JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.140.210.14

158.140.210.14 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 45%: ?

45%

ISP	Brander Group Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	brandergroup.net
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.140.210.14

Whois 158.140.210.14

IP Abuse Reports for 158.140.210.14:

This IP address has been reported a total of 70 times from 24 distinct sources. 158.140.210.14 was first reported on March 18th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-11 18:18:44 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 14:18:39.236370 2026] [security2:error] [pid 14569:tid 14569] [client 158.140.210.14:32468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evomedicals.com"] [uri "/sftp-config.json"] [unique_id "air7_yrSPo16TCZKMBA5fQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 12:12:05 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 08:12:00.512779 2026] [security2:error] [pid 20638:tid 20638] [client 158.140.210.14:18762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evelowerealtor.com"] [uri "/sftp-config.json"] [unique_id "aiqmEDKxQBkx_oeDsofL7wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 11:51:36 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 07:51:33.313290 2026] [security2:error] [pid 24685:tid 24685] [client 158.140.210.14:24252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextlevelcharge.com"] [uri "/sftp-config.json"] [unique_id "aiqhRZEaVFevb2I6u5sj6gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 04:11:04 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 00:10:55.646936 2026] [security2:error] [pid 20478:tid 20502] [client 158.140.210.14:18328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ethicmark.org"] [uri "/sftp-config.json"] [unique_id "aio1T1VDnW9RxKAS0QZFzgAAANU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 17:34:33 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:33:49.194383 2026] [security2:error] [pid 9320:tid 9337] [client 158.140.210.14:18560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aaenroll.com"] [uri "/sftp-config.json"] [unique_id "aiWrfS--OPI8h_GKGhWvjwAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Halux	2026-06-07 14:24:22 (1 week ago)	158.140.210.14 Web Application Firewall multiple violations	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-05 09:00:13 (1 week ago)	(y4) Failed scan -byebye- from 158.140.210.14 (-): (CF_ENABLE)	Hacking
🇺🇸 1cyb3rpunk	2026-06-04 03:07:45 (1 week ago)	Honeypot trap [path_not_found_probe] on sectrace.org — path: /.vscode/sftp.json stage: recon. Automa ... show more Honeypot trap [path_not_found_probe] on sectrace.org — path: /.vscode/sftp.json stage: recon. Automated scanner/attacker activity. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 sverson	2026-05-28 06:07:36 (2 weeks ago)	Mutliple unauthorized attempts to access web resources	Web App Attack
🇩🇪 Vegascosmetics	2026-05-27 21:54:59 (2 weeks ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-26 16:35:15 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 12:34:58.402876 2026] [security2:error] [pid 3458:tid 3458] [client 158.140.210.14:26264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "900west.com"] [uri "/sftp-config.json"] [unique_id "ahXLsrb96d5hivaFfO-lmAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-16 08:50:48 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 04:50:41.316834 2026] [security2:error] [pid 28027:tid 28027] [client 158.140.210.14:32988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1826palmetto.com"] [uri "/sftp-config.json"] [unique_id "aggv4Qokp0Lq81vP_XdipAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 21:15:24 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 17:15:17.424338 2026] [security2:error] [pid 11010:tid 11010] [client 158.140.210.14:34480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jussetcotradinglimited.co"] [uri "/sftp-config.json"] [unique_id "ageM5Qto8xg1ZRDJ8GLoZgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 07:06:27 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 158.140.210.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 03:06:19.351607 2026] [security2:error] [pid 9979:tid 9979] [client 158.140.210.14:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail-pmg.com"] [uri "/sftp-config.json"] [unique_id "agV0a1ZT64NgKZrEl9jy2QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 akac	2026-05-13 20:01:18 (1 month ago)	Web vulnerability scanning: HTTP/1.1 GET /sftp-config.json	Hacking Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 144.2.91.96

🇺🇸 65.49.1.87

🇳🇱 45.148.10.152

🇳🇱 34.6.250.244

🇰🇷 222.239.251.12

🇩🇪 213.209.159.56

🇻🇳 171.231.190.66

🇺🇸 144.172.97.163

🇨🇳 124.222.58.119

🇺🇸 66.132.224.25

🇺🇸 65.49.1.197

🇨🇳 111.162.150.107

🇫🇷 75.119.140.204

🇩🇪 69.5.169.44

🇨🇦 20.104.248.142

🇺🇸 2602:fa59:10:acd::1

🇰🇷 221.161.235.168

🇮🇳 182.78.64.150

🇵🇱 178.219.101.142

🇺🇸 172.202.113.141