JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

158.173.67.133

Recent Activity

Abuse confidence score ?

100% Critical

33 reports

27 reporters · latest 7 hours ago

ISP	VPN Consumer Brussels, Belgium
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 158.173.67.133

Export CSV

This IP address has been reported a total of 33 times from 27 distinct sources. 158.173.67.133 was first reported on October 12th 2026, and the most recent report was 7 hours ago. In the last 60 days, the top reporter locations were: Germany with 7 reports; United States of America with 7 reports; Indonesia with 4 reports. The most common categories in these recent reports were: Web App Attack 21 times; Brute-Force 10 times; Bad Web Bot 9 times; Hacking 6 times; Port Scan 4 times; Other 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 soc-yk	2026-10-13 23:18:12 (7 hours ago)	Type: suspicious_network_activity Risk: 100 Events: 297 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 100 Events: 297 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
Anonymous	2026-10-13 20:47:11 (9 hours ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-10-13 20:22:59 (10 hours ago)	158.173.67.133 - - [13/Oct/2026:14:22:59 -0600] "GET /.git/config HTTP/1.1" 301 429 "-" "-" ...	Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 19:23:04 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 158.173.67.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.173.67.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 15:22:56.982791 2026] [security2:error] [pid 18966:tid 18966] [client 158.173.67.133:44475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldengatecorgis.org"] [uri "/.git/config"] [unique_id "as6FEC_yjHXdsC6OobLn5wAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Blexyel	2026-10-13 18:48:38 (11 hours ago)	158.173.67.133 - - [13/Oct/2026:20:48:37 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "-" "pingusm ... show more 158.173.67.133 - - [13/Oct/2026:20:48:37 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "-" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇩🇪 Jochen Pretli	2026-10-13 18:23:54 (12 hours ago)	connection to honeypot	Email Spam Port Scan
🇳🇱 mieg	2026-10-13 17:34:37 (13 hours ago)	Web vulnerability probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 16:00:49 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 158.173.67.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.173.67.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 12:00:43.466526 2026] [security2:error] [pid 18797:tid 18797] [client 158.173.67.133:51477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flic.net"] [uri "/.git/config"] [unique_id "as5Vq1bKOzbgRpLDxdkDjwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mawan	2026-10-13 15:33:59 (15 hours ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 15:12:45 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 158.173.67.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.173.67.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:12:41.967946 2026] [security2:error] [pid 18820:tid 18820] [client 158.173.67.133:37383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thinksite.net"] [uri "/.git/config"] [unique_id "as5KaWPdT3aZ8GsMdJNGkgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-10-13 15:04:54 (15 hours ago)	Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from BE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-13 13:56:48 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 158.173.67.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.173.67.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 09:56:45.027192 2026] [security2:error] [pid 919:tid 919] [client 158.173.67.133:54709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arttechnology.net"] [uri "/.git/config"] [unique_id "as44nd8iyhZh6wcSVxY-YAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-10-13 12:11:39 (18 hours ago)	Port Scan detected from 158.173.67.133 (BE/Belgium/Brussels Capital/Brussels/-/[redacted]).	Port Scan
🇬🇧 Smish	2026-10-13 11:29:45 (19 hours ago)	HONEYPOT HIT --> Fail2ban time=1791890983 log=2026-10-13T12:29:43+01:00 ip=158.173.67.133 host=as210 ... show more HONEYPOT HIT --> Fail2ban time=1791890983 log=2026-10-13T12:29:43+01:00 ip=158.173.67.133 host=as210667.net method=GET uri="/.git/config" status=404 ua="-" ref="-" rid=8cbf49488a76adaeb22b8854228b6b5d show less	Web App Attack
🇸🇪 Minglarn	2026-10-13 11:28:51 (19 hours ago)	Malicious crawler, scraper or bad bot detected. (3 hits). Log: 158.173.67.133 - - [13/Oct/2026:11:28 ... show more Malicious crawler, scraper or bad bot detected. (3 hits). Log: 158.173.67.133 - - [13/Oct/2026:11:28:50 +0000] "GET / HTTP/1.1" 404 952 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 158.173.67.133 - - [13/Oct/2026:11:28:50 +0000] "GET / HTTP/1.1" 404 952 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 158.173.67.133 - - [13/Oct/2026:11:28:50 +0000] "GET / HTTP/1.1" 404 952 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" show less	Bad Web Bot

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.204.230.91

🇮🇩 163.52.135.197

🇺🇸 63.141.225.24

🇺🇸 37.19.221.172

🇩🇪 2a01:4020:31:0:102::7b2

🇨🇭 209.99.190.186

🇨🇳 183.56.179.201

🇺🇾 167.63.148.177

🇨🇳 115.190.165.96

🇰🇿 46.36.152.237

🇳🇱 45.148.10.152

🇮🇩 36.64.131.68

🇧🇪 34.78.112.64

🇮🇩 34.50.66.48

🇧🇪 34.38.154.224

🇨🇦 23.111.78.236

🇺🇸 8.235.15.109

🇧🇷 187.51.84.86

🇱🇹 185.2.228.48

🇫🇮 147.185.133.236