This IP address has been reported a total of
11
times from
3 distinct
sources.
172.197.160.199 was first reported on
August 23rd 2026 , and the most recent report was
1 day ago France
with 7
reports;
Indonesia
with 3
reports;
United States of America
with 1
report.
The most common categories in these recent reports were:
Web App Attack
7
times;
Hacking
3
times;
Email Spam
3
times;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
Sklurk
2026-10-03 08:41:06
(1 day ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-10-02 07:54:19
(2 days ago)
Web App Attack
Web App Attack
🇮🇩
hermawan
2026-10-01 03:16:01
(4 days ago)
[Thu Oct 01 10:14:39.575207 2026] [security2:error] [pid 24888:tid 140213502342848] [client 172.197. ...
show more
[Thu Oct 01 10:14:39.575207 2026] [security2:error] [pid 24888:tid 140213502342848] [client 172.197.160.199:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ar3QH0EXfBqckXAM1xW3wgAAAAQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[24919] [2Mb10H5WYSQ] [ar3QH0EXfBqckXAM1xW3wgAAAAQ] keep_alive=[0] [2026-10-01 10:14:39.575212] [R:ar3QH0EXfBqckXAM1xW3wgAAAAQ] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot' Host:'staklim-jat
...
show less
Email Spam
Hacking
🇫🇷
Sklurk
2026-09-24 07:44:31
(1 week ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-09-22 12:40:28
(1 week ago)
Web App Attack
Web App Attack
🇮🇩
hermawan
2026-09-22 07:22:54
(1 week ago)
[Tue Sep 22 14:22:48.963657 2026] [security2:error] [pid 142021:tid 140304722048704] [client 172.197 ...
show more
[Tue Sep 22 14:22:48.963657 2026] [security2:error] [pid 142021:tid 140304722048704] [client 172.197.160.199:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /b/bulananbanyuwangi.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/bulananbanyuwangi.pdf"] [unique_id "arIsyAAU3l8RjDpLLrl6wAAAAEM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[142051] [X27dO42L108] [arIsyAAU3l8RjDpLLrl6wAAAAEM] keep_alive=[0] [2026-09-22 14:22:48.963662] [R:arIsyAAU3l8RjDpLLrl6wAAAAEM] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User
...
show less
Email Spam
Hacking
2026-09-21 06:20:01
(2 weeks ago)
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
🇮🇩
hermawan
2026-09-20 02:09:05
(2 weeks ago)
[Sun Sep 20 09:07:52.610367 2026] [security2:error] [pid 253353:tid 140496055805632] [client 172.197 ...
show more
[Sun Sep 20 09:07:52.610367 2026] [security2:error] [pid 253353:tid 140496055805632] [client 172.197.160.199:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "User" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "273"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: User found within REQUEST_HEADERS:user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562115-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bulan-juni-tahun-2025-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562115-prediksi-bulanan-curah-hujan-bulan-agustus-tahun-2025-update-dari-analisis-bu
...
show less
Email Spam
Hacking
🇫🇷
Sklurk
2026-09-18 07:37:03
(2 weeks ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-08-24 13:29:56
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-08-23 12:45:39
(1 month ago)
Web App Attack
Web App Attack
Showing 1 to
11
of 11 reports
