JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.36.70

158.173.36.70 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 59%: ?

59%

ISP	VPN Consumer Barcelona, Spain
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	vpnconsumer.com
Country	🇪🇸 Spain
City	Barcelona, Catalonia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.36.70

Whois 158.173.36.70

IP Abuse Reports for 158.173.36.70:

This IP address has been reported a total of 150 times from 65 distinct sources. 158.173.36.70 was first reported on October 2nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 16:01:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 12:01:18.243834 2026] [security2:error] [pid 30973:tid 30973] [client 158.173.36.70:49377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestsongs.com"] [uri "/.env"] [unique_id "atozTovagvI5U2dzvE4XdwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 14:30:39 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 10:30:36.758639 2026] [security2:error] [pid 32288:tid 32288] [client 158.173.36.70:20643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lemay.design"] [uri "/.env"] [unique_id "atoeDDkPJTPMP04xZ-_hFAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 13:41:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:41:39.947098 2026] [security2:error] [pid 23696:tid 23696] [client 158.173.36.70:54669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "televisonic.com"] [uri "/.env"] [unique_id "atoSk7aOhSzpvDQdwqhp4wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 12:49:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 08:49:38.451635 2026] [security2:error] [pid 24872:tid 24872] [client 158.173.36.70:62189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jogmabogadospenalistas.com"] [uri "/.env"] [unique_id "atoGYvLLefW8RalRMPFD_wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 11:53:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:53:36.578834 2026] [security2:error] [pid 16893:tid 16893] [client 158.173.36.70:60793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hazeltrane.com"] [uri "/.env"] [unique_id "atn5QP6_8vJFz0yooSe_eAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 09:35:54 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:35:49.058452 2026] [security2:error] [pid 19540:tid 19682] [client 158.173.36.70:57373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "besfixedwireless.com"] [uri "/.env"] [unique_id "atnY9fB_X2z1k2tzYjpQfgAAAg0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 04:45:18 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:45:12.551466 2026] [security2:error] [pid 13195:tid 13195] [client 158.173.36.70:61197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easternimport.com"] [uri "/.env"] [unique_id "atmU2MeraKeoMN4QaCQ3eQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-22 01:17:48 (1 day ago)	Probing for exposed secret / credential files	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 00:13:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 20:13:43.499155 2026] [security2:error] [pid 8700:tid 8720] [client 158.173.36.70:52911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moidawg.gg"] [uri "/.env"] [unique_id "atlVN3PUcbR9MECNkSE2fAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-10-19 18:35:00 (3 days ago)	330 requests with url.path /.well-known/acme-challenge/.php 290 requests with url.path /.well-k ... show more 330 requests with url.path /.well-known/acme-challenge/.php 290 requests with url.path /.well-known/pki-validation/*.php show less	Brute-Force Bad Web Bot
Anonymous	2026-10-19 06:50:23 (4 days ago)	IP matched detection query many 3xx errors.	Brute-Force
🇳🇱 maxxsense	2026-10-19 05:25:08 (4 days ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 158.173.36.70 (ES/Spain/ ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 158.173.36.70 (ES/Spain/-) show less	Port Scan
Anonymous	2026-10-19 01:40:49 (4 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-10-18 20:57:35 (4 days ago)	apache vulnerability scan	Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 19:23:24 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 158.173.36.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 15:23:19.116251 2026] [security2:error] [pid 12030:tid 12030] [client 158.173.36.70:26643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnairdenterprisesllc.com"] [uri "/.env"] [unique_id "asviJ5L9ZnKuXE3zOn3AbAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.38.69.12

🇨🇳 180.184.160.211

🇺🇸 173.237.184.13

🇬🇧 139.59.203.5

🇩🇪 63.186.36.172

🇹🇭 203.156.108.110

🇮🇩 182.253.79.194

🇺🇸 172.125.127.147

🇸🇪 171.25.193.40

🇲🇹 86.38.103.52

🇷🇺 77.106.122.219

🇬🇧 45.82.76.117

🇧🇷 186.194.20.123

🇦🇷 186.39.26.122

🇵🇾 181.91.87.31

🇺🇸 172.251.217.17

🇩🇪 167.71.50.151

🇳🇱 138.226.239.34

🇨🇳 122.14.225.12

🇫🇷 91.231.89.76