JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.234.96.59

167.234.96.59 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 14%: ?

14%

ISP	HostRoyale Technologies Pvt Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203020
Domain Name	hostroyale.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.234.96.59

Whois 167.234.96.59

IP Abuse Reports for 167.234.96.59:

This IP address has been reported a total of 8 times from 3 distinct sources. 167.234.96.59 was first reported on September 22nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-07-14 00:09:49 (1 day ago)	Fail2Ban: 167.234.96.59 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 167.234.96.59 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-07-08 01:19:25 (1 week ago)	Fail2Ban: 167.234.96.59 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 167.234.96.59 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.6470.1881 Mobile Safari/537.36 show less	Bad Web Bot
🇮🇩 hermawan	2026-06-29 19:17:17 (2 weeks ago)	[Tue Jun 30 02:17:16.595739 2026] [security2:error] [pid 33294:tid 140590126704320] [client 167.234. ... show more [Tue Jun 30 02:17:16.595739 2026] [security2:error] [pid 33294:tid 140590126704320] [client 167.234.96.59:35757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".webp" at REQUEST_LINE. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "482"] [id "440010"] [msg "BAD REQUEST Bro, 206 Partial Content"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: identity found within REQUEST_LINE: GET /Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp HTTP/2.0 request_line = GET /Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp HTTP/2.0 Request URI RAW = /Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp Request Basename = Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/Whatsapp_Kantor_BMKG_Malang_Stasiun_Klimatologi_Jawa_Timur_40X40.webp"] [uniq ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-25 00:36:15 (2 weeks ago)	Captured JA4H: ge20c_44a73960518b \| Log: 167.234.96.59 - - [25/Jun/2026:07:35:40 +0700] "GET /timeou ... show more Captured JA4H: ge20c_44a73960518b \| Log: 167.234.96.59 - - [25/Jun/2026:07:35:40 +0700] "GET /timeout-worker-v3.js HTTP/2.0" 200 17173 "https://staklim-jatim.bmkg.go.id/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim" "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.4299.1150 Mobile Safari/537.36" ge20c_user-agent,accept,accept-language,cookie,origin,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,referer,accept-encoding,priority,host... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-19 15:50:51 (3 weeks ago)	Captured JA4H: ge20c_04976568c5ed \| Log: 167.234.96.59 - - [19/Jun/2026:22:50:49 +0700] "GET /swiper ... show more Captured JA4H: ge20c_04976568c5ed \| Log: 167.234.96.59 - - [19/Jun/2026:22:50:49 +0700] "GET /swiper-v114na.js HTTP/2.0" 200 42796 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.3132.1348 Mobile Safari/537.36" ge20c_accept,accept-language,cookie,origin,user-agent,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,referer,accept-encoding,host... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-03-11 06:14:48 (4 months ago)	2026-03-10T23:35:06.553921+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ... show more 2026-03-10T23:35:06.553921+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=167.234.96.59 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=10264 DF PROTO=TCP SPT=43015 DPT=443 WINDOW=43080 RES=0x00 SYN URGP=0 ... show less	Email Spam Hacking
Anonymous	2026-02-09 10:22:19 (5 months ago)	Malicious activity detected	Hacking Web App Attack
🇮🇩 hermawan	2025-09-22 15:10:47 (9 months ago)	[Mon Sep 22 22:10:29.280290 2025] [security2:error] [pid 1245801:tid 139669533595328] [client 167.23 ... show more [Mon Sep 22 22:10:29.280290 2025] [security2:error] [pid 1245801:tid 139669533595328] [client 167.234.96.59:41889] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=475&id=517%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-april-4-mei-2015&start=200 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=475&id=517%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-april-4-mei-2015&start=200..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aNFm5cZmeje0 ... show less	Hacking Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.76

🇷🇼 196.216.81.126

🇺🇸 173.249.195.174

🇺🇸 162.217.100.196

🇹🇼 128.14.226.125

🇨🇳 111.47.243.219

🇹🇷 94.154.43.230

🇺🇸 47.251.77.150

🇧🇷 45.205.1.244

🇳🇱 45.198.224.62

🇳🇱 45.148.10.141

🇩🇪 45.135.141.9

🇬🇧 45.133.173.115

🇨🇳 39.151.87.156

🇬🇧 35.203.211.251

🇨🇳 211.101.247.78

🇧🇷 205.210.31.166

🇻🇳 116.110.100.130

🇫🇷 85.217.140.48

🇺🇸 64.62.197.58