JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

158.173.240.130

Neutral Activity

Abuse Confidence Score

0% Low Risk

60 reports

26 reporters · latest 2 months ago

ISP: VPN Consumer Belgrade, Serbia
Usage Type: Data Center/Web Hosting/Transit
ASN: AS9009
Domain Name: vpnconsumer.com
Country: 🇷🇸 Serbia
City: Belgrade, Central Serbia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

158.173.240.130 has been reported 60 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

60 from 26 distinct reporters

First reported

April 13th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-08-18 13:44:39 UTC · (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-18 13:01:24 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 09:01:15.916113 2026] [security2:error] [pid 4568:tid 4568] [client 158.173.240.130:33699] ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 09:01:15.916113 2026] [security2:error] [pid 4568:tid 4568] [client 158.173.240.130:33699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehealthcontent.com"] [uri "/.git/config"] [unique_id "aoRXmyCbdyTqq8uQUFS8wAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 12:26:20 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 08:26:14.037760 2026] [security2:error] [pid 19957:tid 19957] [client 158.173.240.130:5918 ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 08:26:14.037760 2026] [security2:error] [pid 19957:tid 19957] [client 158.173.240.130:59189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cosplayculture.com"] [uri "/.git/config"] [unique_id "aoRPZuF6TGLYaRy0VW-hugAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 09:08:32 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 05:08:28.837056 2026] [security2:error] [pid 20575:tid 20575] [client 158.173.240.130:2700 ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 05:08:28.837056 2026] [security2:error] [pid 20575:tid 20575] [client 158.173.240.130:27007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrappliancefl.com"] [uri "/.git/config"] [unique_id "aoQhDOAkfndDJaoh88Yo9QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 08:39:48 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 04:39:44.330481 2026] [security2:error] [pid 4992:tid 5256] [client 158.173.240.130:40089] ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 04:39:44.330481 2026] [security2:error] [pid 4992:tid 5256] [client 158.173.240.130:40089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ejspizzeriahudson.com"] [uri "/.git/config"] [unique_id "aoQaUFYI0w1KDh7dVexr-wAAAUc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-18 07:56:28 UTC · (2 months ago)	apache vulnerability scan	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-18 07:36:21 UTC · (2 months ago)	[18/Aug/2026:10:36:20 +0300] -- 158.173.240.130 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
Anonymous	2026-08-18 07:13:03 UTC · (2 months ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, GET /.git/config HTTP/2.0	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 07:10:07 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 03:09:59.770733 2026] [security2:error] [pid 12959:tid 12959] [client 158.173.240.130:5206 ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 03:09:59.770733 2026] [security2:error] [pid 12959:tid 12959] [client 158.173.240.130:52067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schoolsliaisoncommunity.net"] [uri "/.git/config"] [unique_id "aoQFR2xa1XboMXbF4p-v_gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-08-18 06:58:57 UTC · (2 months ago)	cloudlinux2 fail2ban: 2026-08-18 08:54:06,889 fail2ban.filter [1456]: INFO [plesk-modsecurity] Found 92.205.182.106 - 2026-08-18 08:54:06cloudlinux2 fail2ban: 2026-08-18 08:54:24,665 fail2ban.filter [1456]: INFO [plesk-modsecuri ... show more cloudlinux2 fail2ban: 2026-08-18 08:54:06,889 fail2ban.filter [1456]: INFO [plesk-modsecurity] Found 92.205.182.106 - 2026-08-18 08:54:06cloudlinux2 fail2ban: 2026-08-18 08:54:24,665 fail2ban.filter [1456]: INFO [plesk-modsecurity] Found 152.59.25.172 - 2026-08-18 08:54:24cloudlinux2 fail2ban: 2026-08-18 08:55:06,878 fail2ban.filter [1456]: INFO [recidive] Found 152.59.25.172 - 2026-08-18 08:55:06cloudlinux2 fail2ban: 2026-08-18 08:55:06,615 fail2ban.filter [1456]: INFO [plesk-modsecurity] Found 152.59.25.172 - 2026-08-18 08:55:06cloudlinux2 fail2ban: 2026-08-18 08:55:06,871 fail2ban.actions [1456]: NOTICE [plesk-modsecurity] Ban 152.59.25.172cloudlinux2 fail2ban: 2026-08-18 08:56:11,498 fail2ban.filter [1456]: INFO [plesk-modsecurity] Found 212.102.39.12 - 2026-08-18 08:56:11cloudlinux2 fail2ban: 2026-08-18 08:56:11,538 fail2ban.filter [1456]: INFO [plesk-modsecurity] Found 212.102.39.12 - 2026-08-18 08:56:11cloudlinux2 fail2ban: 2026- show less	Brute-Force
Anonymous	2026-08-18 06:40:58 UTC · (2 months ago)	158.173.240.130 - - [18/Aug/2026:08:40:58 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Go-http-client/1.1"	Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 06:10:44 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 02:10:39.954835 2026] [security2:error] [pid 19844:tid 19844] [client 158.173.240.130:5875 ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.130 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 02:10:39.954835 2026] [security2:error] [pid 19844:tid 19844] [client 158.173.240.130:58755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "muskogeecleaning.com"] [uri "/.git/config"] [unique_id "aoP3XyUrPWkX_2c9iAVHpAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-08-18 05:19:09 UTC · (2 months ago)		Web App Attack
🇳🇱 oisecnet	2026-08-17 21:22:17 UTC · (2 months ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-08-17. 2 requests from this IP.	Port Scan Hacking Web App Attack
🇷🇴 iulianh	2026-08-17 20:37:16 UTC · (2 months ago)	80,443	Brute-Force SSH

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇩 203.190.34.197

🇳🇱 200.138.46.95

🇳🇱 93.123.109.164

🇺🇸 35.150.154.53

🇩🇪 217.181.93.156

🇳🇱 195.178.110.227

🇫🇷 91.231.89.220

🇧🇬 91.191.209.118

🇫🇷 75.119.145.108

🇺🇸 74.82.47.52

🇨🇦 72.141.239.52

🇦🇷 207.191.167.109

🇧🇷 190.115.84.25

🇳🇱 138.226.239.233

🇺🇸 107.20.123.181

🇧🇷 43.157.174.69

🇺🇸 216.73.217.47

🇩🇪 195.63.23.196

🇬🇧 188.240.59.41

🇧🇷 186.200.104.66