This IP address has been reported a total of
5
times from
5 distinct
sources.
158.222.127.8 was first reported on
October 29th 2024 , and the most recent report was
6 hours ago Indonesia
with 1
report.
The most common categories in these recent reports were:
Hacking
1
time;
Email Spam
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-11 00:10:38
(6 hours ago)
[Sun Oct 11 07:10:28.699857 2026] [security2:error] [pid 371679:tid 140630281828032] [client 158.222 ...
show more
[Sun Oct 11 07:10:28.699857 2026] [security2:error] [pid 371679:tid 140630281828032] [client 158.222.127.8:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:referer: http://www.baidu.go.id/ request_line = GET /index.php/component/search/?Itemid=435&format=opensearch HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/search/"] [unique_id "asrT9PWW41bhXn-UdFbjCwAAAII"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[371708] [9IWwaMXAxyQ] [asrT9PWW41bhXn-UdFbjCwAAAII] keep_alive=[0] [2026-10-11 07:10:28.699863] [R:asrT9PWW41bhXn-UdFbjCwAAAII] UA:'Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:134.0) Gecko/20210511 Firefox/134.0' Host:'staklim
...
show less
Email Spam
Hacking
🇦🇺
MAGIC
2025-02-26 05:02:38
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2025-01-26 07:06:02
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
🇫🇷
Sklurk
2025-01-18 09:10:18
(1 year ago)
Web App Attack
Web App Attack
🇹🇷
selahattinalan
2024-10-29 11:59:23
(1 year ago)
158.222.127.8 - - [29/Oct/2024:14:59:19 +0300] "GET /robots.txt HTTP/1.1" 200 4217 "-" "Mozilla/5.0 ...
show more
158.222.127.8 - - [29/Oct/2024:14:59:19 +0300] "GET /robots.txt HTTP/1.1" 200 4217 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://docs.perplexity.ai/docs/perplexity-bot)"
show less
Brute-Force
Showing 1 to
5
of 5 reports
