AbuseIPDB » 120.188.73.79
120.188.73.79 was found in our database!
This IP was reported 2 times. Confidence of
Abuse
is 0%: ?
| ISP |
PT Indosat Tbk (www.indosat.com)
|
| Usage Type |
Unknown
|
| ASN |
Unknown
|
| Domain Name |
ioh.co.id
|
| Country |
🇮🇩
Indonesia
|
| City |
Jakarta, Jakarta
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 120.188.73.79:
This IP address has been reported a total of
2
times from
2 distinct
sources.
120.188.73.79 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
🇮🇩
hermawan
|
|
[Sat May 03 11:32:39.815395 2025] [security2:error] [pid 402808:tid 140329000814272] [client 120.188 ...
show more
[Sat May 03 11:32:39.815395 2025] [security2:error] [pid 402808:tid 140329000814272] [client 120.188.73.79:64206] ModSecurity: Access denied with code 403 (phase 2). Match of "rx [0-9]\\\\s*\\\\'\\\\s*[0-9]" against "MATCHED_VAR" required. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "1747"] [id "932240"] [msg "Remote Command Execution: Unix Command Injection evasion attempt detected"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: s1746246759$o1 found within MATCHED_VAR: GS2.1.s1746246759$o1$g0$t1746246759$j60$l0$h0 request_line = GET /worker-analytic-helper-29-11-2022.js HTTP/2.0 Request URI RAW = /worker-analytic-helper-29-11-2022.js Request Basename = worker-analytic-helper-29-11-2022.js"] [severity "CRITICAL"] [ver "OWASP_CRS/4.13.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "paranoia-level/2"] [tag "OWASP_CRS"]
...
show less
|
Hacking
Web App Attack
|
|
|
🇮🇩
ISMUNANDI .
|
|
GET /(X(1)S(rwum5vn3lopmxabznqwtvlaf))/Pengaturan/ErrorPage?404;http://tnt.banksulselbar.co.id:80/im ...
show more
GET /(X(1)S(rwum5vn3lopmxabznqwtvlaf))/Pengaturan/ErrorPage?404;http://tnt.banksulselbar.co.id:80/images/landing/header.jpg?AspxAutoDetectCookieSupport=1&AspxAutoDetectCookieSupport=1 HTTP/1.1
user-agent: Mozilla/5.0 (Android 12; Mobile; rv:109.0) Gecko/113.0 Firefox/113.0
accept: */*
accept-language: id-ID
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
X-Forwarded-For: 182.1.161.104, 120.188.73.79, 120.188.73.79
show less
|
Hacking
Bad Web Bot
Web App Attack
|
|
Showing 1 to
2
of 2 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: