JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.242.167

158.173.242.167 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 92%: ?

92%

ISP	VPN Consumer Bratislava, Slovakia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇸🇰 Slovakia
City	Bratislava, Bratislava Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.242.167

Whois 158.173.242.167

IP Abuse Reports for 158.173.242.167:

This IP address has been reported a total of 37 times from 20 distinct sources. 158.173.242.167 was first reported on April 7th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇰 ScamAware	2026-08-21 22:03:51 (10 hours ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Bad Web Bot
🇩🇪 Marc	2026-08-21 21:53:07 (10 hours ago)	158.173.242.167 - - [21/Aug/2026:23:53:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 828 "-" "Mozilla/5. ... show more 158.173.242.167 - - [21/Aug/2026:23:53:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.173.242.167 - - [21/Aug/2026:23:53:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5916 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 158.173.242.167 - - [21/Aug/2026:23:53:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 21:43:59 (10 hours ago)	(mod_security) mod_security (id:240335) triggered by 158.173.242.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 158.173.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 17:43:54.194740 2026] [security2:error] [pid 13282:tid 13282] [client 158.173.242.167:44713] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 158.173.242.167 (+1 hits since last alert)\|hendersonhomes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hendersonhomes.com"] [uri "/xmlrpc.php"] [unique_id "aojGmhilKMHdrPR_qpDCQwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-08-21 21:39:08 (10 hours ago)	954 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇩🇪 big-cloud.nl	2026-08-21 21:28:45 (10 hours ago)	Try to access /xmlrpc.php	Web App Attack
🇳🇱 Site.eu	2026-08-21 21:23:00 (11 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 Zydzy	2026-08-21 20:28:40 (11 hours ago)	Automated attack detected. Server: 95.140.154.181. Jail: nginx-exploit.	Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 20:26:47 (11 hours ago)	(mod_security) mod_security (id:240335) triggered by 158.173.242.167 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 158.173.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 16:26:41.268048 2026] [security2:error] [pid 31129:tid 31289] [client 158.173.242.167:57203] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 158.173.242.167 (+1 hits since last alert)\|nordicatrio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nordicatrio.com"] [uri "/xmlrpc.php"] [unique_id "aoi0gQ3MjW2PGrQQJK5fsgAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-21 20:06:49 (12 hours ago)	(xmlrpc) Apache: Failed xmlrpc access from 158.173.242.167 (SK/Slovakia/-): 10 in the last 3600 secs ... show more (xmlrpc) Apache: Failed xmlrpc access from 158.173.242.167 (SK/Slovakia/-): 10 in the last 3600 secs (0-131) show less	Hacking
🇬🇧 consul.to	2026-08-21 20:03:05 (12 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 stinpriza	2026-08-21 19:45:16 (12 hours ago)	Web App Attack	Web App Attack
Anonymous	2026-08-21 19:37:51 (12 hours ago)	(wordpress) Failed wordpress login from 158.173.242.167 (SK/Slovakia/-)	Brute-Force
🇺🇸 WeekendWeb	2026-08-21 19:33:50 (12 hours ago)	Wordpress Vunerability attack	Web App Attack
Anonymous	2026-08-21 19:18:37 (13 hours ago)	(wordpress) Failed wordpress login from 158.173.242.167 (SK/Slovakia/Bratislava Region/Bratislava/-/ ... show more (wordpress) Failed wordpress login from 158.173.242.167 (SK/Slovakia/Bratislava Region/Bratislava/-/[redacted]) show less	Brute-Force
Anonymous	2026-08-21 18:59:17 (13 hours ago)	(wordpress-user-enum) Failed wordpress-user-enum trigger from 158.173.242.167 (SK/Slovakia/-)	Brute-Force

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 113.193.128.226

🇺🇸 34.73.245.106

🇨🇳 222.176.200.19

🇰🇷 218.51.148.194

🇧🇷 189.41.152.96

🇨🇳 153.34.18.11

🇺🇸 66.228.53.162

🇺🇸 66.132.172.40

🇺🇸 65.49.1.169

🇬🇧 35.203.211.137

🇺🇸 20.64.105.221

🇬🇧 5.252.83.68

🇳🇱 193.47.62.69

🇨🇦 184.162.19.240

🇲🇽 177.249.60.116

🇺🇸 165.154.163.10

🇷🇺 94.243.10.60

🇫🇷 91.231.89.213

🇧🇬 78.128.112.6

🇺🇸 65.49.20.68