JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.158.166.34

124.158.166.34 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	PT Indonesia Comnets Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Bandung, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.158.166.34

Whois 124.158.166.34

IP Abuse Reports for 124.158.166.34:

This IP address has been reported a total of 22 times from 14 distinct sources. 124.158.166.34 was first reported on November 30th 2024, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-10-11 00:55:56 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 124.158.166.34 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 124.158.166.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 20:55:48.496160 2025] [security2:error] [pid 17074:tid 17074] [client 124.158.166.34:57639] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOmrFNoWFcCjbJtXAGTrHQAAABI"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 schedules.run	2025-10-02 12:44:49 (10 months ago)		Web Spam
🇳🇱 antikirra	2025-09-06 21:46:37 (11 months ago)	Proxy Port Scanning	Port Scan
🇺🇸 TPI-Abuse	2025-09-04 12:13:24 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 124.158.166.34 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 124.158.166.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 08:13:19.772479 2025] [security2:error] [pid 1458:tid 1458] [client 124.158.166.34:44431] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|harvestfrc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harvestfrc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aLmCXzeA171F_ZThISL5EwAAABc"], referer: https://harvestfrc.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-17 22:33:11 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 124.158.166.34 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 124.158.166.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 17 18:33:05.902815 2025] [security2:error] [pid 1017:tid 1017] [client 124.158.166.34:41390] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|texaslawman.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "texaslawman.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aKJYoYirPXNZ-22UBL7u4QAAAA0"], referer: https://texaslawman.net/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-30 12:03:34 (1 year ago)	Spamming registration page	Web Spam
Anonymous	2025-06-22 18:18:46 (1 year ago)	VELIEDE WEBFORM SPAM 124.158.166.34 (124.158.166.34)	Web Spam
🇬🇧 noise.agency	2025-05-23 17:39:03 (1 year ago)	(wordpress) Failed wordpress login from 124.158.166.34 (ID/Indonesia/-)	Brute-Force
Anonymous	2025-05-19 08:24:58 (1 year ago)	Spamming registration page	Web Spam
🇪🇸 el-brujo	2025-05-18 16:42:04 (1 year ago)	05/18/2025-18:42:04.321537 124.158.166.34 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
🇩🇪 zeitschel.net	2025-05-15 14:50:08 (1 year ago)	2025-05-15 16:49:36 Unauthorized /owa/auth.owa	Hacking Web App Attack
Anonymous	2025-05-09 21:21:41 (1 year ago)	ALTB WEBFORM SPAM 124.158.166.34 (124.158.166.34)	Web Spam
🇪🇸 el-brujo	2025-05-02 01:23:43 (1 year ago)	05/02/2025-03:23:43.802948 124.158.166.34 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
Anonymous	2025-04-05 02:03:28 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-03-15 12:19:09 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.03.15 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.03.15 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 196.202.127.38

🇺🇸 157.230.12.173

🇧🇷 191.7.41.80

🇸🇬 161.118.200.156

🇮🇩 103.67.244.158

🇺🇸 74.7.243.235

🇹🇼 59.126.233.87

🇬🇧 31.14.254.23

🇺🇸 20.171.11.36

🇸🇪 217.60.78.71

🇨🇳 183.92.115.38

🇬🇧 165.232.33.216

🇫🇮 147.185.133.150

🇨🇳 123.14.124.14

🇺🇸 108.29.62.168

🇸🇬 103.134.154.95

🇧🇬 79.124.49.70

🇩🇪 64.89.163.85

🇺🇿 62.164.148.87

🇺🇸 20.102.117.132