JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.240.232

158.173.240.232 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 93%: ?

93%

ISP	VPN Consumer Belgrade, Serbia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	vpnconsumer.com
Country	🇷🇸 Serbia
City	Belgrade, Central Serbia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.240.232

Whois 158.173.240.232

IP Abuse Reports for 158.173.240.232:

This IP address has been reported a total of 32 times from 22 distinct sources. 158.173.240.232 was first reported on April 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 tuv-sud.es	2026-08-21 14:02:00 (1 day ago)	Illegal Resource Access Request blocked URL: /.git/config(GET)	Bad Web Bot Web App Attack
🇺🇸 EvilTurkey	2026-08-21 13:22:03 (1 day ago)	Web app attack against financial institution website.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-21 12:42:04 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.232 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 08:41:56.465753 2026] [security2:error] [pid 24191:tid 24276] [client 158.173.240.232:53479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bestthingieveratelocations.com"] [uri "/.git/config"] [unique_id "aohHlC31nM943mdFRbeWqwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-08-21 10:59:20 (1 day ago)	Cloudflare WAF: Request Path: /.git/config Request Query: Host: www.elhacker.net userAgent: Go-http ... show more Cloudflare WAF: Request Path: /.git/config Request Query: Host: www.elhacker.net userAgent: Go-http-client/1.1 Action: block Source: firewallManaged ASN Description: M247 Europe SRL Country: RS Method: GET Timestamp: 2026-08-21T10:59:20Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇫🇷 rellik	2026-08-21 10:38:00 (1 day ago)	Mass Scanning Critical Directories	Hacking Brute-Force Web App Attack
🇩🇪 filstal.org	2026-08-21 09:45:20 (1 day ago)	Bad bot activity detected (automated scraping/probing).	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 08:53:22 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.232 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 04:53:15.894451 2026] [security2:error] [pid 24599:tid 24599] [client 158.173.240.232:64913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sangalgano.info"] [uri "/.git/config"] [unique_id "aogR-8M-ZWv23RMKe1V7wAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 08:32:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.232 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 04:32:35.482348 2026] [security2:error] [pid 2674:tid 2674] [client 158.173.240.232:24491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.davidnevue.com"] [uri "/.git/config"] [unique_id "aogNI6Cq4YKOkF8fvmKyawAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-08-21 08:00:15 (1 day ago)	158.173.240.232 - - [21/Aug/2026:04:00:09 -0400] "GET /.git/config HTTP/1.1" 301 162 "-" "Go-http-cl ... show more 158.173.240.232 - - [21/Aug/2026:04:00:09 -0400] "GET /.git/config HTTP/1.1" 301 162 "-" "Go-http-client/1.1" 158.173.240.232 - - [21/Aug/2026:04:00:09 -0400] "GET /.git/config HTTP/1.0" 403 5783 "http://carolinaupstatepm.com/.git/config" "Go-http-client/1.1" 158.173.240.232 - - [21/Aug/2026:04:00:14 -0400] "GET /.git/config HTTP/1.0" 403 5783 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-08-21 07:04:48 (1 day ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 rdpguard.com	2026-08-21 01:08:21 (2 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇧🇪 voormedia	2026-08-21 01:05:43 (2 days ago)	Accessed trap at '/.git/config'	Web App Attack
🇺🇸 jcbriar	2026-08-21 00:40:49 (2 days ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇧🇪 madeit	2026-08-21 00:40:09 (2 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 23:44:40 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 158.173.240.232 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.240.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 19:44:36.392013 2026] [security2:error] [pid 20748:tid 20748] [client 158.173.240.232:21179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.flavornet.org"] [uri "/.git/config"] [unique_id "aoeRZPY-XUZ_UU3zevlunAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:534:1000:5ed6:3425:c712:1401

🇱🇹 213.176.26.82

🇭🇰 199.45.154.119

🇸🇬 152.32.219.77

🇧🇪 146.148.12.228

🇺🇸 128.173.237.165

🇨🇳 106.115.89.128

🇸🇬 43.134.20.205

🇫🇷 2400:cb00:534:1000:a881:40a4:3722:cbd9

🇮🇳 223.181.85.84

🇺🇸 192.129.135.51

🇺🇸 185.226.198.5

🇨🇴 181.236.111.253

🇨🇳 175.0.78.114

🇳🇱 172.94.9.55

🇨🇳 123.145.4.133

🇳🇱 104.22.109.42

🇩🇪 93.152.221.156

🇲🇳 66.181.181.122

🇮🇶 65.20.163.62