JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.36.57

158.173.36.57 was found in our database!

This IP was reported 114 times. Confidence of Abuse is 59%: ?

59%

ISP	VPN Consumer Barcelona, Spain
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	vpnconsumer.com
Country	🇪🇸 Spain
City	Barcelona, Catalonia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.36.57

Whois 158.173.36.57

IP Abuse Reports for 158.173.36.57:

This IP address has been reported a total of 114 times from 53 distinct sources. 158.173.36.57 was first reported on October 1st 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-25 11:10:34 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-06-25 08:55:21 (12 hours ago)	Aggressive web search of vulnerable pages: /wp-includes/woocommerce-call.php /wp-content/plugins/wor ... show more Aggressive web search of vulnerable pages: /wp-includes/woocommerce-call.php /wp-content/plugins/wordpress-seo/wp-seo-main-float.php /wp-conten ... show less	Web App Attack
🇩🇪 Nevermind	2026-06-25 05:58:13 (15 hours ago)	158.173.36.57 - - [25/Jun/2026:07:58:12 +0200] "GET /wp-content/plugins/core/core.php HTTP/1.1" 404 ... show more 158.173.36.57 - - [25/Jun/2026:07:58:12 +0200] "GET /wp-content/plugins/core/core.php HTTP/1.1" 404 4803 "http://luett-huett.de/wp-content/plugins/core/core.php" "Go-http-client/2.0" 158.173.36.57 - - [25/Jun/2026:07:58:12 +0200] "GET /wp-content/plugins/schema/yanz.php HTTP/1.1" 404 4803 "http://luett-huett.de/wp-content/plugins/schema/yanz.php" "Go-http-client/2.0" 158.173.36.57 - - [25/Jun/2026:07:58:13 +0200] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 4803 "http://luett-huett.de/wp-content/plugins/pwnd-1/pwnd.php" "Go-http-client/2.0" 158.173.36.57 - - [25/Jun/2026:07:58:13 +0200] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 404 4803 "http://luett-huett.de/wp-content/plugins/init-help/init.php" "Go-http-client/2.0" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-25 00:28:53 (20 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇳🇱 Roderic	2026-06-18 22:38:48 (6 days ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan
Anonymous	2026-06-18 20:02:08 (1 week ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-includes/woocommerce-call.php	Web App Attack
Anonymous	2026-06-18 19:38:53 (1 week ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇺🇦 URAN Publishing Service	2026-06-16 04:38:12 (1 week ago)	158.173.36.57 - - [16/Jun/2026:07:38:10 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 ... show more 158.173.36.57 - - [16/Jun/2026:07:38:10 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 709 "-" "Go-http-client/1.1" 158.173.36.57 - - [16/Jun/2026:07:38:11 +0300] "GET /wp-content/plugins/StylePlugin/up.php HTTP/1.1" 404 709 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 maxpower	2026-06-12 02:49:47 (1 week ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 158.173.36.57 (ES/Spain/-): 1 in the last 360 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 158.173.36.57 (ES/Spain/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 158.173.36.57 - - [12/Jun/2026:04:49:42 +0200] "GET /222.php HTTP/1.1" 404 33896 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "-" host=circuitografico.it show less	Port Scan
🇮🇹 VHosting	2026-06-12 01:15:04 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-05-12 04:32:03 (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇦 URAN Publishing Service	2026-05-11 23:26:48 (1 month ago)	158.173.36.57 - - [12/May/2026:02:26:47 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 404 71 ... show more 158.173.36.57 - - [12/May/2026:02:26:47 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 404 716 "-" "Go-http-client/1.1" 158.173.36.57 - - [12/May/2026:02:26:47 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 716 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 nyt	2026-05-05 19:36:17 (1 month ago)	Web Shell Upload	Hacking Web App Attack
🇫🇷 Octopuce	2026-05-05 12:50:19 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/so-pinyin-slugs/inc/main_json.php /wp ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/so-pinyin-slugs/inc/main_json.php /wp-content/plugins/WPManager/up.php /wp-conte ... show less	Web App Attack
🇩🇪 raph	2026-05-03 00:04:24 (1 month ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack

Showing 1 to 15 of 114 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 179.6.0.197

🇮🇹 79.32.86.149

🇨🇳 223.85.251.47

🇳🇱 195.178.110.227

🇦🇷 179.51.247.72

🇧🇷 178.212.226.46

🇸🇦 169.148.8.224

🇧🇷 152.234.190.214

🇺🇦 91.218.90.3

🇵🇱 74.248.158.250

🇲🇽 189.217.195.119

🇸🇬 178.128.210.15

🇻🇳 27.71.230.31

🇺🇸 216.73.216.221

🇺🇸 216.25.89.112

🇦🇷 190.175.76.84

🇧🇷 179.97.44.176

🇩🇴 179.49.202.6

🇮🇶 169.224.36.92

🇺🇸 142.93.253.37