This IP address has been reported a total of
2
times from
2 distinct
sources.
170.23.8.102 was first reported on
December 9th 2025 , and the most recent report was
1 week ago China
with 1
report.
The only category in these recent reports was:
Web App Attack
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇳
my meibu
2026-09-28 12:18:03
(1 week ago)
[T-0114] Track G banned distributed UA cluster: 170.23.8.102 ua_hash=c4726851c44f4a55 cluster_size=5
Web App Attack
🇮🇩
hermawan
2025-12-09 21:44:54
(9 months ago)
[Wed Dec 10 04:44:08.483916 2025] [security2:error] [pid 172400:tid 140673335330496] [client 170.23. ...
show more
[Wed Dec 10 04:44:08.483916 2025] [security2:error] [pid 172400:tid 140673335330496] [client 170.23.8.102:26162] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:start. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "730"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: s found within ARGS_NAMES:start: start request_line = GET /index.php/profil/meteorologi/list-of-all-tags/akar?start=2000 HTTP/2.0 Request URI RAW = /index.php/profil/meteorologi/list-of-all-tags/akar?start=2000 Request Basename = akar"] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ATTACK"] [tag "capec/1000/152/137/15/460"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/akar"] [unique_id
...
show less
Hacking
Web App Attack
Showing 1 to
2
of 2 reports
