JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.241.214

158.173.241.214 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 67%: ?

67%

ISP	VPN Consumer Stockholm, Sweden
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.241.214

Whois 158.173.241.214

IP Abuse Reports for 158.173.241.214:

This IP address has been reported a total of 32 times from 15 distinct sources. 158.173.241.214 was first reported on April 16th 2026, and the most recent report was 24 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Nicolmn	2026-07-09 06:48:30 (24 minutes ago)	Web form spam ( id dqt.l )	Web Spam
🇺🇸 nowyouknow	2026-07-09 05:59:52 (1 hour ago)	(From [email protected]) TAKE A LEAP OF FAITH AND LAND THE $27,000,000 JACKPOT https://tel ... show more (From [email protected]) TAKE A LEAP OF FAITH AND LAND THE $27,000,000 JACKPOT https://telegra.ph/CLAIM-YOUR-25000-BONUS-AND-CHASE-THE-27000000-JACKPOT--Message-ID-245413-06-29 show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-07-09 05:28:51 (1 hour ago)	(From [email protected]) Today’s the Perfect Day to Aim for the $27,000,000 Jackpot https://telegra ... show more (From [email protected]) Today’s the Perfect Day to Aim for the $27,000,000 Jackpot https://telegra.ph/CLAIM-YOUR-25000-BONUS-AND-CHASE-THE-27000000-JACKPOT--Message-ID-39085-06-29 show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-07-09 05:12:56 (1 hour ago)	(From [email protected]) The $27,000,000 Jackpot Is a Vector to Victory https://telegra.ph/CLAIM- ... show more (From [email protected]) The $27,000,000 Jackpot Is a Vector to Victory https://telegra.ph/CLAIM-YOUR-25000-BONUS-AND-CHASE-THE-27000000-JACKPOT--Message-ID-453229-06-29 show less	Phishing Web Spam
🇦🇺 oncord	2026-07-09 02:22:05 (4 hours ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2026-07-09 02:17:18 (4 hours ago)	(From [email protected]) THE $27,000,000 JACKPOT IS YOUR FAST PASS TO A BIG PAYOUT https:// ... show more (From [email protected]) THE $27,000,000 JACKPOT IS YOUR FAST PASS TO A BIG PAYOUT https://telegra.ph/CLAIM-YOUR-25000-BONUS-AND-CHASE-THE-27000000-JACKPOT--Message-ID-51694-06-29 show less	Phishing Web Spam
🇧🇪 cmbplf	2026-07-04 21:02:56 (4 days ago)	433 requests to many distinct domains in 1 hour (2w6d8h)	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-04 17:01:22 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 13:01:14.487181 2026] [security2:error] [pid 16564:tid 16915] [client 158.173.241.214:38501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgementz.com"] [uri "/wp-config.php.bak"] [unique_id "akk8WhGH_wE3rCnPqHKIDwAAApY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 16:38:14 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 12:38:06.837119 2026] [security2:error] [pid 32074:tid 32074] [client 158.173.241.214:51165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genevainvestors.com"] [uri "/wp-config.php.bak"] [unique_id "akk27vhoai-dsIdIYWLfggAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 06:28:31 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 02:28:26.227987 2026] [security2:error] [pid 16803:tid 16803] [client 158.173.241.214:27727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fivecentmiracle.com"] [uri "/wp-config.php.bak"] [unique_id "akioChZwhTBHcZqDNZFcuQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 21:47:04 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:46:59.001370 2026] [security2:error] [pid 18135:tid 18135] [client 158.173.241.214:64799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eta-mct.com"] [uri "/wp-config.php.bak"] [unique_id "akgt02kZCI6QCKr15XzEgAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 06:20:37 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:20:30.161424 2026] [security2:error] [pid 15455:tid 15455] [client 158.173.241.214:29929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ergocorrect.com"] [uri "/wp-config.php.bak"] [unique_id "akdUrv2iNhx3VEvrDyVZ7gAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 20:53:59 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 158.173.241.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:53:55.389380 2026] [security2:error] [pid 32325:tid 32325] [client 158.173.241.214:39243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dymesich.com"] [uri "/wp-config.php.bak"] [unique_id "akbP47NhSUrAmDEfkOqa1gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-06-25 04:19:40 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from SE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.3.1 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 Site.eu	2026-06-18 18:19:37 (2 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.161

🇳🇱 185.223.235.24

🇧🇷 181.192.93.75

🇲🇽 177.248.147.255

🇦🇷 138.219.249.30

🇺🇸 95.182.114.214

🇷🇺 45.91.64.7

🇨🇳 218.21.243.58

🇧🇷 205.210.31.159

🇧🇷 205.210.31.158

🇬🇧 195.206.182.197

🇮🇳 183.82.111.224

🇨🇳 115.231.78.11

🇳🇱 45.148.10.62

🇳🇱 45.142.193.161

🇧🇪 34.14.94.61

🇧🇷 205.210.31.149

🇧🇷 205.210.31.143

🇧🇷 205.210.31.141

🇧🇪 198.235.24.219