158.173.210.56

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
41% Elevated
54 reports
41 reporters ยท latest 2 weeks ago
ISP
VPN Consumer Valencia, Spain
Usage Type
Data Center/Web Hosting/Transit
ASN
AS58065
Domain Name
vpnconsumer.com
Country
๐Ÿ‡ช๐Ÿ‡ธ Spain
City
Valencia, Valencia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
54 from 41 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 8 ๐Ÿ‡จ๐Ÿ‡ญ Switzerland 2 ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 2
Most common categories Web App Attack 12 Bad Web Bot 10 Hacking 3 Port Scan 3 Exploited Host 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฎ๐Ÿ‡ฉ soc-yk
Type: web_scanning Risk: 100 Events: 140 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Not following 301 redirects โ€” wasted requests | method: HEAD, GET | path: /, /wp-content/index.php | ua: Mozilla/6.4 (Windows NT 11.1) Gecko/2010102 Firefox/99.0 | 2026-10-29 07:38 UTC
Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Not following 301 redirects โ€” wasted requests | method: HEAD | path: / | ua: Mozilla/6.4 (Windows NT 11.1) Gecko/2010102 Firefox/99.0 | 2026-10-29 01:41 UTC
Bad Web Bot
๐Ÿ‡ณ๐Ÿ‡ฑ Roderic
Insights: 10 probe requests within 24 hours on 1 site, e.g. /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php (no normal page views)
Web App Attack
๐Ÿ‡ช๐Ÿ‡ธ masterguru
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
๐Ÿ‡ฎ๐Ÿ‡น keope
CrowdSec Automated Sync - Reason: http:exploit
Brute-Force Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ ipblock.com
IPBlock protected site ID [4055-d][s=02]. Persistent 404, vulnerability scanner
Hacking Bad Web Bot Web App Attack
๐Ÿ‡ฌ๐Ÿ‡ง consul.to
Web attack/malicious scanning detected
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 50 | Len: 60B | Win: 64240(1) | F2B/ufw-honeypot@2026-09-27T13:46:51Z
Port Scan Hacking
๐Ÿ‡ง๐Ÿ‡ท dominioz
2026-09-27 10:19:37 GET /wp-content/plugins/bbpress/file5.php - - 158.173.210.56 HTTP/2 Go-http-client/2.0 https://juliofantasma.com.br//wp-content/plugins/bbpress/file5.php 404 25774 ...
Bad Web Bot Web App Attack
๐Ÿ‡ฟ๐Ÿ‡ฆ conure.sh
csagent: score 18.7: webshell name x2; 2 domain(s) in 14s
Web App Attack
Anonymous
LH-Watcher: HONEYPOT
Hacking SSH
๐Ÿ‡ณ๐Ÿ‡ฑ Alt255
Bad Web Bot Web App Attack
Anonymous
Blocked: Reason='Vulnerability probing โ€” PHP scan detected (19/60 min)'; Requests=19
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท masterguru
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-201)
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 204.76.203.221
๐Ÿ‡ณ๐Ÿ‡ฑ 204.76.203.213
๐Ÿ‡ง๐Ÿ‡ท 201.68.42.82
๐Ÿ‡บ๐Ÿ‡ธ 199.165.159.205
๐Ÿ‡บ๐Ÿ‡ธ 173.239.240.33
๐Ÿ‡ซ๐Ÿ‡ท 109.205.178.122
๐Ÿ‡ฎ๐Ÿ‡ฉ 103.122.67.53
๐Ÿ‡ง๐Ÿ‡ฌ 79.124.40.178
๐Ÿ‡บ๐Ÿ‡ธ 64.62.197.223
๐Ÿ‡บ๐Ÿ‡ธ 64.62.197.119
๐Ÿ‡จ๐Ÿ‡ญ 20.203.184.59
๐Ÿ‡บ๐Ÿ‡ธ 18.190.15.50
๐Ÿ‡ฉ๐Ÿ‡ช 9.141.30.218
๐Ÿ‡ฌ๐Ÿ‡ง 2.57.17.195
๐Ÿ‡ฐ๐Ÿ‡ท 210.206.95.162
๐Ÿ‡ฉ๐Ÿ‡ช 194.187.176.41
๐Ÿ‡ป๐Ÿ‡ช 190.97.227.15
๐Ÿ‡ฎ๐Ÿ‡ณ 182.95.226.138
๐Ÿ‡ฎ๐Ÿ‡น 172.213.26.234
๐Ÿ‡ซ๐Ÿ‡ท 163.172.66.206
feedback