158.173.240.227

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
55 reports
31 reporters · latest 2 months ago
ISP
VPN Consumer Belgrade, Serbia
Usage Type
Data Center/Web Hosting/Transit
ASN
AS9009
Domain Name
vpnconsumer.com
Country
🇷🇸 Serbia
City
Belgrade, Central Serbia
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

158.173.240.227 has been reported 55 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
55 from 31 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 Peregrine
Fail2Ban Jail: tomcat-honeypot | Evidence: 158.173.240.227 104.23.239.120 - - [24/Aug/2026:06:50:11 -0300] "GET /.git/config HTTP/1.1" 404 414 158.173.240.227 172.68.192.200 - - [24/Aug/2026:06:50:12 -0300] "GET /.git/config HTTP/1.1" 404 414
Bad Web Bot
🇧🇷 Peregrine
Fail2Ban Jail: tomcat-honeypot | Evidence: 158.173.240.227 104.23.239.120 - - [24/Aug/2026:06:50:11 -0300] "GET /.git/config HTTP/1.1" 404 414 158.173.240.227 172.68.192.200 - - [24/Aug/2026:06:50:12 -0300] "GET /.git/config HTTP/1.1" 404 414
Bad Web Bot
🇧🇷 Peregrine
Fail2Ban Jail: tomcat-honeypot | Evidence: 158.173.240.227 104.23.239.120 - - [24/Aug/2026:06:50:11 -0300] "GET /.git/config HTTP/1.1" 404 414 158.173.240.227 172.68.192.200 - - [24/Aug/2026:06:50:12 -0300] "GET /.git/config HTTP/1.1" 404 414
Bad Web Bot
🇳🇱 BlueWire Hosting
Bad bot ignoring robot.txt
Bad Web Bot
🇦🇺 foff
Source IP: 158.173.240.227 (RS/M247 Europe SRL). Web application attack detected by OWASP CRS (local file inclusion). Attack observed 2026-08-24T21:49:11+10:00.
Web App Attack
🇧🇷 Peregrine
Fail2Ban Jail: tomcat-honeypot | Evidence: 158.173.240.227 104.23.239.120 - - [24/Aug/2026:06:50:11 -0300] "GET /.git/config HTTP/1.1" 404 414 158.173.240.227 172.68.192.200 - - [24/Aug/2026:06:50:12 -0300] "GET /.git/config HTTP/1.1" 404 414
Bad Web Bot
🇩🇪 kommunos
/.git/config
Web App Attack
Anonymous
Web App Attack
Anonymous
158.173.240.227 - - [24/Aug/2026:03:56:34 -0300] "GET /.git/config HTTP/1.1" 301 162 "-" "Go-http-client/1.1" ...
Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host
🇮🇩 David Koswari
REQ_BLOCKED_ACL
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇦🇺 paulshipley.com.au
Web App Attack
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
Anonymous
"GET /.git/config HTTP/1.1"
Hacking Web App Attack
🇮🇹 Inartis
158.173.240.227 - - [23/Aug/2026:22:09:21 +0200] "GET /.git/config HTTP/1.1" 302 411 "-" "Go-http-client/1.1" ...
Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.26
🇧🇷 177.51.157.139
🇧🇸 64.150.245.133
🇺🇸 45.61.150.23
🇹🇭 27.130.64.124
🇮🇳 203.192.211.180
🇳🇱 192.42.116.44
🇰🇷 165.154.52.132
🇺🇸 157.22.127.58
🇮🇳 139.59.69.223
🇺🇸 73.250.1.139
🇺🇸 52.90.137.230
🇨🇳 43.142.32.78
🇬🇧 31.14.254.65
🇷🇴 2.57.122.209
🇪🇸 212.227.248.58
🇺🇸 205.210.31.57
🇧🇷 200.149.51.6
🇺🇸 185.213.17.223
🇺🇸 184.105.139.68
feedback