AbuseIPDB » 158.140.208.9
158.140.208.9
This IP was reported 7 times. Confidence of
Abuse
is 15% : ?
ISP
Brander Group Inc
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
brandergroup.net
Country
🇳🇱
Netherlands
City
Amsterdam, North Holland
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 158.140.208.9 :
This IP address has been reported a total of
7
times from
2 distinct
sources.
158.140.208.9 was first reported on
June 23rd 2026 , and the most recent report was
6 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-24 06:12:11
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 02:12:06.682128 2026] [security2:error] [pid 28639:tid 28639] [client 158.140.208.9:12856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "machineryenchantress.com"] [uri "/sftp-config.json"] [unique_id "ajt1Ng02um9humGohV5hKwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 05:56:10
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 01:56:05.437214 2026] [security2:error] [pid 29895:tid 29895] [client 158.140.208.9:59446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/sftp-config.json"] [unique_id "ajtxdQJnVyxsrkngRul9vgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 21:52:13
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 17:52:07.570208 2026] [security2:error] [pid 18181:tid 18181] [client 158.140.208.9:2820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lynetteharris.net"] [uri "/sftp-config.json"] [unique_id "ajsAB0GrZFLQGK8LL_hokwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 17:12:47
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 13:12:42.712656 2026] [security2:error] [pid 25207:tid 25207] [client 158.140.208.9:33134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luxurymicrobikinis.com"] [uri "/sftp-config.json"] [unique_id "ajq-ivZ6bpPbF5mPcrO7ZgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Reinhard
2026-06-23 14:11:40
(22 hours ago)
Parameter or path manipulation, hacking. /.vscode/sftp.json
Hacking
🇺🇸
TPI-Abuse
2026-06-23 13:55:51
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 09:55:45.315532 2026] [security2:error] [pid 29425:tid 29425] [client 158.140.208.9:45078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lusocleaningservice.com"] [uri "/sftp-config.json"] [unique_id "ajqQYWCRqsYPI_JYXDnDxAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 12:19:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 158.140.208.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 08:19:49.782563 2026] [security2:error] [pid 1817:tid 1817] [client 158.140.208.9:58502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lunchtimers.org"] [uri "/sftp-config.json"] [unique_id "ajp55Qf-JtimNxCFhaWLQwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: