AbuseIPDB » 114.5.242.57
114.5.242.57
This IP was reported 2 times. Confidence of
Abuse
is 4% : ?
ISP
PT Indosat Tbk (www.indosat.com)
Usage Type
Mobile ISP
ASN
AS4761
Hostname(s)
114-5-242-57.resources.indosat.com
Domain Name
ioh.co.id
Country
🇮🇩
Indonesia
City
Surabaya, East Java
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 114.5.242.57 :
This IP address has been reported a total of
2
times from
2 distinct
sources.
114.5.242.57 was first reported on
May 6th 2024 , and the most recent report was
16 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-19 02:44:09
(16 hours ago)
[Fri Jun 19 09:44:03.197359 2026] [security2:error] [pid 130957:tid 140628496176832] [client 114.5.2 ...
show more
[Fri Jun 19 09:44:03.197359 2026] [security2:error] [pid 130957:tid 140628496176832] [client 114.5.242.57:20338] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.js /script-v182.js /1280-720.webp /manifest-v2.json /ga-v10.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "439"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /swiper-v114na.js HTTP/2.0 request_line = GET /swiper-v114na.js HTTP/2.0 Request URI RAW = /swiper-v114na.js Request Basename = swiper-v114na.js"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/swiper-v114na.js"] [unique_id "ajSs81
...
show less
Email Spam
Hacking
🇺🇸
TPI-Abuse
2024-05-06 17:15:05
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 114.5.242.57 (114-5-242-57.resources.indosat.co ...
show more
(mod_security) mod_security (id:225170) triggered by 114.5.242.57 (114-5-242-57.resources.indosat.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 06 13:14:59.407606 2024] [security2:error] [pid 22073] [client 114.5.242.57:11301] [client 114.5.242.57] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||salernospizza.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "salernospizza.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZjkQEzOPqcURMlZQW_9AcAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
2
of 2 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: