158.173.36.47
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- VPN Consumer Barcelona, Spain
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS9009
- Domain Name
- vpnconsumer.com
- Country
- 🇪🇸 Spain
- City
- Barcelona, Catalonia
Abuse Reports
Total reports
130 from
61 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
IP matched detection query many 3xx errors.
|
Brute-Force | |
| 🇳🇱 Alt255 |
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 158.173.36.47 - - [13/Oct/2026:09:47:03 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 301 525 "-" "Go-http-client/1.1"
...
|
Bad Web Bot Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇳🇱 Alt255 |
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 158.173.36.47 - - [05/Oct/2026:11:40:39 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 301 497 "-" "Go-http-client/1.1"
...
|
Bad Web Bot Web App Attack | |
| Anonymous |
[server.dsamoodle.de] httpd-shell-path-probe: sites=www.dsamoodle.de; logs=/var/log/httpd/domains/dsamoodle.de.log; samples=/wp-content/plugins/buddypress/alfa.php
|
Hacking Web App Attack | |
| 🇮🇩 soc-yk |
Type: web_scanning
Risk: 100
Events: 37
Evidence:
- Automated hostile web probing detected
- Repeated web scanning activity observed
- Threat escalation behavior observed
|
Web App Attack | |
| 🇫🇷 Octopuce |
Aggressive web search of vulnerable pages: /wp-content/plugins/Nxploited/Nx.php /wp-content/plugins/madmadxploits/up.php /wp-content/plugins/ne ...
|
Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇺🇦 URAN Publishing Service |
[24/Aug/2026:05:42:01 +0300] -- 158.173.36.47 Ban reason: User-Agent Go-http-client
|
Bad Web Bot Web App Attack | |
| 🇧🇾 lns.bz |
Too many 404 requests [BY]
|
Web App Attack | |
| 🇮🇹 Progetto1 |
Website Scanning / Scraping
|
Bad Web Bot Exploited Host Web App Attack | |
| 🇹🇷 neron |
CrowdSec blocked: http:exploit detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇹🇷 neron |
CrowdSec blocked: http:exploit detected via OPNsense firewall
|
Hacking Web App Attack | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇩🇪 todix |
Web App Attack Exploid from 158.173.36.47
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown