JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

110.232.67.42

Neutral Activity

Abuse confidence score ?

0% Low Risk

118 reports

47 reporters · latest 1 year ago

ISP	PT. Media Antar Nusa
Usage Type	Fixed Line ISP
ASN	AS23679
Hostname(s)	mail.makmurgroup.id
Domain Name	nusanet.id
Country	🇮🇩 Indonesia
City	Medan, North Sumatra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

110.232.67.42 has been reported 118 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 110.232.67.42

This IP address has been reported a total of 118 times from 47 distinct sources. 110.232.67.42 was first reported on August 14th 2021, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 tannerschermerhorn.dev	2025-02-10 18:02:02 (1 year ago)	Malicious activity detected from 23679 NUSANET-AS-ID PT. Media Antar Nusa towards host nextcloud.tan ... show more Malicious activity detected from 23679 NUSANET-AS-ID PT. Media Antar Nusa towards host nextcloud.tannerschermerhorn.dev (GET HTTP/1.1) @ 2025-02-10T18:02:02Z show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇪🇸 el-brujo	2024-12-31 16:47:33 (1 year ago)	Cloudflare WAF: Request Path: /telegram/sigilsec Request Query: Host: elhacker.net userAgent: Mozil ... show more Cloudflare WAF: Request Path: /telegram/sigilsec Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 Action: block Source: l7ddos ASN Description: NUSANET-AS-ID PT. Media Antar Nusa Country: ID Method: GET Timestamp: 2024-12-31T16:47:33Z ruleId: 6e3ccc23900c428e8ec0fb8a3a679c52. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇬🇧 PulseServers	2024-11-19 05:35:49 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUK2 ... show less	DDoS Attack Exploited Host
Anonymous	2024-10-29 13:45:16 (1 year ago)		DDoS Attack
🇲🇹 Malta	2024-10-17 01:19:23 (1 year ago)	110.232.67.42 - - [17/Oct/2024:03:19:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 110.232.67.42 - - [17/Oct/2024:03:19:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
Anonymous	2024-10-03 21:36:17 (1 year ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
Anonymous	2024-09-20 14:34:03 (2 years ago)	Incoming Layer 7 Flood Detected	DDoS Attack
🇩🇪 london2038.com	2024-09-14 13:20:17 (2 years ago)	Malformed or malicious web request 110.232.67.42 - - [14/Sep/2024:15:20:14 +0200] "POST /wp-content/ ... show more Malformed or malicious web request 110.232.67.42 - - [14/Sep/2024:15:20:14 +0200] "POST /wp-content/db-cache.php HTTP/2.0" 404 38885 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇪🇸 el-brujo	2024-09-07 17:44:00 (2 years ago)	Cloudflare WAF: Request Path: / Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Wind ... show more Cloudflare WAF: Request Path: / Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: NUSANET-AS-ID PT. Media Antar Nusa Country: ID Method: GET Timestamp: 2024-09-07T17:44:00Z ruleId: 9bc0d8e988e545dea9bd4843c4bef55c. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 Florian Kolb	2024-09-03 15:26:08 (2 years ago)	Layer 7 Flood with 1000 requests	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2024-08-18 12:14:41 (2 years ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2024-08-16 15:27:46 (2 years ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2024-08-13 22:38:53 (2 years ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2024-08-06 10:35:07 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-08-01 16:24:11 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 110.232.67.42 (mail.makmurgroup.id): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 110.232.67.42 (mail.makmurgroup.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 01 12:24:07.323897 2024] [security2:error] [pid 12037:tid 12037] [client 110.232.67.42:35324] [client 110.232.67.42] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mrconway.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mrconway.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Zqu2p7FAKgh8eFlw2YmZdQAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.100.159.253

🇧🇷 187.102.181.222

🇺🇸 173.244.60.241

🇫🇮 147.185.133.213

🇨🇳 116.62.243.75

🇧🇩 103.197.153.88

🇳🇱 91.92.47.252

🇺🇸 70.183.226.54

🇳🇱 45.148.10.123

🇮🇹 5.91.216.32

🇲🇦 196.92.7.247

🇳🇱 195.178.110.30

🇬🇧 193.163.125.244

🇷🇴 193.32.162.36

🇧🇴 190.181.25.210

🇮🇳 164.100.5.203

🇺🇸 147.185.132.178

🇮🇳 139.5.242.86

🇨🇳 117.50.122.20

🇷🇺 92.240.221.198