JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.140.180.8

158.140.180.8 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 12%: ?

12%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Hostname(s)	host-158.140.180-8.myrepublic.co.id
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Pasarkemis, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.140.180.8

Whois 158.140.180.8

IP Abuse Reports for 158.140.180.8:

This IP address has been reported a total of 18 times from 10 distinct sources. 158.140.180.8 was first reported on November 4th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-06 10:48:26 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-16 11:31:43 (4 weeks ago)	(mod_security) mod_security (id:217210) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co ... show more (mod_security) mod_security (id:217210) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co.id): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:31:38.613829 2026] [security2:error] [pid 7217:tid 7230] [client 158.140.180.8:36915] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.aqxsgw.cc\|F\|4"] [data "GET http://www.aqxsgw.cc HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.aqxsgw.cc"] [uri "/"] [unique_id "ajE0GuxmLjFwMDDNb7bKOQAAAEs"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 abuse_IP_reporter	2026-04-26 07:45:07 (2 months ago)	Apr 26 10:20:34 server UFW BLOCK SRC=158.140.180.8 DF PROTO=TCP SPT=12783	Port Scan
🇨🇭 backslash	2026-04-21 16:42:06 (2 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇬🇧 Mendip_Defender	2024-12-02 19:24:47 (1 year ago)	158.140.180.8 - - [02/Dec/2024:18:52:53 +0000] "POST /wp-login.php HTTP/1.0" 200 4453 "-" "Mozilla/5 ... show more 158.140.180.8 - - [02/Dec/2024:18:52:53 +0000] "POST /wp-login.php HTTP/1.0" 200 4453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 158.140.180.8 - - [02/Dec/2024:19:24:56 +0000] "POST /wp-login.php HTTP/1.0" 200 4454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Brute-Force
🇦🇺 MAGIC	2024-12-01 08:00:39 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-11-25 15:01:33 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 amanat institute	2024-11-17 13:44:00 (1 year ago)	ddos web app	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2024-11-06 17:23:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co ... show more (mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 12:23:36.649935 2024] [security2:error] [pid 21241:tid 21241] [client 158.140.180.8:18573] [client 158.140.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buddhas.net"] [uri "/tw/index.html/.env"] [unique_id "ZyumGNcdGHnvGgxoVm9t8gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-06 14:42:22 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co ... show more (mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 09:42:17.254140 2024] [security2:error] [pid 1419:tid 1419] [client 158.140.180.8:34563] [client 158.140.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pharmasalesconnect.com"] [uri "/.env"] [unique_id "ZyuASdACCJrS6swbH3Zl2gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-06 10:53:38 (1 year ago)	Legion Credential Harvester / SMTP Hijacker: /.env	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-11-06 06:09:49 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co ... show more (mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 01:09:44.274525 2024] [security2:error] [pid 13529:tid 13529] [client 158.140.180.8:54633] [client 158.140.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amplifihearing.com"] [uri "/web/.env"] [unique_id "ZysIKAiz6WF5lMDJcr2PHwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-06 05:06:18 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co ... show more (mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 00:06:13.264722 2024] [security2:error] [pid 22533:tid 22533] [client 158.140.180.8:19871] [client 158.140.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.env"] [unique_id "Zyr5RWP3gV1HpaBdDj2GmAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 teamsecure	2024-11-06 04:29:20 (1 year ago)	Banned for trying to access env	Web App Attack
🇺🇸 TPI-Abuse	2024-11-04 11:54:53 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co ... show more (mod_security) mod_security (id:210492) triggered by 158.140.180.8 (host-158.140.180-8.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 04 06:54:50.191725 2024] [security2:error] [pid 27026:tid 27026] [client 158.140.180.8:39562] [client 158.140.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armstrongpartnersllc.com"] [uri "/.env"] [unique_id "Zyi2CgMuCXICUc7_6U8bJAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 181.85.208.33

🇬🇧 162.158.216.112

🇮🇩 103.97.101.25

🇭🇰 223.197.186.7

🇺🇸 205.210.31.54

🇺🇸 205.210.31.6

🇳🇮 186.1.63.114

🇺🇸 162.216.150.209

🇧🇬 162.158.210.120

🇧🇬 162.158.210.74

🇧🇬 162.158.210.36

🇸🇬 162.158.190.109

🇺🇸 143.42.0.20

🇦🇪 109.177.55.96

🇻🇳 103.106.104.187

🇺🇸 76.79.213.70

🇺🇸 66.240.236.119

🇮🇩 36.64.68.99

🇺🇸 2a09:bac5:636c:1846::26b:a4

🇩🇪 2a09:bac5:2f1a:2464::3a0:5f