JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.253.209.158

192.253.209.158 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 44%: ?

44%

ISP	VPN Consumer New Jersey, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Jersey City, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.253.209.158

Whois 192.253.209.158

IP Abuse Reports for 192.253.209.158:

This IP address has been reported a total of 126 times from 60 distinct sources. 192.253.209.158 was first reported on February 16th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-09-30 10:39:16 (5 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 netclix.gr	2026-09-30 04:38:06 (11 hours ago)	(c5_web_scan) Custom5 Aggressive Web Scan 192.253.209.158 (US/United States/-): 3 in the last 4600 s ... show more (c5_web_scan) Custom5 Aggressive Web Scan 192.253.209.158 (US/United States/-): 3 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 192.253.209.158 - - [30/Sep/2026:07:38:03 +0300] "GET /wp-admin/maint/ HTTP/1.1" 404 404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" default:80 192.253.209.158 - - [30/Sep/2026:07:38:03 +0300] "GET /wp-admin/images/ HTTP/1.1" 404 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" default:80 192.253.209.158 - - [30/Sep/2026:07:38:04 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Port Scan
🇩🇪 Skyrider	2026-09-30 03:16:36 (12 hours ago)	crowdsecurity/http-backdoors-attempts	Web App Attack
🇳🇱 Site.eu	2026-09-29 10:38:13 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 dynamix	2026-09-29 05:51:32 (1 day ago)	Multiple WAF Violations	Web App Attack
🇫🇷 ✨	2026-09-29 02:05:08 (1 day ago)	Domain : thegreenhousefleet.co.uk Rule : config 2026-09-29 02:04:04 *hidden-privacy* GET /.well- ... show more Domain : thegreenhousefleet.co.uk Rule : config 2026-09-29 02:04:04 *hidden-privacy* GET /.well-known/acme-challenge/wp-load.php X-ARR-CACHE-HIT=0 show less	Hacking SQL Injection
🇹🇷 neron	2026-08-12 21:06:48 (1 month ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇨🇳 鹏鹏	2026-07-20 04:52:54 (2 months ago)	monitor: on VM-0-7-ubuntu \| port: 35012 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 35012 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Herrminator	2026-07-07 04:56:53 (2 months ago)	85.215.157.225 192.253.209.158 - - [07/Jul/2026:06:56:45 +0200] "POST /.env HTTP/1.1" 503 592 "-" "M ... show more 85.215.157.225 192.253.209.158 - - [07/Jul/2026:06:56:45 +0200] "POST /.env HTTP/1.1" 503 592 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" 85.215.157.225 192.253.209.158 - - [07/Jul/2026:06:56:46 +0200] "GET /.env HTTP/1.1" 503 190 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" "-" 85.215.157.225 192.253.209.158 - - [07/Jul/2026:06:56:46 +0200] "GET /.env.prod HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" 85.215.157.225 192.253.209.158 - - [07/Jul/2026:06:56:47 +0200] "GET /.env.production HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" 85.215.157.225 192.253.209.158 - - [07/Jul/2026:06:56:47 +0200] "GET /redmine/.env HTTP/1.1" 503 190 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) ... show less	Brute-Force Web App Attack
Anonymous	2026-07-04 02:36:31 (2 months ago)	192.253.209.158 - - [03/Jul/2026:23:36:27 -0300] "GET /config.js HTTP/1.1" 404 170 "-" "Mozilla/5.0 ... show more 192.253.209.158 - - [03/Jul/2026:23:36:27 -0300] "GET /config.js HTTP/1.1" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 192.253.209.158 - - [03/Jul/2026:23:36:27 -0300] "GET /api/config.js HTTP/1.1" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 192.253.209.158 - - [03/Jul/2026:23:36:28 -0300] "GET /app/config.js HTTP/1.1" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 192.253.209.158 - - [03/Jul/2026:23:36:29 -0300] "GET /static/js/config.js HTTP/1.1" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" 192.253.209.158 - - [03/Jul/2026:23:36:30 -0300] "GET /static/config.js HTTP/1.1" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" ... show less	Port Scan
🇫🇷 masterguru	2026-06-28 10:27:32 (3 months ago)	Port Scan detected from 192.253.209.158 (US/United States/-). 11 hits in the last 75 seconds (0-14 ... show more Port Scan detected from 192.253.209.158 (US/United States/-). 11 hits in the last 75 seconds (0-143) show less	Port Scan
🇬🇧 prime_fusion_ld	2026-06-27 14:00:45 (3 months ago)	Blocked by CSF/LFD on vps.primefusion.co.uk. Trigger: 3600 Ports: *	Port Scan
🇪🇸 masterguru	2026-06-23 19:44:02 (3 months ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)	Web App Attack
🇯🇵 warudora	2026-06-10 13:32:12 (3 months ago)	Automated Honeypot Trap: Attempted to access sensitive path '/wp-login.php' on a Flask server.	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-06-06 21:42:26 (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 123.1.147.204

🇮🇩 114.30.86.98

🇮🇩 103.131.61.163

🇳🇱 93.123.109.163

🇺🇸 91.230.168.215

🇳🇱 91.92.42.27

🇰🇷 59.10.236.163

🇧🇷 45.182.206.203

🇸🇬 2a12:f540:f7cc:a916:6398:78e4:5b68:a0e4

🇳🇱 109.160.32.155

🇳🇱 104.23.170.137

🇮🇳 98.70.127.17

🇦🇪 87.200.183.200

🇺🇸 66.163.188.82

🇺🇸 66.132.186.191

🇰🇷 61.43.121.132

🇺🇸 47.89.230.226

🇧🇷 16.5.0.181

🇺🇸 206.189.190.240

🇩🇪 167.94.146.32