JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.212.135.158

188.212.135.158 was found in our database!

This IP was reported 167 times. Confidence of Abuse is 20%: ?

20%

ISP	VPN Consumer Warsaw, Poland
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 188.212.135.158

Whois 188.212.135.158

IP Abuse Reports for 188.212.135.158:

This IP address has been reported a total of 167 times from 76 distinct sources. 188.212.135.158 was first reported on March 9th 2022, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-04 14:51:08 (4 weeks ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-05-25 08:04:41 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇳🇱 DonAtari	2026-05-25 07:26:22 (1 month ago)	DShield firewall scan - TCP to port 23	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-05-05 22:34:40 (1 month ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-04 22:28:28 (1 month ago)		Brute-Force Web App Attack
🇫🇮 Rexikon	2026-05-04 15:40:56 (1 month ago)	188.212.135.158 - - [04/May/2026:17:40:55 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://pa ... show more 188.212.135.158 - - [04/May/2026:17:40:55 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 188.212.135.158 - - [04/May/2026:17:40:55 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" 188.212.135.158 - - [04/May/2026:17:40:55 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 OPR/120.0.0.0" 188.212.135.158 - - [04/May/2026:17:40:56 +0200] "POST /wp-login.php HTTP/1.0" 200 15967 "https://paramedic24.pl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safar ... show less	Brute-Force
🇺🇸 mnsf	2026-05-04 14:05:29 (1 month ago)	Login Too Frequent (8)	Brute-Force Web App Attack
🇫🇮 as211431.net	2026-05-03 06:24:04 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-includes/IXR/fix.php7 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇧🇪 taivas.nl	2026-04-28 17:32:09 (2 months ago)	Bad_requests	Bad Web Bot
🇳🇱 Site.eu	2026-04-28 07:46:59 (2 months ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-04-21 13:31:51 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 188.212.135.158 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 188.212.135.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 09:31:45.168052 2026] [security2:error] [pid 1298575:tid 1298575] [client 188.212.135.158:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pixacast.com"] [uri "/.git/execute.php"] [unique_id "aed8QZuNlOSExjjIITOAgwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2026-03-21 11:18:15 (3 months ago)	Scanning for backup files	Web App Attack
🇬🇧 pinguin	2026-03-20 19:41:23 (3 months ago)	Triggered Cloudflare WAF (firewallManaged) from PL. Action taken: LOG Protocol: HTTP/1.1 (HEAD metho ... show more Triggered Cloudflare WAF (firewallManaged) from PL. Action taken: LOG Protocol: HTTP/1.1 (HEAD method) Endpoint: /restore/public_html.zip UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇯🇵 Valhalla	2026-03-19 22:36:46 (3 months ago)	/old/bak.rar	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-18 02:58:25 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 188.212.135.158 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 188.212.135.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 22:58:21.382147 2026] [security2:error] [pid 24246:tid 24246] [client 188.212.135.158:25383] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.spectorworld.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.spectorworld.com"] [uri "/dump.sql"] [unique_id "aboUzY6Pjmx6KA_hQRJijwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 186.122.177.140

🇨🇳 180.76.229.231

🇦🇺 168.144.171.234

🇧🇷 138.97.134.7

🇮🇩 103.118.82.254

🇬🇧 78.153.140.43

🇺🇸 43.166.242.149

🇯🇵 8.216.47.32

🇨🇳 221.229.216.1

🇵🇱 212.127.90.201

🇨🇴 186.86.110.204

🇧🇷 170.239.72.126

🇮🇩 118.96.251.19

🇵🇰 101.53.236.155

🇷🇺 84.201.243.44

🇳🇱 45.148.10.34

🇭🇰 43.132.225.186

🇬🇭 41.139.0.137

🇹🇼 198.235.24.15

🇵🇱 195.116.145.127