AbuseIPDB » 179.125.75.228
179.125.75.228 was found in our database!
This IP was reported 6 times. Confidence of
Abuse
is 1% : ?
ISP
Pombonet Telecomunicações e Informática
Usage Type
Fixed Line ISP
ASN
AS262988
Hostname(s)
179-125-75-228-dinamico.pombonet.net.br
Domain Name
pombonet.com.br
Country
🇧🇷
Brazil
City
Jundiai, Sao Paulo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 179.125.75.228 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
179.125.75.228 was first reported on
July 11th 2025 , and the most recent report was
3 weeks ago .
Old Reports:
The most recent abuse report for this IP address is from
3 weeks ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-01 08:37:42
(3 weeks ago)
[Mon Jun 01 15:37:39.462691 2026] [security2:error] [pid 9167:tid 140305894119104] [client 179.125.7 ...
show more
[Mon Jun 01 15:37:39.462691 2026] [security2:error] [pid 9167:tid 140305894119104] [client 179.125.75.228:47061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /swiper-v112.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/swiper-v112.js"] [unique_id "ah1E08Z4mSyz8SKqxISimAAAQQI"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[9170] [xpBlG+19C5E] [ah1E08Z4mSyz8SKqxISimAAAQQI] keep_alive=[1] [2026-06-01 15:37:39.462697] [R:ah1E08Z4mSyz8SKqxISimAAAQQI] UA:'Mozilla/5.0 (Linux; Android 9; SM-G950U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.
...
show less
Email Spam
Hacking
🇩🇪
filstal.org
2026-03-13 10:48:03
(3 months ago)
Dovecot Brute-Force: Targeted User-Enumeration (Honey-Accounts)
Email Spam
Brute-Force
Anonymous
2025-12-18 05:31:56
(6 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
show less
Bad Web Bot
Exploited Host
Anonymous
2025-11-25 02:36:32
(7 months ago)
scanning http requests from known botnet
Web App Attack
🇧🇷
felipeforte
2025-08-28 02:13:36
(9 months ago)
Part of a massive DDoS/scraping botnet
DDoS Attack
Bad Web Bot
🇺🇸
ipblock.com
2025-07-11 07:36:00
(11 months ago)
IPBlock protected site ID [4055-d][s=08].
Major crawler impostor.
Mozilla/5.0 (Macintosh; Intel Ma ...
show more
IPBlock protected site ID [4055-d][s=08].
Major crawler impostor.
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/537.36 (KHTML, like Gecko, Mediapartners-Google) Chrome/87.0.4280.90 Safari/537.36
show less
Bad Web Bot
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: