JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.140.180.27

158.140.180.27 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 44%: ?

44%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Hostname(s)	host-158.140.180-27.myrepublic.co.id
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	South Tangerang, Banten

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.140.180.27

Whois 158.140.180.27

IP Abuse Reports for 158.140.180.27:

This IP address has been reported a total of 36 times from 31 distinct sources. 158.140.180.27 was first reported on March 29th 2021, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 sthoyer.de	2026-07-02 06:41:00 (12 hours ago)	Jul 2 08:40:59 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 2 08:40:59 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.140.180.27 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=8818 DF PROTO=TCP SPT=1294 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-07-02 03:50:51 (15 hours ago)	Jul 2 05:50:51 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 2 05:50:51 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=158.140.180.27 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=32045 DF PROTO=TCP SPT=34825 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Vegascosmetics	2026-06-14 11:04:42 (2 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇷🇸 Scan	2026-05-24 00:05:39 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 amit177	2026-05-23 20:20:06 (1 month ago)		Brute-Force SSH
🇵🇱 zmb.pl	2026-05-23 17:36:10 (1 month ago)	May 23 19:35:42 srv3 sshd\[29807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 e ... show more May 23 19:35:42 srv3 sshd\[29807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.140.180.27 user=root May 23 19:35:43 srv3 sshd\[29807\]: Failed password for root from 158.140.180.27 port 36755 ssh2 May 23 19:35:46 srv3 sshd\[29809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.140.180.27 user=root May 23 19:35:48 srv3 sshd\[29809\]: Failed password for root from 158.140.180.27 port 37735 ssh2 May 23 19:36:08 srv3 sshd\[29827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.140.180.27 user=root ... show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-05-23 16:23:31 (1 month ago)	Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: ... show more Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: MEDIUM. Aaran.cloud show less	Port Scan Brute-Force
🇬🇧 PeravixGroup	2026-05-23 12:20:31 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇨🇿 lp	2026-05-19 07:48:57 (1 month ago)	SSH Brute force: 1 attempts were recorded from 158.140.180.27 2026-05-19T09:13:38+02:00 Connection c ... show more SSH Brute force: 1 attempts were recorded from 158.140.180.27 2026-05-19T09:13:38+02:00 Connection closed by authenticating user root 158.140.180.27 port 21085 [preauth] show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-18 00:01:07 (1 month ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/158.140.180.27	SSH
🇵🇱 Chris314	2026-05-17 10:08:30 (1 month ago)	Successful SSH login observed on Cowrie honeypot VPS-POLOGNE-01. Username=root.	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-16 23:59:28 (1 month ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/158.140.180.27	SSH
🇬🇧 PeravixGroup	2026-05-16 17:38:52 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
Anonymous	2026-05-16 10:06:53 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇩🇪 zUnlegit	2026-05-16 03:43:24 (1 month ago)	2026-05-16T05:42:17.612019+02:00 root260 sshd[3542396]: Failed password for root from 158.140.180.27 ... show more 2026-05-16T05:42:17.612019+02:00 root260 sshd[3542396]: Failed password for root from 158.140.180.27 port 54550 ssh2 2026-05-16T05:42:47.187131+02:00 root260 sshd[3551022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.140.180.27 user=root 2026-05-16T05:42:48.654027+02:00 root260 sshd[3551022]: Failed password for root from 158.140.180.27 port 5800 ssh2 2026-05-16T05:43:22.491814+02:00 root260 sshd[3561784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.140.180.27 user=root 2026-05-16T05:43:24.095017+02:00 root260 sshd[3561784]: Failed password for root from 158.140.180.27 port 21424 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 80.102.218.207

🇺🇸 73.57.80.193

🇮🇪 54.229.62.228

🇵🇾 45.191.91.81

🇬🇧 31.14.254.20

🇨🇳 1.194.161.177

🇺🇸 172.104.5.239

🇳🇪 74.244.13.79

🇳🇱 50.7.233.211

🇺🇸 17.241.75.59

🇨🇳 14.103.127.242

🇧🇷 205.210.31.226

🇺🇸 155.2.212.14

🇩🇪 152.53.185.81

🇦🇪 86.97.243.182

🇬🇭 41.204.63.118

🇸🇬 4.193.191.49

🇧🇷 205.210.31.176

🇨🇳 171.83.27.174

🇭🇰 101.36.127.85