JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.3.60

158.173.3.60 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 18%: ?

18%

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.3.60

Whois 158.173.3.60

IP Abuse Reports for 158.173.3.60:

This IP address has been reported a total of 24 times from 22 distinct sources. 158.173.3.60 was first reported on November 17th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-12 19:47:45 (1 week ago)	2026-06-12 19:47:45 warning[1660904]: host unknown[158.173.3.60]: unauthorized access atte ... show more 2026-06-12 19:47:45 warning[1660904]: host unknown[158.173.3.60]: unauthorized access attempted: tcp/9010 show less	Port Scan Brute-Force
Anonymous	2026-05-26 06:06:44 (3 weeks ago)	Malicious crawler or aggressive scraper probe \| (Magento Site) (Botnet activity attributed to: Angar ... show more Malicious crawler or aggressive scraper probe \| (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack
🇷🇺 Agrohim	2026-05-22 00:17:14 (4 weeks ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇩🇪 filstal.org	2026-05-01 01:47:15 (1 month ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; PPC Mac OS X 10_9_1 rv:5.0; ka-GE) AppleWe ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; PPC Mac OS X 10_9_1 rv:5.0; ka-GE) AppleWebKit/531.45.6 (KHTML; like Gecko) Version/4.0.2 Safari/531.45.6). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-16 01:03:22 (2 months ago)	Blocked suspicious User-Agent on wp-login POST. String match "/wp-login.php" at REQUEST_FILENAME. (5 ... show more Blocked suspicious User-Agent on wp-login POST. String match "/wp-login.php" at REQUEST_FILENAME. (5024-195) show less	Hacking
🇩🇪 AlexEventfahrtenIPDB	2026-04-15 18:01:26 (2 months ago)	[Wed Apr 15 20:01:26.293692 2026] [authz_core:error] [pid 3921466:tid 3921466] [client 158.173.3.60: ... show more [Wed Apr 15 20:01:26.293692 2026] [authz_core:error] [pid 3921466:tid 3921466] [client 158.173.3.60:42933] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.de/wp-login.php?action=register [Wed Apr 15 20:01:26.499565 2026] [authz_core:error] [pid 3920738:tid 3920738] [client 158.173.3.60:17488] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.de/wp-login.php ... show less	Brute-Force Web App Attack
🇷🇺 Agrohim	2026-04-03 19:39:53 (2 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇧🇪 cmbplf	2025-12-10 05:57:54 (6 months ago)	6.183 4xx requests in 1 hour (2w3d1h)	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2025-11-20 05:59:31 (7 months ago)	Excessive multi-domain requests	Brute-Force
🇦🇺 oncord	2025-11-18 19:48:11 (7 months ago)	Form spam	Web Spam
🇨🇿 huginet	2025-11-18 17:13:45 (7 months ago)	158.173.3.60 - - [18/Nov/2025:18:13:44 +0100] "GET /wp-login.php?action=register HTTP/1.0" 302 - "ht ... show more 158.173.3.60 - - [18/Nov/2025:18:13:44 +0100] "GET /wp-login.php?action=register HTTP/1.0" 302 - "https://www.huginet.net/wp-login.php?action=register" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 158.173.3.60 - - [18/Nov/2025:18:13:44 +0100] "GET /wp-login.php?registration=disabled HTTP/1.0" 200 10954 "https://www.huginet.net/wp-login.php?registration=disabled" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" ... show less	DDoS Attack FTP Brute-Force Ping of Death Phishing Web Spam Blog Spam Spoofing Brute-Force Web App Attack SSH
🇩🇪 KI-Netzwerk	2025-11-18 15:51:26 (7 months ago)	Bad Calls: Webpage scraping, Web App Attack	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-11-18 15:21:13 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 158.173.3.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 158.173.3.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 10:21:06.997247 2025] [security2:error] [pid 20215:tid 20215] [client 158.173.3.60:28744] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "aRyO4q9S-awAYMEUVWB6FgAAAAo"], referer: http://gamepart.com/home/tancedi1/gamepart.com show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-18 12:31:17 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-31.158.173.3.60.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-31.158.173.3.60.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 EGP Abuse Dept	2025-11-18 10:38:05 (7 months ago)	forum signup bot	Web Spam Blog Spam Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 172.253.237.28

🇳🇱 91.92.42.147

🇫🇷 82.64.174.41

🇬🇵 5.187.97.40

🇳🇱 176.65.148.132

🇭🇰 118.193.38.26

🇳🇬 102.88.137.80

🇷🇴 80.94.92.167

🇳🇱 80.82.77.48

🇲🇽 45.134.9.27

🇺🇸 2a04:c300:400::1cc

🇮🇳 182.95.113.122

🇨🇳 171.83.60.120

🇷🇺 85.173.96.230

🇱🇹 62.60.130.14

🇨🇦 20.104.203.253

🇮🇳 182.95.110.42

🇮🇳 182.95.106.138

🇮🇳 182.65.38.234

🇺🇸 172.96.182.111