JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.228.86.105

168.228.86.105 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 4%: ?

ISP	PLANET INTERNET
Usage Type	Fixed Line ISP
ASN	AS264906
Hostname(s)	168-228-86-105.dynamic.planetinternetprovedor.com.br
Domain Name	planetinternetprovedor.com.br
Country	🇧🇷 Brazil
City	Salvador, Bahia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.228.86.105

Whois 168.228.86.105

IP Abuse Reports for 168.228.86.105:

This IP address has been reported a total of 8 times from 6 distinct sources. 168.228.86.105 was first reported on June 22nd 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-26 23:16:17 (4 days ago)	[Sat Jun 27 06:16:14.048315 2026] [security2:error] [pid 629178:tid 139695076828864] [client 168.228 ... show more [Sat Jun 27 06:16:14.048315 2026] [security2:error] [pid 629178:tid 139695076828864] [client 168.228.86.105:45359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [unique_id "aj8IPvMttovioEM41PPz_AAAARg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[629231] [9Y92S/AOgnY] [aj8IPvMttovioEM41PPz_AAAARg] keep_alive=[1] [2026-06-27 06:16:14.048321] [R:aj8IPvMttovioEM41PPz_AAAARg] UA:'Mozilla/5.0 (Linux; Android 8.0; Pixel ... show less	Email Spam Hacking
🇺🇸 TPI-Abuse	2026-01-12 07:04:17 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 168.228.86.105 (168-228-86-105.dynamic.planetin ... show more (mod_security) mod_security (id:210350) triggered by 168.228.86.105 (168-228-86-105.dynamic.planetinternetprovedor.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 02:04:11.327702 2026] [security2:error] [pid 30731:tid 30731] [client 168.228.86.105:21220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|infodrop.info\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "infodrop.info"] [uri "/coffee/"] [unique_id "aWSc6-GkUZetE2PnHz9dFQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-03 11:35:11 (5 months ago)	168.228.86.105 (BR/Brazil/Bahia/Salvador/168-228-86-105.dynamic.planetinternetprovedor.com.br/[redac ... show more 168.228.86.105 (BR/Brazil/Bahia/Salvador/168-228-86-105.dynamic.planetinternetprovedor.com.br/[redacted] show less	Brute-Force
🇩🇪 pressler.pro	2025-09-22 02:50:45 (9 months ago)	Fail2ban - DDoS attack on woocommerce shop ...	DDoS Attack
🇳🇱 exxos	2025-08-08 18:11:47 (10 months ago)	HTTP1.x attacks	DDoS Attack
🇪🇸 Global Cyber Police	2025-07-28 07:24:25 (11 months ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-07-27 22:24:40 (11 months ago)	web exploit attacks	Web App Attack
🇳🇱 exxos	2025-06-22 08:51:02 (1 year ago)	web exploit attacks	Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 148.240.238.3

🇺🇸 47.77.231.127

🇺🇸 2001:470:2cc:1::298

🇮🇳 206.189.138.228

🇧🇷 205.210.31.213

🇧🇷 201.33.81.63

🇷🇴 193.46.255.86

🇩🇪 159.89.4.86

🇻🇳 157.10.45.70

🇺🇸 137.184.105.109

🇰🇷 125.141.231.18

🇮🇩 118.99.76.196

🇨🇳 115.231.126.19

🇫🇷 91.231.89.56

🇹🇿 41.93.82.194

🇬🇧 37.10.113.218

🇺🇸 172.202.104.166

🇭🇰 165.154.245.138

🇦🇺 162.43.180.97

🇺🇸 147.185.132.246