-domain])[94304]: Attempted user enumeration from 158.173.166.342026-09- show less	Web App Attack
Anonymous	2026-09-16 00:12:05 (4 days ago)	[redacted] 158.173.166.34 - - [16/Sep/2026:02:12:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" " ... show more [redacted] 158.173.166.34 - - [16/Sep/2026:02:12:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" [redacted] 158.173.166.34 - - [16/Sep/2026:02:12:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" [redacted] 158.173.166.34 - - [16/Sep/2026:02:12:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 158.173.166.34 - - [16/Sep/2026:02:12:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" [redacted] 158.173.166.34 - - [16/Sep/2026:02:12:03 +0200] "POST /xmlrpc.php HT ... show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-09-15 23:58:40 (4 days ago)	Try to access /xmlrpc.php	Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.176

🇮🇳 122.168.194.41

🇮🇩 103.142.240.142

🇻🇳 103.75.183.43

🇨🇦 70.49.18.142

🇮🇱 37.25.36.197

🇸🇬 35.240.178.84

🇳🇱 159.223.227.23

🇭🇰 118.142.0.133

🇨🇳 36.26.74.162

🇬🇧 154.16.44.147

🇰🇷 112.176.164.13

🇹🇲 95.85.114.218

🇹🇷 88.230.159.73

🇺🇸 64.52.111.248

🇺🇸 50.116.30.189

🇩🇪 34.179.177.69

🇰🇷 14.63.221.120

🇬🇧 2.57.17.22

🇮🇳 198.38.85.76