AbuseIPDB » 158.222.117.99
158.222.117.99
This IP was reported 8 times. Confidence of
Abuse
is 18% : ?
ISP
ColoUp
Usage Type
Data Center/Web Hosting/Transit
ASN
AS19084
Hostname(s)
host.sindad.cloud
Domain Name
coloup.com
Country
🇺🇸
United States of America
City
Buffalo, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 158.222.117.99 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
158.222.117.99 was first reported on
January 21st 2024 , and the most recent report was
5 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇪
AutosOnShow
2026-08-24 14:10:07
(5 hours ago)
blocked for webapp attack | path requested: /struts2-rest-showcase/orders/3 | seen at 2026-08-24 14: ...
show more
blocked for webapp attack | path requested: /struts2-rest-showcase/orders/3 | seen at 2026-08-24 14:09:44.329 |
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-12 13:09:45
(1 week ago)
(mod_security) mod_security (id:221260) triggered by 158.222.117.99 (host.sindad.cloud): 1 in the la ...
show more
(mod_security) mod_security (id:221260) triggered by 158.222.117.99 (host.sindad.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 09:09:41.130041 2026] [security2:error] [pid 770543:tid 770543] [client 158.222.117.99:60580] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||ftp.anenchantingevening.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.anenchantingevening.com"] [uri "/cgi-bin/test.cgi"] [unique_id "anxwlZZKUbPCk2GV8hYtyAAAABM"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-10 15:20:07
(1 month ago)
| Shellshock attack attempt
Web App Attack
Hacking
SQL Injection
2026-05-15 15:50:29
(3 months ago)
Automated report from internal traffic review tool. Suspicious bot-like behavior observed.
Bad Web Bot
2024-10-08 21:34:08
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇫🇷
Sklurk
2024-10-08 09:58:35
(1 year ago)
Web App Attack
Web App Attack
2024-09-16 00:36:55
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇮🇩
hermawan
2024-01-21 00:02:00
(2 years ago)
[Sun Jan 21 06:57:35.545509 2024] [security2:error] [pid 53172:tid 139640239556160] [client 158.222. ...
show more
[Sun Jan 21 06:57:35.545509 2024] [security2:error] [pid 53172:tid 139640239556160] [client 158.222.117.99:11435] [client 158.222.117.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "ru" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "12"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: ru found within REQUEST_HEADERS:Accept-Language: en-US,en;q=0.9,ru-RU;q=0.8,ru;q=0.7 request_line = GET /index.php/prakiraan-musim/4158-prakiraan-musim-hujan/prakiraan-puncak-musim-hujan/prakiraan-puncak-musim-hujan-2022-2023 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-musim/4158-prakiraan-musim-hujan/prakiraan-puncak-musim-hujan/prakiraan-puncak-musim-hujan-2022-2023"] [unique_id "Zaxd721J6yJiwAThqQly7QAAAlg"] [staklim-malang.info] [staklim-malang.info] top=[53247] [mxtQXJF+lEw] [Zaxd721J6yJiwAThqQly7Q
...
show less
Hacking
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: