JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.10.8.218

Recent Activity

Abuse Confidence Score

22% Elevated

15 reports

11 reporters · latest 23 hours ago

ISP: PT. SOLUSINDO DISTRIBUTOR ACCECORIES
Usage Type: Fixed Line ISP
ASN: AS58495
Domain Name: solusindodistributor.my.id
Country: 🇮🇩 Indonesia
City: Semarang, Central Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 11 distinct reporters

First reported

May 26th 2025

Most recent report

23 hours ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 1 🇫🇷 France 1 🇮🇩 Indonesia 1

Most common categories Exploited Host 2 Bad Web Bot 2 Hacking 2 Email Spam 1 Web App Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ALPHANET	2026-10-28 03:32:44 (23 hours ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇮🇩 hermawan	2026-10-25 01:49:34 (4 days ago)	[Sun Oct 25 08:49:33.302320 2026] [security2:error] [pid 1812127:tid 140102556595904] [client 157.10.8.218:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js ... show more [Sun Oct 25 08:49:33.302320 2026] [security2:error] [pid 1812127:tid 140102556595904] [client 157.10.8.218:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp HTTP/1.1 request_line = GET /Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp HTTP/1.1 Request URI RAW = /Whatsapp_Kantor_BMKG_Malang_Stasiu ... show less	Email Spam Hacking
🇺🇸 ipblock.com	2026-09-03 00:48:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇫🇷 vtchost.com	2026-08-31 22:32:34 (1 month ago)	requested honeypot page - ignored robots.txt - scraping botnet or virus ...	Bad Web Bot Exploited Host
🇩🇪 Phenix Info	2026-08-29 05:01:38 (1 month ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇺🇸 ipblock.com	2026-08-29 03:54:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-08-22 01:54:00 (2 months ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇫🇷 Zkillu	2026-08-20 16:17:27 (2 months ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 16:12:27 -> 2026-08-20 16:27:27 UTC) targeting AS215599. This IP (AS58495) sent ~8946 packets (0.55 MB) during the attack window. Likely a compromised device (botnet).	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-19 22:11:45 (2 months ago)	UDP flood (DDoS) vs AS215599: 16 pkts / 0.02 MB to UDP 8443 across 13 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. E ... show more UDP flood (DDoS) vs AS215599: 16 pkts / 0.02 MB to UDP 8443 across 13 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 HaloAgencySAS	2026-08-19 22:11:45 (2 months ago)	UDP flood (DDoS) vs AS215599: 16 pkts / 0.02 MB to UDP 8443 across 13 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. E ... show more UDP flood (DDoS) vs AS215599: 16 pkts / 0.02 MB to UDP 8443 across 13 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇮🇩 David Koswari	2026-07-24 05:15:00 (3 months ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇮🇹 VHosting	2025-12-11 23:08:08 (10 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇩 hermawan	2025-10-19 03:42:18 (1 year ago)	[Sun Oct 19 10:41:20.421498 2025] [security2:error] [pid 1152923:tid 140210485569216] [client 157.10.8.218:53338] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/et ... show more [Sun Oct 19 10:41:20.421498 2025] [security2:error] [pid 1152923:tid 140210485569216] [client 157.10.8.218:53338] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: option= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php?option=com_content&view=article&id=84&catid=112&Itemid=576 HTTP/2.0 Request URI RAW = /index.php?option=com_content&view=article&id=84&catid=112&Itemid=576 Request Basename = index.php"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aPRd4DBo917G7WCYvrz40wACjwQ"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1152928] ... show less	Hacking Web App Attack
🇫🇷 dynamix	2025-09-28 09:03:40 (1 year ago)	Multiple WAF Violations	Web App Attack
🇵🇹 rnl	2025-05-26 05:35:25 (1 year ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 213.32.122.82

🇺🇸 205.210.31.36

🇳🇱 195.178.110.30

🇬🇧 193.32.209.231

🇸🇦 188.53.214.128

🇺🇸 172.208.51.148

🇺🇸 165.154.173.148

🇫🇮 147.185.133.176

🇳🇱 77.239.124.147

🇩🇪 69.5.169.76

🇺🇸 45.156.129.105

🇨🇳 27.39.128.170

🇷🇴 193.46.255.86

🇺🇸 172.236.228.111

🇧🇷 168.196.55.9

🇺🇸 97.87.104.63

🇰🇿 89.218.151.18

🇷🇺 80.251.156.20

🇳🇱 77.239.124.146

🇺🇸 72.182.28.147