This IP address has been reported a total of
7
times from
7 distinct
sources.
104.143.232.221 was first reported on
March 26th 2026 , and the most recent report was
2 hours ago Germany
with 1
report;
France
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
2
times;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-07 10:06:57
(2 hours ago)
Botnet flood DDOS activity
Web App Attack
2026-09-23 11:36:04
(2 weeks ago)
LH-Watcher: FAKE_ID
Bad Web Bot
🇫🇷
bigorre.org
2026-09-03 10:12:29
(1 month ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇮🇩
hermawan
2026-06-01 06:48:53
(4 months ago)
[Mon Jun 01 13:47:34.958191 2026] [security2:error] [pid 1692871:tid 140650000361152] [client 104.14 ...
show more
[Mon Jun 01 13:47:34.958191 2026] [security2:error] [pid 1692871:tid 140650000361152] [client 104.143.232.221:59036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "ah0rBvJf6vwCNxEkGhRQswAAAhA"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1692888] [Gk7HkSuWmNo] [ah0rBvJf6vwCNxEkGhRQswAAAhA] keep_alive=[1] [2026-06-01 13:47:34.958198]
...
show less
Email Spam
Hacking
🇺🇸
MPL
2026-04-26 10:37:28
(5 months ago)
tcp/443 (8 or more attempts)
Port Scan
2026-04-16 23:00:03
(5 months ago)
Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (Linux; Android 8.0; Pixel ...
show more
Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2669.1487 Mob"
show less
Bad Web Bot
🇬🇧
Mendip_Defender
2026-03-26 19:10:38
(6 months ago)
104.143.232.221 - - [26/Mar/2026:18:54:50 +0000] "GET /?s=e0778e1336b80e36fbfe3c519a437911&p=37182&p ...
show more
104.143.232.221 - - [26/Mar/2026:18:54:50 +0000] "GET /?s=e0778e1336b80e36fbfe3c519a437911&p=37182&postcount=2 HTTP/1.0" 301 4284 "https://4x4response.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581"
104.143.232.221 - - [26/Mar/2026:18:54:50 +0000] "GET /?s=e0778e1336b80e36fbfe3c519a437911&p=37182&postcount=2 HTTP/1.0" 404 49220 "https://4x4response.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581"
104.143.232.221 - - [26/Mar/2026:19:10:35 +0000] "GET /?s=8b95a0b79bc2d280a556668d65d7c844&p=9752&postcount=19 HTTP/1.0" 301 4284 "https://www.bing.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581"
...
show less
Hacking
Web App Attack
Showing 1 to
7
of 7 reports
