JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.15.40.58

157.15.40.58 was found in our database!

This IP was reported 487 times. Confidence of Abuse is 100%: ?

100%

ISP	PT Trisari Data Indonesia
Usage Type	Fixed Line ISP
ASN	AS139952
Domain Name	trisari.id
Country	🇮🇩 Indonesia
City	Madiun, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.15.40.58

Whois 157.15.40.58

IP Abuse Reports for 157.15.40.58:

This IP address has been reported a total of 487 times from 225 distinct sources. 157.15.40.58 was first reported on November 18th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 spamverify.com	2026-01-15 02:50:25 (4 months ago)	Honeypot Hit: Port Scan (80) HTTP	Web Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2026-01-15 01:55:32 (4 months ago)	157.15.40.58 - - [15/Jan/2026:01:55:32 +0000] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Li ... show more 157.15.40.58 - - [15/Jan/2026:01:55:32 +0000] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-01-15 01:16:44 (4 months ago)	(mod_security) mod_security (id:949110) triggered by 157.15.40.58 (ID/Indonesia/-): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 157.15.40.58 (ID/Indonesia/-): N in the last X secs show less	Web App Attack
🇫🇷 Phenix Info	2026-01-15 01:03:14 (4 months ago)	SmallGuard.fr/Prestashop Forbidden Ext.	Web App Attack
🇬🇧 [email protected]	2026-01-15 00:40:21 (4 months ago)	...	Brute-Force SSH
🇮🇩 Burayot	2026-01-14 22:49:57 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 157.15.40.58 (ID/Indonesia/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 157.15.40.58 (ID/Indonesia/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-01-14 21:05:25 (4 months ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇿🇦 slartybartfast69420blazit	2026-01-14 20:25:44 (4 months ago)	Fail2ban picked up 157.15.40.58 attacking nginx	Web App Attack
🇫🇮 oh.mg	2026-01-14 19:22:53 (4 months ago)	[Wed Jan 14 20:22:51.990350 2026] [security2:error] [pid 1214523:tid 1214528] [client 157.15.40.58:5 ... show more [Wed Jan 14 20:22:51.990350 2026] [security2:error] [pid 1214523:tid 1214528] [client 157.15.40.58:52564] [client 157.15.40.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/.env"] [unique_id "aWftC7uqMbmKhDYgqjCT-gAAAAM"] ... show less	Bad Web Bot Web App Attack
🇫🇮 oh.mg	2026-01-14 17:18:19 (4 months ago)	[Wed Jan 14 18:18:11.847025 2026] [security2:error] [pid 1214523:tid 1214525] [client 157.15.40.58:6 ... show more [Wed Jan 14 18:18:11.847025 2026] [security2:error] [pid 1214523:tid 1214525] [client 157.15.40.58:63561] [client 157.15.40.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/.env"] [unique_id "aWfP07uqMbmKhDYgqjB5xgAAAAA"] [Wed Jan 14 18:18:18.496082 2026] [security2:error] [pid 1218152:tid 1218154] [client 157.15.40.58:64096] [client 157.15.40.58] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anom ... show less	Bad Web Bot Web App Attack
🇩🇪 s@ch@	2026-01-14 16:30:02 (4 months ago)	Banned by Fail2Ban	Brute-Force
🇫🇷 LRob.fr	2026-01-14 13:45:04 (4 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 psauxit	2026-01-14 11:38:46 (4 months ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Hacking Web App Attack
🇩🇪 ValtonTahiri	2026-01-14 10:34:38 (4 months ago)	Honeypot hit: HTTP GET http://[SOME-IP]/.env URL: http://[SOME-IP]/.env Method: GET Status: 200 User ... show more Honeypot hit: HTTP GET http://[SOME-IP]/.env URL: http://[SOME-IP]/.env Method: GET Status: 200 User-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 Host: [SOME-IP] Accept: / Other Headers: accept-encoding: gzip, deflate, connection: keep-alive show less	Hacking Bad Web Bot
🇨🇦 Roper123	2026-01-14 10:28:18 (4 months ago)	Web exploits	Hacking Web App Attack

Showing 421 to 435 of 487 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.180

🇰🇷 203.236.109.13

🇳🇱 195.178.110.30

🇨🇿 193.151.162.106

🇺🇸 151.240.63.107

🇫🇮 147.185.133.45

🇮🇶 138.124.158.150

🇭🇰 138.113.28.120

🇹🇼 111.70.29.156

🇺🇸 74.82.47.62

🇱🇺 64.89.161.56

🇳🇱 2001:67c:e60:c0c:192:42:116:47

🇭🇰 199.45.154.181

🇪🇨 186.101.233.193

🇸🇪 171.25.158.80

🇳🇬 165.154.11.37

🇺🇸 162.144.106.1

🇨🇦 159.203.63.110

🇭🇰 138.113.2.136

🇺🇸 137.184.228.138