JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.208.42.122

172.208.42.122 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Dulles Town Center, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.208.42.122

Whois 172.208.42.122

IP Abuse Reports for 172.208.42.122:

This IP address has been reported a total of 10 times from 9 distinct sources. 172.208.42.122 was first reported on December 4th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2023-12-09 06:00:47 (2 years ago)	Potential Dangerous Requests Sucker	Bad Web Bot
🇮🇩 hermawan	2023-12-08 21:48:02 (2 years ago)	[Sat Dec 09 04:47:59.757749 2023] [security2:error] [pid 308365:tid 140514821142080] [client 172.208 ... show more [Sat Dec 09 04:47:59.757749 2023] [security2:error] [pid 308365:tid 140514821142080] [client 172.208.42.122:52332] [client 172.208.42.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:^\\\\s[\\"'`;]+\|[\\"'`]+\\\\s$)" at ARGS:id. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "1021"] [id "942111"] [msg "SQL Injection Attack: Common Injection Testing Detected"] [data "Matched Data: ' found within ARGS:id: 617' request_line = GET /index.php/profil/arsip-artikel?id=617%27&start=1290%27 HTTP/1.1"] [severity "WARNING"] [ver "OWASP_CRS/4.0.0-rc2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [tag "paranoia-level/2"] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "ZXOPD_WZ5v3ZJ6bFvcGZdwAAABs"] [staklim-malang.info] [staklim-malang.info] top=[308479] [C5KnicZ19sA] [ZXOPD_ ... show less	Hacking Web App Attack
Anonymous	2023-12-07 12:55:47 (2 years ago)		Web App Attack
🇩🇪 3202931de	2023-12-06 21:46:45 (2 years ago)	Tamper SQL Requests by script code injection	SQL Injection Web App Attack
🇮🇩 hermawan	2023-12-05 14:56:11 (2 years ago)	[Tue Dec 05 21:56:07.921503 2023] [security2:error] [pid 95905:tid 140562015426112] [client 172.208. ... show more [Tue Dec 05 21:56:07.921503 2023] [security2:error] [pid 95905:tid 140562015426112] [client 172.208.42.122:53062] [client 172.208.42.122] ModSecurity: Access denied with code 403 (phase 2). detected SQLi using libinjection with fingerprint 'son),' [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "68"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: son), found within REQUEST_HEADERS:referer: https://karangploso.jatim.bmkg.go.id/index.php?option='nvOpzp; AND 1=1 OR (<'\\x22>iKO)),&view='nvOpzp; AND 1=1 OR (<'\\x22>iKO)),&id='nvOpzp; AND 1=1 OR (<'\\x22>iKO)),&catid='nvOpzp; AND 1=1 OR (<'\\x22>iKO)),&Itemid='nvOpzp; AND 1=1 OR (<'\\x22>iKO)), request_line = GET /index.php?option=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&view=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&id=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&catid=..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "a ... show less	Hacking Web App Attack
Anonymous	2023-12-05 14:46:29 (2 years ago)	172.208.42.122 - - [05/Dec/2023:15:46:28 +0100] "GET /index.php?page_id=%27nvOpzp;%20AND%201=1%20OR% ... show more 172.208.42.122 - - [05/Dec/2023:15:46:28 +0100] "GET /index.php?page_id=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP/1.1" 403 344 "-" "-" ... show less	Web App Attack
Anonymous	2023-12-05 07:35:41 (2 years ago)	"main_page":"'nvOpzp; AND 1=1 OR (<'\">iKO)),","products_id":"'nvO	Hacking
🇹🇼 kk_it_man	2023-12-04 12:06:02 (2 years ago)	hack	Hacking
🇮🇩 penjaga BRIN	2023-12-04 11:03:18 (2 years ago)	SQL injection attempt.-112	Web App Attack
🇺🇸 johnrdykstra.com	2023-12-04 10:58:43 (2 years ago)		SQL Injection

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.150.104.16

🇺🇸 74.136.101.127

🇺🇸 5.226.171.10

🇬🇧 212.115.108.81

🇺🇸 198.44.167.8

🇩🇪 196.251.121.140

🇳🇱 195.178.110.218

🇩🇴 186.120.234.168

🇨🇦 174.0.80.25

🇱🇹 62.60.130.201

🇺🇸 52.159.247.233

🇲🇲 37.111.53.110

🇨🇦 35.203.90.90

🇺🇸 2604:a880:400:d1:0:4:e8e6:8001

🇵🇱 194.180.48.64

🇮🇳 110.173.190.221

🇰🇷 59.26.33.16

🇷🇴 2.57.122.53

🇳🇱 195.178.110.137

🇺🇸 189.81.5.30