JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.3.6

158.173.3.6 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 8%: ?

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.3.6

Whois 158.173.3.6

IP Abuse Reports for 158.173.3.6:

This IP address has been reported a total of 5 times from 4 distinct sources. 158.173.3.6 was first reported on December 8th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-05-26 00:35:10 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-05-10 20:37:46 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 158.173.3.6 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 158.173.3.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 16:37:40.996497 2026] [security2:error] [pid 28825:tid 28825] [client 158.173.3.6:31109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|texaslawman.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "texaslawman.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "agDslIDO65mnGiT_kS7q-QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-12-31 10:40:00 (5 months ago)	Blocked by UFW (TCP on 51413) Source port: 17237 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 17237 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 158.173.3.6) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-12-27 10:21:09 (5 months ago)	Blocked by UFW (TCP on 51413) Source port: 19790 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 19790 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 158.173.3.6) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇪 cmbplf	2025-12-08 10:24:43 (6 months ago)	8 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/2002062 ... show more 8 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1 6 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/102.0.5143.178 Chrome/102.0.5143.178 Safari/537.36 5 requests with user_agent.original AppleCoreMedia/1.0.0.23A344 (Macintosh; U; Intel Mac OS X 14_0; da_dk) 5 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 Instagram 306.0.0.20.118 (iPhone12,1; iOS 15_6_1; en_GB; en; scale=2.00; 828x1792; 529083166) NW/3 5 requests with user_agent.original Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-T220) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.36 5 requests with user_agent.original Mozilla/5.0 (Linux; Android 13; SM-F711U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.43 5 requests show less	Brute-Force Bad Web Bot

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.61

🇷🇺 176.32.39.21

🇿🇲 45.215.251.194

🇪🇬 41.33.58.148

🇺🇸 23.229.54.178

🇺🇸 2a04:c300:400::1d0

🇺🇸 2001:470:2cc:1:95f0:8b0b:6697:af28

🇧🇷 201.77.170.65

🇩🇪 167.94.145.27

🇧🇷 118.26.105.52

🇺🇸 91.230.168.183

🇨🇦 85.217.149.39

🇺🇸 40.124.175.201

🇬🇧 2a06:4880:6000::71

🇩🇪 213.209.159.231

🇵🇱 172.253.255.56

🇸🇬 103.250.11.63

🇺🇸 34.138.49.31

🇳🇱 31.14.32.6

🇹🇷 213.128.70.19