JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.99.62.220

139.99.62.220 was found in our database!

This IP was reported 210 times. Confidence of Abuse is 0%: ?

ISP	OVH Hosting, Inc.
Usage Type	Content Delivery Network
ASN	AS16276
Hostname(s)	ns563729.ip-139-99-62.net
Domain Name	ovh.net
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.99.62.220

Whois 139.99.62.220

IP Abuse Reports for 139.99.62.220:

This IP address has been reported a total of 210 times from 99 distinct sources. 139.99.62.220 was first reported on April 9th 2022, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 TC Saini	2024-08-02 14:00:37 (2 years ago)	"Indicators of compromise (IoCs) reported by the GOVT India"	Blog Spam Exploited Host IoT Targeted
🇮🇳 TC Saini	2024-08-02 14:00:37 (2 years ago)	"Indicators of compromise (IoCs) reported by the GOVT India"	Blog Spam Exploited Host IoT Targeted
🇮🇳 TC Saini	2024-08-02 14:00:37 (2 years ago)	"Indicators of compromise (IoCs) reported by the GOVT India"	Blog Spam Exploited Host IoT Targeted
🇺🇸 mawan	2024-01-22 11:34:01 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 mawan	2024-01-21 10:39:05 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇮🇩 hermawan	2024-01-20 06:05:30 (2 years ago)	[Sat Jan 20 13:05:24.545450 2024] [security2:error] [pid 413123:tid 133182540219968] [client 139.99. ... show more [Sat Jan 20 13:05:24.545450 2024] [security2:error] [pid 413123:tid 133182540219968] [client 139.99.62.220:62233] [client 139.99.62.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "40"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZatipI_VdsM2ynrKqRNdHQAAAHg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[413215] [cRrrYaJG1cg] [ZatipI_VdsM2ynrKqRNdHQAAAHg] keep_alive=[0] [2024-01-20 13:05:24.545466] [R:ZatipI_VdsM2ynrKqRNdHQAAAHg] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/;q ... show less	Hacking Web App Attack
🇺🇸 mawan	2024-01-19 03:44:03 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇨🇭 backslash	2024-01-18 09:29:24 (2 years ago)		Bad Web Bot
🇮🇩 hermawan	2024-01-13 10:24:06 (2 years ago)	[Sat Jan 13 17:24:03.285350 2024] [security2:error] [pid 325357:tid 131611253278272] [client 139.99. ... show more [Sat Jan 13 17:24:03.285350 2024] [security2:error] [pid 325357:tid 131611253278272] [client 139.99.62.220:62444] [client 139.99.62.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "37"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZaJkwxUAVoejyUUKD_8hYgAAAa4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[325459] [CM0ELqnelhw] [ZaJkwxUAVoejyUUKD_8hYgAAAa4] keep_alive=[0] [2024-01-13 17:24:03.285353] [R:ZaJkwxUAVoejyUUKD_8hYgAAAa4] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/;q ... show less	Hacking Web App Attack
🇺🇸 mawan	2024-01-13 09:23:52 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 mawan	2024-01-12 00:45:49 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇮🇩 hermawan	2024-01-11 17:59:53 (2 years ago)	[Fri Jan 12 00:59:51.524118 2024] [security2:error] [pid 42875:tid 124465734223424] [client 139.99.6 ... show more [Fri Jan 12 00:59:51.524118 2024] [security2:error] [pid 42875:tid 124465734223424] [client 139.99.62.220:62844] [client 139.99.62.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "37"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZaAsl4NWtsg_vYQFuCA-sAAAAPA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[42987] [XQxrUF/FwnA] [ZaAsl4NWtsg_vYQFuCA-sAAAAPA] keep_alive=[0] [2024-01-12 00:59:51.524122] [R:ZaAsl4NWtsg_vYQFuCA-sAAAAPA] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-01-09 12:31:45 (2 years ago)	[Tue Jan 09 19:31:41.426181 2024] [security2:error] [pid 664675:tid 129674434840128] [client 139.99. ... show more [Tue Jan 09 19:31:41.426181 2024] [security2:error] [pid 664675:tid 129674434840128] [client 139.99.62.220:62911] [client 139.99.62.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "37"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZZ08rbPNYKYAdOA-ec8bkQAAAao"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[664773] [v0Edf/oxrnE] [ZZ08rbPNYKYAdOA-ec8bkQAAAao] keep_alive=[0] [2024-01-09 19:31:41.426184] [R:ZZ08rbPNYKYAdOA-ec8bkQAAAao] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/;q ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-01-09 05:58:44 (2 years ago)	[Tue Jan 09 12:58:41.573173 2024] [security2:error] [pid 496362:tid 137280306021952] [client 139.99. ... show more [Tue Jan 09 12:58:41.573173 2024] [security2:error] [pid 496362:tid 137280306021952] [client 139.99.62.220:62183] [client 139.99.62.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "37"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZZzgkZ4TkNJqFd7pfFfKEQAAAOs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[496469] [3UClAcVa8JI] [ZZzgkZ4TkNJqFd7pfFfKEQAAAOs] keep_alive=[0] [2024-01-09 12:58:41.573176] [R:ZZzgkZ4TkNJqFd7pfFfKEQAAAOs] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/;q ... show less	Hacking Web App Attack
🇺🇸 mawan	2024-01-09 05:24:44 (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack

Showing 1 to 15 of 210 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 172.69.221.26

🇹🇼 172.69.221.25

🇧🇪 142.250.32.4

🇨🇳 123.187.244.19

🇮🇳 103.74.70.44

🇳🇱 45.148.10.141

🇨🇦 15.235.96.37

🇨🇭 209.99.190.186

🇨🇳 180.76.60.83

🇹🇭 61.19.246.157

🇺🇸 57.141.0.10

🇮🇱 34.165.95.7

🇧🇪 34.156.206.32

🇺🇸 20.65.178.121

🇳🇱 200.138.46.190

🇧🇪 198.235.24.215

🇵🇱 194.180.49.68

🇷🇴 193.46.255.86

🇵🇪 179.6.169.16

🇺🇸 167.71.24.92