JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

178.171.22.149

Recent Activity

Abuse confidence score ?

13% Caution

15 reports

3 reporters · latest 2 days ago

ISP	goodline
Usage Type	Fixed Line ISP
ASN	AS209372
Domain Name	ws.network
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 178.171.22.149

This IP address has been reported a total of 15 times from 3 distinct sources. 178.171.22.149 was first reported on November 20th 2025, and the most recent report was 2 days ago. In the last 60 days, the only reporter location was: Indonesia with 5 reports. The most common categories in these recent reports were: Hacking 5 times; Email Spam 4 times; Port Scan 1 time; Bad Web Bot 1 time; Exploited Host 1 time; Other 9 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-09-25 00:21:47 (2 days ago)	[Fri Sep 25 07:21:15.201153 2026] [security2:error] [pid 529100:tid 139728256919232] [client 178.171 ... show more [Fri Sep 25 07:21:15.201153 2026] [security2:error] [pid 529100:tid 139728256919232] [client 178.171.22.149:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".mka" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "108"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: .mka found within REQUEST_FILENAME: /80124549a1859c420959367dc719b2ab1e97e06c.mka request_line = GET /80124549a1859c420959367dc719b2ab1e97e06c.mka HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/80124549a1859c420959367dc719b2ab1e97e06c.mka"] [unique_id "arW-e3UGSWJWKVsEvyIOCQAAAME"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[529128] [6V7DsUPyQBA] [arW-e3UGSWJWKVsEvyIOCQAAAME] keep_alive=[0] [2026-09-25 07:21:15.201157] [R:arW-e3UGSWJWKVsEvyIOCQAAAME] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safa ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-24 01:34:20 (3 days ago)	Captured JA4H: ge11n_36d8cc7db64c \| Log: 178.171.22.149 - - [24/Sep/2026:08:34:07 +0700] "GET /index ... show more Captured JA4H: ge11n_36d8cc7db64c \| Log: 178.171.22.149 - - [24/Sep/2026:08:34:07 +0700] "GET /index.php HTTP/1.1" 200 14337 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Safari/605.1.15" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-23 06:13:46 (4 days ago)	Captured JA4H: ge11n_36d8cc7db64c \| Log: 178.171.22.149 - - [23/Sep/2026:12:59:06 +0700] "GET / HTTP ... show more Captured JA4H: ge11n_36d8cc7db64c \| Log: 178.171.22.149 - - [23/Sep/2026:12:59:06 +0700] "GET / HTTP/1.1" 200 14334 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.1 Safari/605.1.15" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,sec-fetch-user,cf-ew-via,cdn-loop,sec-fetch-site,sec-fetch-mode,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-dest,cf-visitor,priority,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 07:39:40 (5 days ago)	Captured JA4H: ge11n_04726067e501 \| Log: 178.171.22.149 - - [22/Sep/2026:14:39:15 +0700] "GET /index ... show more Captured JA4H: ge11n_04726067e501 \| Log: 178.171.22.149 - - [22/Sep/2026:14:39:15 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-dasarian-deterministik-curah-hujan-provinsi-jawa-timur-tahun-2023 HTTP/1.1" 200 17747 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 David Koswari	2026-09-12 05:10:00 (2 weeks ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇮🇩 hermawan	2026-04-01 08:41:25 (5 months ago)	1775032872.047209 CPgKyD2ADUk2NSgjt3 178.171.22.149 43565 103.166.156.58 443 tcp - 4.091806 0 0 S0 F ... show more 1775032872.047209 CPgKyD2ADUk2NSgjt3 178.171.22.149 43565 103.166.156.58 443 tcp - 4.091806 0 0 S0 F F 0 S 4 240 0 0 - 6 887516437045518_54 (empty) 65535_2-4-8-1-3_1436_9 (empty) 04/01/2026-15:41:12.047209 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-03-16 07:05:27 (6 months ago)	2026-03-15T18:41:47.020248+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ... show more 2026-03-15T18:41:47.020248+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=178.171.22.149 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=4793 DF PROTO=TCP SPT=34641 DPT=443 WINDOW=43080 RES=0x00 SYN URGP=0 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-01-12 17:35:55 (8 months ago)	[Tue Jan 13 00:35:55.222569 2026] [security2:error] [pid 53502:tid 140521881122496] [client 178.171. ... show more [Tue Jan 13 00:35:55.222569 2026] [security2:error] [pid 53502:tid 140521881122496] [client 178.171.22.149:36199] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=622&id=555555706%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-29-mei-2017&start=50 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=622&id=555555706%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-29-mei-2017&start=50..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aWUw-zWozDICZ ... show less	Hacking Web App Attack
🇮🇩 hermawan	2026-01-12 02:36:13 (8 months ago)	[Mon Jan 12 09:36:02.956492 2026] [security2:error] [pid 34029:tid 140501556655808] [client 178.171. ... show more [Mon Jan 12 09:36:02.956492 2026] [security2:error] [pid 34029:tid 140501556655808] [client 178.171.22.149:38763] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=473&id=517%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-april-4-mei-2015&start=160 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=473&id=517%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-april-4-mei-2015&start=160 ..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aWReEtzTHIx00 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2026-01-11 23:48:39 (8 months ago)	[Mon Jan 12 06:48:39.378578 2026] [security2:error] [pid 719970:tid 139942909867712] [client 178.171 ... show more [Mon Jan 12 06:48:39.378578 2026] [security2:error] [pid 719970:tid 139942909867712] [client 178.171.22.149:35567] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?id=2444:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-februari-6-maret-2017&catid=617 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?id=2444:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-februari-6-maret-2017&catid=617 Request Ba..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aWQ2148PoeWy ... show less	Hacking Web App Attack
🇮🇩 hermawan	2026-01-06 13:26:31 (8 months ago)	[Tue Jan 06 20:26:31.307808 2026] [security2:error] [pid 100462:tid 140119796565696] [client 178.171 ... show more [Tue Jan 06 20:26:31.307808 2026] [security2:error] [pid 100462:tid 140119796565696] [client 178.171.22.149:46423] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=475&id=539%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-19-mei-25-mei-2015&start=120 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=475&id=539%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-19-mei-25-mei-2015&start=120 R..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aV0Nh5dhpkB2 ... show less	Hacking Web App Attack
🇦🇺 Joshua	2025-12-28 22:40:42 (8 months ago)	Web scraping	Bad Web Bot
🇮🇩 hermawan	2025-12-08 08:27:16 (9 months ago)	[Mon Dec 08 15:08:18.046879 2025] [security2:error] [pid 299979:tid 140009567934144] [client 178.171 ... show more [Mon Dec 08 15:08:18.046879 2025] [security2:error] [pid 299979:tid 140009567934144] [client 178.171.22.149:45065] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:file. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "730"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: f found within ARGS_NAMES:file: file request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur/2025/07_Juli_2025/Das-III/Monitoring_dan_Prediksi_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur_Update_31_Juli_2025.pdf HTTP/2.0 Request URI RAW = /pdfjs/we..."] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [ta ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-12-02 09:38:14 (9 months ago)	[Tue Dec 02 15:59:06.684924 2025] [security2:error] [pid 28633:tid 140358163883712] [client 178.171. ... show more [Tue Dec 02 15:59:06.684924 2025] [security2:error] [pid 28633:tid 140358163883712] [client 178.171.22.149:42189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:file. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "730"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: f found within ARGS_NAMES:file: file request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur/2025/09_September_2025/Das-II/Monitoring_dan_Prediksi_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur_Update_20_September_2025.pdf HTTP/2.0 Request URI RAW = ..."] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-20 23:46:00 (10 months ago)	[Fri Nov 21 06:32:12.048249 2025] [security2:error] [pid 373381:tid 140509544687296] [client 178.171 ... show more [Fri Nov 21 06:32:12.048249 2025] [security2:error] [pid 373381:tid 140509544687296] [client 178.171.22.149:33243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:file. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "728"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: f found within ARGS_NAMES:file: file request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur/2025/09_September_2025/Das-II/Monitoring_dan_Prediksi_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur_Update_20_September_2025.pdf HTTP/2.0 Request URI RAW = ..."] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [ta ... show less	Hacking Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.206.207.146

🇸🇪 171.25.158.47

🇧🇼 168.167.228.123

🇫🇷 91.196.152.141

🇱🇺 64.89.161.85

🇳🇱 45.148.10.152

🇳🇱 2a0f:ca80:b00b:e2::5

🇰🇷 222.116.49.135

🇳🇱 185.226.197.63

🇮🇩 153.76.64.148

🇮🇱 147.235.223.77

🇺🇸 76.79.213.70

🇺🇸 64.92.3.141

🇺🇦 46.201.107.213

🇳🇱 45.142.193.161

🇺🇸 45.45.237.97

🇬🇧 35.203.210.209

🇬🇧 195.206.182.222

🇦🇷 190.2.22.129

🇧🇩 157.15.136.28