JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.248.65.27

158.248.65.27 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 13%: ?

13%

ISP	Altibox AS
Usage Type	Fixed Line ISP
ASN	AS29695
Hostname(s)	27.158-248-65.customer.lyse.net
Domain Name	altibox.no
Country	🇳🇴 Norway
City	Skui, Akershus

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.248.65.27

Whois 158.248.65.27

IP Abuse Reports for 158.248.65.27:

This IP address has been reported a total of 4 times from 3 distinct sources. 158.248.65.27 was first reported on January 7th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-07-03 14:24:37 (2 hours ago)	[Fri Jul 03 21:24:36.569878 2026] [security2:error] [pid 427514:tid 140643643889344] [client 158.248 ... show more [Fri Jul 03 21:24:36.569878 2026] [security2:error] [pid 427514:tid 140643643889344] [client 158.248.65.27:46410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-tahunan"] [unique_id "akfGJEBwB0JC_uw5SCOSgQAAGA4"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[427563] [7+UkrzW4e0c] [akfGJEBwB0JC_uw5SCOSgQAAGA4] keep_alive=[1] [2026-07-03 21:24:36.569887] [R:akfGJEBwB0JC_uw5SCOSgQAAGA4] UA:'Mozilla/5.0 (Linux; Android 11; Pixel 7 Build/QP1A ... show less	Email Spam Hacking
🇮🇹 A000Z	2026-06-17 12:23:13 (2 weeks ago)	Fail2Ban: 158.248.65.27 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 158.248.65.27 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.3346.1338 Mobile Safari/537.36 show less	Bad Web Bot
🇸🇬 securejdprop	2026-02-16 01:49:05 (4 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨‍💻). Ip 158.248.65.27 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-02-16 01:48:52.709737003 +0000 UTC show less	Hacking Web App Attack
🇮🇩 securejdprop	2026-01-07 07:56:20 (5 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 sc ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨‍💻). Ip 158.248.65.27 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-01-07 07:56:20.110126428 +0000 UTC show less	Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.172.88.206

🇺🇸 207.90.244.19

🇦🇺 91.124.88.12

🇺🇸 57.132.175.132

🇨🇴 191.95.32.232

🇺🇸 20.102.98.53

🇹🇼 198.235.24.28

🇲🇦 196.206.32.155

🇮🇩 182.11.154.117

🇩🇪 141.11.107.166

🇨🇳 123.178.210.164

🇮🇳 20.204.136.58

🇬🇷 2.84.15.246

🇹🇼 198.235.24.17

🇫🇷 157.173.101.89

🇦🇹 104.23.162.45

🇲🇲 103.135.217.69

🇺🇸 66.132.186.127

🇭🇰 47.239.195.232

🇱🇹 45.227.254.170