JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.140.170.66

158.140.170.66 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 28%: ?

28%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Hostname(s)	host-158.140.170-66.myrepublic.co.id
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Ungaran, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.140.170.66

Whois 158.140.170.66

IP Abuse Reports for 158.140.170.66:

This IP address has been reported a total of 45 times from 24 distinct sources. 158.140.170.66 was first reported on November 30th 2020, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-14 14:59:58 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-04 22:26:28 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-07-03 09:55:12 (1 week ago)	07/03/2026-16:55:08.517833 [Drop] [] [1:2028521:2] Suricata ET Hash - Used by many programs/Slac ... show more 07/03/2026-16:55:08.517833 [Drop] [] [1:2028521:2] Suricata ET Hash - Used by many programs/Slack/Postman/Spotify/Google Chrome [**] [Classification: Unknown Traffic] [Priority: 3] {TCP} 158.140.170.66:56450 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇩🇪 botreporter	2026-06-24 00:13:53 (3 weeks ago)	botnet ignoring robots.txt	Bad Web Bot
🇦🇺 MAGIC	2026-06-07 01:39:20 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-06-02 07:10:21 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-01 06:19:48 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-05-29 09:39:42 (1 month ago)	Web App Attack	Web App Attack
🇮🇩 hermawan	2026-05-27 06:34:12 (1 month ago)	[Wed May 27 13:34:10.961397 2026] [security2:error] [pid 628050:tid 139875663865536] [client 158.140 ... show more [Wed May 27 13:34:10.961397 2026] [security2:error] [pid 628050:tid 139875663865536] [client 158.140.170.66:60692] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0 Request URI RAW = /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur Request Basename = probabilistik-curah-hujan-provinsi-jawa-timur"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "para ... show less	Email Spam Hacking
🇦🇺 Block Rockin' Beats	2026-05-18 06:13:04 (1 month ago)	Attempted connection to TCP port 445 (SMB)	Port Scan
🇮🇩 hermawan	2026-05-09 23:54:19 (2 months ago)	05/10/2026-03:49:28.239310 [Drop] [] [1:2100001468:0] Suricata match TLS JA4 scan Uniq Zeek no 14 ... show more 05/10/2026-03:49:28.239310 [Drop] [] [1:2100001468:0] Suricata match TLS JA4 scan Uniq Zeek no 1468 with hash_t13d1714h2_5b57614c22b0_3dd24b5ebec4 [**] [Classification: (null)] [Priority: 3] {TCP} 158.140.170.66:4905 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇩🇪 EGP Abuse Dept	2026-05-01 01:03:33 (2 months ago)	Scraping webshop URLs (www.stroomaanboord.nl), likely botnet drone	Bad Web Bot Exploited Host
🇮🇩 hermawan	2026-04-08 08:01:31 (3 months ago)	[Wed Apr 08 15:01:31.378216 2026] [security2:error] [pid 121531:tid 140505870485184] [client 158.140 ... show more [Wed Apr 08 15:01:31.378216 2026] [security2:error] [pid 121531:tid 140505870485184] [client 158.140.170.66:51678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba"] [unique_id "adYLW_WgkFBYYlpdGkvQSQAAAFM"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[121671] [DmXDTm4Tu3g] [adYLW_WgkFBYYlpdGkvQ ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-04-01 14:54:00 (3 months ago)	04/01/2026-21:53:58.120679 [Drop] [] [1:2100000408:0] Suricata match TLS JA4 scan Uniq Zeek no 40 ... show more 04/01/2026-21:53:58.120679 [Drop] [] [1:2100000408:0] Suricata match TLS JA4 scan Uniq Zeek no 408 with hash_t13d1513h2_8daaf6152771_eca864cca44a [**] [Classification: (null)] [Priority: 3] {TCP} 158.140.170.66:43202 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇳🇱 maxxsense	2026-03-28 00:44:24 (3 months ago)	158.140.170.66 (ID/Indonesia/host-158.140.170-66.myrepublic.co.id), 12 distributed imapd attacks on ... show more 158.140.170.66 (ID/Indonesia/host-158.140.170-66.myrepublic.co.id), 12 distributed imapd attacks on account [redacted] show less	Brute-Force

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.236.96.130

🇺🇸 162.216.149.33

🇸🇬 152.32.217.179

🇱🇹 62.60.130.219

🇺🇸 44.253.249.164

🇹🇬 196.170.67.71

🇮🇱 195.133.158.175

🇫🇷 195.25.75.65

🇩🇪 193.124.20.231

🇺🇸 172.238.171.10

🇨🇳 171.36.7.125

🇺🇸 162.216.150.179

🇭🇰 152.32.189.59

🇦🇫 149.54.24.122

🇨🇳 113.215.216.179

🇹🇭 110.164.193.196

🇺🇸 104.207.41.4

🇮🇳 103.105.227.210

🇸🇬 103.13.206.152

🇧🇪 34.22.187.116