JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.140.170.37

158.140.170.37 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 33%: ?

33%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Semarang, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.140.170.37

Whois 158.140.170.37

IP Abuse Reports for 158.140.170.37:

This IP address has been reported a total of 60 times from 34 distinct sources. 158.140.170.37 was first reported on September 17th 2022, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Axel	2026-10-27 07:53:12 (7 hours ago)	Blocked by UFW on BGPGB [1433/tcp] \| SPT: 3863 \| TTL: 110 \| LEN: 52 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on BGPGB [1433/tcp] \| SPT: 3863 \| TTL: 110 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇪 wiredalter	2026-10-27 06:12:32 (9 hours ago)	Blocked by UFW on vhVPS [3306/tcp] Source Port: 54928 TTL: 111 Packet Length: 52 TOS: 0x08 Analyzed ... show more Blocked by UFW on vhVPS [3306/tcp] Source Port: 54928 TTL: 111 Packet Length: 52 TOS: 0x08 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-10-24 06:51:17 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 158.140.170.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 158.140.170.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 02:50:59.826259 2026] [security2:error] [pid 16874:tid 16874] [client 158.140.170.37:36867] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|onlinesuretybonds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "onlinesuretybonds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atxVUzA25whksgxaoVvEYQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2026-10-17 06:29:24 (1 week ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇨🇿 lp	2026-09-26 19:50:20 (1 month ago)	Email account brute force: 1 attempts were recorded from 158.140.170.37 2026-09-26T20:10:44+02:00 wa ... show more Email account brute force: 1 attempts were recorded from 158.140.170.37 2026-09-26T20:10:44+02:00 warning: unknown[158.140.170.37]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇮🇩 bps-statistics	2026-08-25 17:02:42 (2 months ago)	Frequent Web Application Attacks	Web App Attack
🇺🇸 kosada.com	2026-08-25 09:58:12 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 bps-statistics	2026-08-21 07:53:06 (2 months ago)	Malicious Access	Brute-Force
🇫🇷 Zkillu	2026-08-19 22:11:53 (2 months ago)	UDP flood (DDoS) vs AS215599: 381 pkts / 0.54 MB to UDP 80/8443 across 147 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 381 pkts / 0.54 MB to UDP 80/8443 across 147 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 HaloAgencySAS	2026-08-19 22:11:53 (2 months ago)	UDP flood (DDoS) vs AS215599: 381 pkts / 0.54 MB to UDP 80/8443 across 147 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 381 pkts / 0.54 MB to UDP 80/8443 across 147 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-14 02:04:48 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇩 bps-statistics	2026-08-07 14:19:47 (2 months ago)	Malicious Access	Brute-Force
🇳🇱 DrLex0	2026-08-06 11:44:57 (2 months ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 158.140.170.37 443 - [06/Aug/2026:11:44:57 +0000] "GET [redacted] HTTP/1.1" 503 6174 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" show less	Bad Web Bot Exploited Host
🇮🇩 bps-statistics	2026-08-01 01:09:53 (2 months ago)	Malicious Access	Brute-Force
🇮🇩 bps-statistics	2026-07-29 22:07:09 (2 months ago)	Malicious Access	Brute-Force

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.175.149.58

🇺🇸 192.253.209.62

🇮🇱 185.60.170.34

🇮🇳 182.78.87.2

🇨🇭 179.43.153.18

🇺🇸 172.98.14.149

🇩🇪 84.132.198.137

🇩🇪 57.129.74.123

🇺🇸 43.153.26.165

🇺🇸 172.180.64.136

🇵🇰 119.152.247.196

🇲🇾 103.71.176.25

🇺🇸 100.29.192.42

🇨🇿 89.24.97.41

🇮🇳 66.116.252.157

🇻🇳 42.115.37.209

🇫🇷 5.39.57.91

🇰🇷 218.150.212.61

🇸🇬 193.37.32.90

🇧🇷 192.140.20.111