JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.79.246

158.173.79.246 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 21%: ?

21%

ISP	VPN Consumer Vilnius, Lithuania
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61272
Domain Name	vpnconsumer.com
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.79.246

Whois 158.173.79.246

IP Abuse Reports for 158.173.79.246:

This IP address has been reported a total of 8 times from 4 distinct sources. 158.173.79.246 was first reported on May 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2026-07-05 04:02:51 (1 day ago)	Form spam	Web Spam
🇺🇸 oncord	2026-06-17 06:24:25 (2 weeks ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-06-05 06:40:29 (1 month ago)	(mod_security) mod_security (id:210801) triggered by 158.173.79.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210801) triggered by 158.173.79.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 02:40:25.711214 2026] [security2:error] [pid 15776:tid 15776] [client 158.173.79.246:64219] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|clevelanddental.org\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "clevelanddental.org"] [uri "/license.txt"] [unique_id "aiJvWQ1VSCXcFsaesbYkFgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 05:11:43 (1 month ago)	(mod_security) mod_security (id:210801) triggered by 158.173.79.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210801) triggered by 158.173.79.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 01:11:37.089683 2026] [security2:error] [pid 22915:tid 22915] [client 158.173.79.246:26871] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|campconcerto.com\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "campconcerto.com"] [uri "/license.txt"] [unique_id "aiJaiTGhLsTJhi-fbBf2yAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-05 03:41:56 (1 month ago)	[FriJun0505:41:51.1311032026][security2:error][pid3309981:tid3310346][client158.173.79.246:0]ModSecu ... show more [FriJun0505:41:51.1311032026][security2:error][pid3309981:tid3310346][client158.173.79.246:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:n\(\?:-stealth\\|sauditor\\|e\(\?:ssus\\|etwork-services-auditor\)\\|ikto\\|map\)\\|b\(\?:lack\?widow\\|rutus\\|ilbo\)\\|web\(\?:inspec\\|roo\)t\\|p\(\?:mafind\\|aros\\|avuk\)\\|cgichk\\|jaascois\\|\\\\\\\\.nasl\\|metis\\|w\(\?:ebtrendssecurityanalyzer\\|hcc\\|3af\\\\\\\\.sourceforge\\\\\\\\.net\)\\|\\\\\\\\bzmeu\\\\\\\\b\\|springenwerk\\|...\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"184\"][id\"330034\"][rev\"14\"][msg\"Atomicorp.comWAFRules:UnauthorizedVulnerabilityScannerdetected\"][data\"paros\"][severity\"CRITICAL\"][hostname\"benvenutialfood.org\"][uri\"/license.txt\"][unique_id\"aiJFfxw975fGWWeb5OE7_gAAARY\"] show less	Hacking Web App Attack
🇺🇸 oncord	2026-06-01 14:13:09 (1 month ago)	Form spam	Web Spam
🇬🇧 consul.to	2026-05-28 21:15:34 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-05-17 12:58:01 (1 month ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.142.147.111

🇧🇩 103.153.66.219

🇻🇳 27.79.7.205

🇧🇪 198.235.24.209

🇮🇳 163.61.39.40

🇺🇸 162.214.5.224

🇧🇷 128.201.9.152

🇺🇸 104.196.144.18

🇱🇹 62.60.130.219

🇷🇴 2.57.122.168

🇫🇷 207.180.226.58

🇧🇷 205.210.31.168

🇬🇧 193.163.125.95

🇮🇳 182.95.153.122

🇸🇬 168.144.110.212

🇨🇳 106.75.146.153

🇫🇷 62.210.38.102

🇺🇸 172.234.218.210

🇱🇹 84.15.177.248

🇺🇸 66.132.172.16