JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.36.240

158.173.36.240 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 38%: ?

38%

ISP	VPN Consumer Barcelona, Spain
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	vpnconsumer.com
Country	🇪🇸 Spain
City	Barcelona, Catalonia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.36.240

Whois 158.173.36.240

IP Abuse Reports for 158.173.36.240:

This IP address has been reported a total of 88 times from 41 distinct sources. 158.173.36.240 was first reported on October 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-06-12 05:41:28 (1 day ago)	175 requests with url.path *config.php	Brute-Force Bad Web Bot
🇩🇪 maxpower	2026-06-12 02:52:25 (1 day ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 158.173.36.240 (ES/Spain/-): 1 in the last 36 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 158.173.36.240 (ES/Spain/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 158.173.36.240 - - [12/Jun/2026:04:52:20 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php HTTP/1.1" 301 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "-" host=inkassrl.it show less	Port Scan
Anonymous	2026-05-29 00:49:34 (2 weeks ago)	Credential Stuffing attacks against Microsoft 365	Brute-Force
🇺🇦 URAN Publishing Service	2026-05-11 23:28:04 (1 month ago)	158.173.36.240 - - [12/May/2026:02:28:03 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and- ... show more 158.173.36.240 - - [12/May/2026:02:28:03 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp-admin/security.php HTTP/1.1" 404 716 "-" "Go-http-client/1.1" 158.173.36.240 - - [12/May/2026:02:28:03 +0300] "GET /wp-content/plugins/contact-form-7/rstsgd.php HTTP/1.1" 404 716 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 nyt	2026-05-05 19:35:52 (1 month ago)	Web Shell Upload	Hacking Web App Attack
🇩🇪 raph	2026-05-03 00:04:43 (1 month ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-05-02 23:27:45 (1 month ago)	158.173.36.240 - - [03/May/2026:02:27:44 +0300] "GET /wp-content/plugins/ubh/ubh.php HTTP/1.1" 404 7 ... show more 158.173.36.240 - - [03/May/2026:02:27:44 +0300] "GET /wp-content/plugins/ubh/ubh.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇷 Octopuce	2026-05-02 18:33:11 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/shell/noimg.php /wp-content/plugins/s ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/shell/noimg.php /wp-content/plugins/schema/yanz.php /wp-content/themes/aahana/js ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-02 18:28:35 (1 month ago)	158.173.36.240 - - [02/May/2026:21:28:34 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 70 ... show more 158.173.36.240 - - [02/May/2026:21:28:34 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 707 "-" "Go-http-client/1.1" 158.173.36.240 - - [02/May/2026:21:28:34 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 404 707 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 EGP Abuse Dept	2026-04-24 04:44:45 (1 month ago)	Scanning for web/db/file exploits on www.omnimedical.nl	SQL Injection Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-04-23 21:29:16 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 19:00:48 (1 month ago)	(mod_security) mod_security (id:234930) triggered by 158.173.36.240 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:234930) triggered by 158.173.36.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 15:00:40.580838 2026] [security2:error] [pid 3196454:tid 3196454] [client 158.173.36.240:38421] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.voodooshop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.voodooshop.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aeUmWE0K2kWsMHY-nDT8oQAAACU"], referer: http://hounganjesse.com/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-04-16 13:53:45 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇬🇧 consul.to	2026-04-16 11:19:08 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-04-14 16:27:51 (1 month ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.228

🇩🇪 213.209.159.223

🇺🇸 162.216.150.98

🇺🇸 159.198.65.46

🇺🇸 66.132.172.252

🇺🇸 18.190.15.50

🇺🇸 205.210.31.60

🇹🇼 198.235.24.2

🇸🇬 194.164.107.5

🇫🇷 149.202.60.80

🇿🇦 105.187.231.207

🇭🇰 103.52.153.215

🇩🇪 46.224.239.112

🇺🇸 34.135.200.178

🇨🇭 34.65.204.144

🇺🇸 209.222.101.194

🇩🇪 167.94.146.40

🇮🇳 167.71.227.158

🇺🇸 162.216.149.187

🇫🇮 147.185.133.97