AbuseIPDB » 157.15.63.210
157.15.63.210 was found in our database!
This IP was reported 5 times. Confidence of
Abuse
is 0%: ?
| ISP |
PT Anugerah Media Data Nusantara
|
| Usage Type |
Fixed Line ISP
|
| ASN |
AS152373
|
| Domain Name |
aman-isp.net
|
| Country |
🇮🇩
Indonesia
|
| City |
Probolinggo, East Java
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 157.15.63.210:
This IP address has been reported a total of
5
times from
4 distinct
sources.
157.15.63.210 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
Anonymous
|
|
Fail2Ban: IP flagged for web exploits and DDoS attack attempts (Categories 4, 21).
|
DDoS Attack
Web App Attack
|
|
|
🇩🇪
ps-center
|
|
MYH: Web Attack GET /database/adminer.php
|
Web Spam
Hacking
Bad Web Bot
Web App Attack
|
|
|
🇪🇸
10dencehispahard SL
|
|
Scan to detect web files
|
Port Scan
Web App Attack
|
|
|
🇮🇩
hermawan
|
|
[Sun Sep 22 16:24:35.453950 2024] [security2:error] [pid 456865:tid 126224466708160] [client 157.15. ...
show more
[Sun Sep 22 16:24:35.453950 2024] [security2:error] [pid 456865:tid 126224466708160] [client 157.15.63.210:49790] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:fbclid. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "664"] [id "921170"] [msg "HTTP Parameter Pollution ()"] [data "Matched Data: f found within ARGS_NAMES:fbclid: fbclid request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2024/08_Agustus_2024/Infografis-Bulanan_Prakiraan_Hujan_Bulan_OKTOBER-NOVEMBER-DESEMBER_Tahun_2024_Update_Dari_Analisis_Bulan_Agustus_2024_di_Provinsi_Jawa_Timur.jpg?fbclid=IwZXh0bgNhZW0CMTEAAR1WZErymX4MiCl400X8YHNlPkFfFg-MHrZRIH2IcK4fjaBVjFQhyHMKKss_aem_cxHypy6HO33ieG-UULCEyg HTTP/2.0"] [ver "OWASP_CRS/4.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/image
...
show less
|
Hacking
Web App Attack
|
|
|
🇮🇩
hermawan
|
|
[Fri Sep 20 13:11:06.273326 2024] [security2:error] [pid 157071:tid 132255523538624] [client 157.15. ...
show more
[Fri Sep 20 13:11:06.273326 2024] [security2:error] [pid 157071:tid 132255523538624] [client 157.15.63.210:43558] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.*?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].*?[\\"'`]|(?:\\\\r?\\\\n)?\\\\z|[^\\"'`]+)|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]*?from|(?:alter|(?:(?:cre|trunc|upd)at|renam)e|d(?:e(?:lete|sc)|rop)|(?:inser|selec)t|load)[\\\\s\\\\x0b]*?\\\\([\\\\s\\\\x0b]*?space[\\\\s\\\\x0b]*?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2147"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data "Matched Data: , like Gecko) Version/4.0 Chrome/128.0.6613.146 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 11; CPH1933 Build/RKQ1.200903.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/128.0.6
...
show less
|
Hacking
Web App Attack
|
|
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: