JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.140.182.32

158.140.182.32 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 39%: ?

39%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Pasarkemis, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.140.182.32

Whois 158.140.182.32

IP Abuse Reports for 158.140.182.32:

This IP address has been reported a total of 147 times from 27 distinct sources. 158.140.182.32 was first reported on October 15th 2021, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 15:14:41 (8 hours ago)	(mod_security) mod_security (id:225170) triggered by 158.140.182.32 (host-158.140.182-32.myrepublic. ... show more (mod_security) mod_security (id:225170) triggered by 158.140.182.32 (host-158.140.182-32.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:14:35.714243 2026] [security2:error] [pid 3873:tid 3873] [client 158.140.182.32:20410] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tourissue.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tourissue.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atooWyfjVbmS23QPedDTCwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 16:15:07 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 158.140.182.32 (host-158.140.182-32.myrepublic. ... show more (mod_security) mod_security (id:225170) triggered by 158.140.182.32 (host-158.140.182-32.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 12:14:59.438714 2026] [security2:error] [pid 11681:tid 11681] [client 158.140.182.32:19981] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|goodfrequencies.circleofsound.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goodfrequencies.circleofsound.org"] [uri "/wp-json/wp/v2/users"] [unique_id "atjlAyxnnMdEizTVzV4s0QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-21 10:43:52 (1 day ago)	Web exploit attempt \| method: GET \| path: / \| query: author=1&_fields=slug, author=2&_fields=slug, a ... show more Web exploit attempt \| method: GET \| path: / \| query: author=1&_fields=slug, author=2&_fields=slug, author=3&_fields=slug \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36 \| 2026-10-21 10:43 UTC show less	Hacking Web App Attack
🇫🇷 LRob	2026-10-18 05:51:35 (4 days ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-10-18 04:20:55 (4 days ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-10-17 00:30:41 (5 days ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /wishlist/index/add/product/11132/form_key/5pvlMnmuK80iNd8I/ \| UA: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 6.1; Trident/4.1) \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇪🇸 librebit	2026-09-25 16:52:29 (3 weeks ago)	Brute force	Brute-Force
🇺🇸 鬼影233	2026-09-24 04:57:43 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 vtchost.com	2026-09-24 01:46:28 (4 weeks ago)	requested HTTP honeypot page - ignored robots.txt - bad crawler ...	Bad Web Bot Exploited Host
🇮🇩 sockominfo	2026-09-14 16:01:01 (1 month ago)	Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). Conf ... show more Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 86%. MITRE ATT&CK: T1210 (Exploitation of Remote Services). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 鬼影233	2026-09-07 02:00:24 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 ipblock.com	2026-09-03 18:10:00 (1 month ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-09-02 16:00:28 (1 month ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-21 21:00:55 (2 months ago)	Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: ... show more Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: 6.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-08-18 23:20:35 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.4

🇰🇷 1.238.106.229

🇺🇸 209.250.4.112

🇩🇪 196.251.121.113

🇺🇸 194.33.45.73

🇬🇧 193.163.125.90

🇻🇳 171.231.182.40

🇵🇭 165.154.100.56

🇮🇪 108.130.21.190

🇬🇧 81.19.219.210

🇳🇱 81.19.216.88

🇳🇱 77.91.71.25

🇺🇸 45.45.237.69

🇺🇸 40.124.187.55

🇺🇸 40.83.182.122

🇧🇪 34.156.121.46

🇺🇸 24.149.98.78

🇺🇸 20.106.60.19

🇸🇬 8.219.164.15

🇫🇷 5.135.131.86