This IP address has been reported a total of
8
times from
6 distinct
sources.
179.48.7.221 was first reported on
May 19th 2025 , and the most recent report was
6 days ago Spain
with 1
report;
Indonesia
with 1
report.
The most common categories in these recent reports were:
Hacking
2
times;
SQL Injection
1
time;
Web App Attack
1
time;
Email Spam
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-09-25 04:08:12
(6 days ago)
[Fri Sep 25 11:06:19.768698 2026] [security2:error] [pid 125671:tid 139671229052608] [client 179.48. ...
show more
[Fri Sep 25 11:06:19.768698 2026] [security2:error] [pid 125671:tid 139671229052608] [client 179.48.7.221:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "602"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561307-infografis-perubahan-iklim-jawa-timur"] [unique_id "arXzO0n2JXlAgPOHJq5r3QAAAEM"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[125728] [CbWy1sZpMdA] [arXzO0n2JXlAgPOHJq5r3QAAAEM] keep_alive=[0] [2026-09-25
...
show less
Email Spam
Hacking
🇪🇸
el-brujo
2026-09-11 02:42:17
(2 weeks ago)
Cloudflare WAF: Request Path: /bases-de-datos/duda-creacion-tablas-en-base-de-datos/ Request Query: ...
show more
Cloudflare WAF: Request Path: /bases-de-datos/duda-creacion-tablas-en-base-de-datos/ Request Query: ?PHPSESSID=iusa18ribpnjlu5qd090dhr8lb Host: forum.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Action: block Source: firewallCustom ASN Description: Nextlink telecom Country: BR Method: GET Timestamp: 2026-09-11T02:42:17Z ruleId: 357d2d06344e434581b4adce2b72fceb. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇮🇩
hermawan
2026-04-17 04:09:33
(5 months ago)
04/17/2026-11:09:33.284359 [Drop] [**] [1:3100002815:0] Suricata match TLS JA3 scan Uniq Zeek no 28 ...
show more
04/17/2026-11:09:33.284359 [Drop] [**] [1:3100002815:0] Suricata match TLS JA3 scan Uniq Zeek no 2815 with hash_e38341d16ea5e5427397e3194ad2a3f1 [**] [Classification: (null)] [Priority: 3] {TCP} 179.48.7.221:38348 -> 103.166.156.58:443
...
show less
Email Spam
Hacking
2025-11-22 14:13:33
(10 months ago)
scanning http requests from known botnet
Web App Attack
🇳🇱
exxos
2025-08-31 02:03:01
(1 year ago)
Attacks with Bad user agents
Hacking
2025-08-24 09:04:08
(1 year ago)
wordpress-trap
Web App Attack
🇫🇷
Sklurk
2025-08-12 00:09:08
(1 year ago)
Web App Attack
Web App Attack
🇩🇪
botreporter
2025-05-19 01:45:29
(1 year ago)
botnet ignoring robots.txt 2
Bad Web Bot
Showing 1 to
8
of 8 reports
