This IP address has been reported a total of
6
times from
5 distinct
sources.
162.218.121.241 was first reported on
October 31st 2025 , and the most recent report was
1 day ago Czechia
with 2
reports;
Indonesia
with 1
report.
The most common categories in these recent reports were:
Hacking
3
times;
Web App Attack
2
times;
Brute-Force
2
times;
Bad Web Bot
1
time;
Email Spam
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-26 08:38:20
(1 day ago)
[Mon Oct 26 15:38:19.370155 2026] [security2:error] [pid 304120:tid 140267069875904] [client 162.218 ...
show more
[Mon Oct 26 15:38:19.370155 2026] [security2:error] [pid 304120:tid 140267069875904] [client 162.218.121.241:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /IcoMoon.woff HTTP/1.1 request_line = GET /IcoMoon.woff HTTP/1.1 Request URI RAW = /IcoMoon.woff Request Basename = IcoMoon.woff"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/IcoMoon.woff"] [unique_id "at8ReyBE0H3Hct7ge57kzAAAAFM
...
show less
Email Spam
Hacking
2026-10-09 10:47:31
(2 weeks ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
2026-10-05 15:30:09
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
SX Communications
2026-08-27 21:57:58
(2 months ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 162.218.121.241: traffic from this ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 162.218.121.241: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-01-14 09:51:10
(9 months ago)
(mod_security) mod_security (id:243420) triggered by 162.218.121.241 (162.218.121.241.static.quadran ...
show more
(mod_security) mod_security (id:243420) triggered by 162.218.121.241 (162.218.121.241.static.quadranet.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 04:51:05.050277 2026] [security2:error] [pid 766984:tid 767025] [client 162.218.121.241:41027] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "ARGS:/upload/2020/06/13/20200613113248-b836c040-xs.jpg" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)||www.ajbruner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.ajbruner.com"] [uri "/ct/artlib/i.php"] [unique_id "aWdnCJXQgqv4sn8uN1N5QgAAAcg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2025-10-31 15:56:22
(11 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
Showing 1 to
6
of 6 reports
