JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 110.138.88.12

110.138.88.12 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 110.138.88.12

Whois 110.138.88.12

IP Abuse Reports for 110.138.88.12:

This IP address has been reported a total of 12 times from 6 distinct sources. 110.138.88.12 was first reported on May 17th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 RemyLebeau	2026-08-26 03:31:22 (6 days ago)		Web App Attack Port Scan
🇮🇩 hermawan	2025-07-26 05:53:41 (1 year ago)	[Sat Jul 26 12:52:55.105290 2025] [security2:error] [pid 506353:tid 140077514606272] [client 110.138 ... show more [Sat Jul 26 12:52:55.105290 2025] [security2:error] [pid 506353:tid 140077514606272] [client 110.138.88.12:54503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".vscode" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: .vscode found within REQUEST_FILENAME: /.vscode/sftp.json request_line = GET /.vscode/sftp.json HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/.vscode/sftp.json"] [unique_id "aIRtN3nU97t-PxN-9ecpJwAAAJA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[506433] [PCZ7qw5uv+w] [aIRtN3nU97t-PxN-9ecpJwAAAJA] keep_alive=[0] [2025-07-26 12:52:55.105297] [R:aIRtN3nU97t-PxN-9ecpJwAAAJA] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 Edg/105.0.1343.50' Host:'staklim-jatim.bmkg.go.id' Accept-Encod ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-25 15:11:50 (1 year ago)	[Fri Jul 25 21:59:22.427040 2025] [security2:error] [pid 433453:tid 140088998614720] [client 110.138 ... show more [Fri Jul 25 21:59:22.427040 2025] [security2:error] [pid 433453:tid 140088998614720] [client 110.138.88.12:63526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "337"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: utf-8 request_line = GET /logout HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/logout"] [unique_id "aIObygXyY5G2UrcOlgoJDgAAAIM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[433483] [KOXrL0LVJjU] [aIObygXyY5G2UrcOlgoJDgAAAIM] keep_alive=[0] [2025-07-25 21:59:22.427044] [R:aIObygXyY5G2UrcOlgoJDgAAAIM] UA:'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-24 15:33:14 (1 year ago)	[Thu Jul 24 22:32:44.461373 2025] [security2:error] [pid 17684:tid 139780037797568] [client 110.138. ... show more [Thu Jul 24 22:32:44.461373 2025] [security2:error] [pid 17684:tid 139780037797568] [client 110.138.88.12:65046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: .env found within REQUEST_FILENAME: /.env request_line = GET /.env HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/.env"] [unique_id "aIJSHNJRSgDLnsvmqRqFVwAAANg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[17735] [jkJqiW4pz9c] [aIJSHNJRSgDLnsvmqRqFVwAAANg] keep_alive=[0] [2025-07-24 22:32:44.461377] [R:aIJSHNJRSgDLnsvmqRqFVwAAANg] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-23 15:30:37 (1 year ago)	[Wed Jul 23 22:30:06.508491 2025] [security2:error] [pid 41279:tid 140493346305728] [client 110.138. ... show more [Wed Jul 23 22:30:06.508491 2025] [security2:error] [pid 41279:tid 140493346305728] [client 110.138.88.12:63877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".vscode" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: .vscode found within REQUEST_FILENAME: /.vscode/sftp.json request_line = GET /.vscode/sftp.json HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/.vscode/sftp.json"] [unique_id "aID__gQVvw9tq_hf6UL1wwAAARg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[41330] [rOEoYlpin/c] [aID__gQVvw9tq_hf6UL1wwAAARg] keep_alive=[0] [2025-07-23 22:30:06.508496] [R:aID__gQVvw9tq_hf6UL1wwAAARg] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'g ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-23 12:09:59 (1 year ago)	[Wed Jul 23 19:08:13.379875 2025] [security2:error] [pid 149342:tid 139653613090496] [client 110.138 ... show more [Wed Jul 23 19:08:13.379875 2025] [security2:error] [pid 149342:tid 139653613090496] [client 110.138.88.12:55699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".vscode" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: .vscode found within REQUEST_FILENAME: /.vscode/sftp.json request_line = GET /.vscode/sftp.json HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/.vscode/sftp.json"] [unique_id "aIDQrVb0YefeDtiEmlQ0pgAAAZU"], referer http://karangploso.jatim.bmkg.go.id/.vscode/sftp.json [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[149392] [PowpkJez7Bw] [aIDQrVb0YefeDtiEmlQ0pgAAAZU] keep_alive=[0] [2025-07-23 19:08:13.379879] [R:aIDQrVb0YefeDtiEmlQ0pgAAAZU] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/5 ... show less	Hacking Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-03-06 07:08:19 (1 year ago)	Port probe to tcp/445 (smb) [srv127]	Port Scan Hacking
🇳🇱 Study Bitcoin 🤗	2025-03-06 04:46:56 (1 year ago)	Port probe to tcp/445 (smb) [srv135]	Port Scan Hacking
Anonymous	2024-12-17 06:21:10 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇳🇱 Study Bitcoin 🤗	2024-12-17 04:12:21 (1 year ago)	Port probe to tcp/445 (smb) [srv124]	Port Scan Hacking
🇬🇧 ASPAN	2023-08-28 05:13:20 (3 years ago)	Unsolicited connection attempt(s), port:445.	Port Scan
🇮🇪 RoboSOC	2021-05-17 01:31:18 (5 years ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 206.42.16.163

🇳🇿 161.29.249.158

🇫🇷 157.143.132.32

🇹🇱 150.228.169.68

🇪🇸 104.22.7.152

🇮🇳 103.159.192.141

🇺🇸 45.194.67.18

🇷🇺 213.33.182.183

🇵🇰 210.56.12.205

🇧🇪 198.235.24.177

🇺🇸 195.184.76.63

🇬🇧 193.32.209.252

🇧🇷 189.85.85.173

🇰🇪 105.29.172.40

🇮🇳 103.149.158.169

🇳🇱 89.248.172.14

🇧🇬 78.128.114.46

🇺🇸 66.240.223.214

🇺🇸 64.62.156.75

🇨🇳 47.113.222.96