JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.140.166.95

158.140.166.95 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 43%: ?

43%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Hostname(s)	host-158.140.166-95.myrepublic.co.id
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Semarang, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.140.166.95

Whois 158.140.166.95

IP Abuse Reports for 158.140.166.95:

This IP address has been reported a total of 36 times from 26 distinct sources. 158.140.166.95 was first reported on April 6th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-02 04:05:31 (5 days ago)	Web App Attack	Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 week ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇮🇩 Burayot	2026-05-22 09:28:02 (2 weeks ago)	LF_SMTPAUTH: (smtpauth) Failed SMTP AUTH login from 158.140.166.95 (ID/Indonesia/host-158.140.166-95 ... show more LF_SMTPAUTH: (smtpauth) Failed SMTP AUTH login from 158.140.166.95 (ID/Indonesia/host-158.140.166-95.myrepublic.co.id): 2 in the last 3600 secs show less	Brute-Force
🇫🇷 Sklurk	2026-05-12 11:05:23 (3 weeks ago)	Web App Attack	Web App Attack
🇩🇪 pltcldvlpr	2026-05-10 01:03:57 (4 weeks ago)	Unidentified crawler ignoring robots.txt: 158.140.166.95 - - [09/May/2026:06:55:40 +0200] "GET /prot ... show more Unidentified crawler ignoring robots.txt: 158.140.166.95 - - [09/May/2026:06:55:40 +0200] "GET /protocol?id=st_3_35&paragraph=14172780&seq=1896 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Macintosh; PPC Mac OS X 10_8_4; rv:1.9.3.20) Gecko/6745-02-22 14:34:07.218658 Firefox/8.0" asn=63859 org="PT. Eka Mas Republik" 158.140.166.95 - - [10/May/2026:03:03:55 +0200] "GET /protocol?id=be_16_73&paragraph=1084493&seq=1028 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" asn=63859 org="PT. Eka Mas Republik" ... show less	Bad Web Bot
🇨🇦 Largnet SOC	2026-05-06 13:27:10 (1 month ago)	158.140.166.95 triggered Icarus honeypot on port 445. Check us out on github.	Port Scan Hacking
Anonymous	2026-04-23 20:56:04 (1 month ago)	2026-04-23 22:56:04 ERROR util.AccessViolations - 158.140.166.95 report to fail2ban - action: block ... show more 2026-04-23 22:56:04 ERROR util.AccessViolations - 158.140.166.95 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot
🇺🇸 didyouexpectthat	2026-04-23 07:36:57 (1 month ago)	2026-04-23 0:36:53 392851 [Warning] Access denied for user 'root'@'158.140.166.95' (using password: ... show more 2026-04-23 0:36:53 392851 [Warning] Access denied for user 'root'@'158.140.166.95' (using password: NO) 2026-04-23 0:36:54 392852 [Warning] Access denied for user 'root'@'158.140.166.95' (using password: YES) 2026-04-23 0:36:55 392853 [Warning] Access denied for user 'root'@'158.140.166.95' (using password: YES) 2026-04-23 0:36:55 392854 [Warning] Access denied for user 'root'@'158.140.166.95' (using password: YES) 2026-04-23 0:36:56 392855 [Warning] Access denied for user 'root'@'158.140.166.95' (using password: YES) ... show less	Brute-Force Web App Attack
🇫🇷 security.rdmc.fr	2026-04-22 05:30:53 (1 month ago)	Port Scan Attack proto:TCP src:37618 dst:3306	Port Scan
Anonymous	2026-04-22 05:20:31 (1 month ago)	Port-Scan	Port Scan
Anonymous	2026-04-21 07:27:12 (1 month ago)	2026-04-21 3:27:10 174498668 [Warning] Access denied for user 'root'@'158.140.166.95' (using passwo ... show more 2026-04-21 3:27:10 174498668 [Warning] Access denied for user 'root'@'158.140.166.95' (using password: NO) 2026-04-21 3:27:11 174498672 [Warning] Access denied for user 'root'@'158.140.166.95' (using password: YES) 2026-04-21 3:27:12 174498679 [Warning] Access denied for user 'root'@'158.140.166.95' (using password: YES) ... show less	Brute-Force
🇩🇪 gnb	2026-04-17 07:00:22 (1 month ago)	2026-04-17T08:58:03.157612+02:00 atlas kernel: [42247735.008687] [UFW BLOCK] IN=eth0 OUT= MAC=(redac ... show more 2026-04-17T08:58:03.157612+02:00 atlas kernel: [42247735.008687] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=158.140.166.95 DST=(redacted) LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=10622 DF PROTO=TCP SPT=52694 DPT=3306 WINDOW=8192 RES=0x00 SYN URGP=0 2026-04-17T09:00:19.053318+02:00 atlas kernel: [42247870.904641] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=158.140.166.95 DST=(redacted) LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=24183 DF PROTO=TCP SPT=32873 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 2026-04-17T09:00:22.044982+02:00 atlas kernel: [42247873.896413] [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=158.140.166.95 DST=(redacted) LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=24184 DF PROTO=TCP SPT=32873 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-04-16 08:42:12 (1 month ago)	RdpGuard detected brute-force attempt on MS-SQL	Brute-Force
🇩🇪 KPS	2026-04-16 07:52:27 (1 month ago)	PortscanN	Port Scan
🇺🇸 LotPhantom	2026-04-16 05:21:05 (1 month ago)	2026-04-16T05:21:01.943591+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-04-16T05:21:01.943591+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=158.140.166.95 DST=157.230.217.55 LEN=52 TOS=0x08 PREC=0x20 TTL=106 ID=16300 DF PROTO=TCP SPT=22443 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 2026-04-16T05:21:04.942118+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=158.140.166.95 DST=157.230.217.55 LEN=52 TOS=0x08 PREC=0x20 TTL=106 ID=16301 DF PROTO=TCP SPT=22443 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.244.39.224

🇧🇴 190.181.27.27

🇲🇽 186.96.145.241

🇮🇳 172.71.198.164

🇺🇸 162.216.149.7

🇵🇪 38.250.154.104

🇺🇸 216.218.206.113

🇨🇴 186.146.235.58

🇮🇩 182.10.228.43

🇦🇷 181.0.214.136

🇨🇳 180.188.45.179

🇻🇳 113.188.201.111

🇻🇳 103.77.175.15

🇸🇬 94.231.206.255

🇺🇸 18.221.179.104

🇨🇳 14.29.208.128

🇱🇹 213.197.129.110

🇳🇱 213.177.179.169

🇺🇸 194.62.107.239

🇻🇳 183.91.11.36