This IP address has been reported a total of
11
times from
5 distinct
sources.
139.28.120.37 was first reported on
January 8th 2026 , and the most recent report was
5 hours ago Germany
with 1
report.
The only category in these recent reports was:
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
sverson
2026-10-20 12:15:43
(5 hours ago)
Mutliple unauthorized attempts to access web resources
Web App Attack
🇮🇹
A000Z
2026-08-15 01:11:09
(2 months ago)
Fail2Ban: 139.28.120.37 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ...
show more
Fail2Ban: 139.28.120.37 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.9855.1169 Mobile Safari/537.36
show less
Bad Web Bot
🇺🇸
kosada.com
2026-07-10 21:25:58
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-03-12 07:19:57
(7 months ago)
2026-03-12T03:11:03.859869+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ...
show more
2026-03-12T03:11:03.859869+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=139.28.120.37 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=38531 DF PROTO=TCP SPT=33867 DPT=443 WINDOW=43080 RES=0x00 SYN URGP=0
...
show less
Email Spam
Hacking
2026-02-19 04:59:17
(8 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-02-14 20:19:03
(8 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-02-13 11:15:48
(8 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-02-11 21:05:34
(8 months ago)
Malicious activity detected
Hacking
Web App Attack
🇮🇩
hermawan
2026-01-30 01:41:23
(8 months ago)
[Fri Jan 30 08:41:21.611582 2026] [security2:error] [pid 276292:tid 140533727925952] [client 139.28. ...
show more
[Fri Jan 30 08:41:21.611582 2026] [security2:error] [pid 276292:tid 140533727925952] [client 139.28.120.37:43497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "image/heif" at REQUEST_HEADERS:Accept. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "425"] [id "440009"] [msg " Image Heif"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: text/html found within REQUEST_HEADERS:Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 request_line = GET /index.php/component/tags/tag/klimatologi HTTP/2.0 Request URI RAW = /index.php/component/tags/tag/klimatologi Request Basename = klimatologi"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/klimatologi"] [unique_id "aXwMQXRuBTe2PZAmdnZN-QABQhg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.b
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2026-01-16 22:46:42
(9 months ago)
[Sat Jan 17 05:46:43.290795 2026] [security2:error] [pid 113515:tid 139937570535104] [client 139.28. ...
show more
[Sat Jan 17 05:46:43.290795 2026] [security2:error] [pid 113515:tid 139937570535104] [client 139.28.120.37:43451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".webp" at REQUEST_LINE. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "466"] [id "440010"] [msg "BAD REQUEST Bro, 206 Partial Content"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: identity found within REQUEST_LINE: GET /images/Klimatologi/Prakiraan/02-Prakiraan-Dasarian/Prakiraan_Deterministik_Curah_Hujan_Dasarian/Prakiraan_Deterministik_Curah_Hujan_Dasarian_Provinsi_Jawa_Timur/2026/01_Januari_2026/Das-I/Peta_Prediksi_Dasarian_Deterministik_Curah_Hujan_Dasarian_II-JANUARI-II_FEBRUARI_2026_Provinsi_Jawa_Timur_Update_10_Januari_2026.webp HTTP/2.0 request_line = GET /images/Klim..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/02-Prakiraan-Dasarian/Prakiraan_Deter
...
show less
Hacking
Web App Attack
2026-01-08 06:00:51
(9 months ago)
Malicious activity detected
Hacking
Web App Attack
Showing 1 to
11
of 11 reports
