JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

188.253.4.3

Neutral Activity

Abuse confidence score ?

0% Low Risk

24 reports

6 reporters · latest 1 year ago

ISP	Akari Networks (Singapore)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38136
Domain Name	akari.hk
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

188.253.4.3 has been reported 24 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 188.253.4.3

Export CSV

This IP address has been reported a total of 24 times from 6 distinct sources. 188.253.4.3 was first reported on February 18th 2022, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 BPS-StatisticsIndonesia	2025-08-01 19:47:46 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-07-27 22:26:50 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-07-22 10:33:25 (1 year ago)	WP Login Scan Activities	Web App Attack
🇮🇩 penjaga BRIN	2025-07-21 16:27:54 (1 year ago)	phpunit Remote Code Execution Vulnerability(55852)	Web App Attack
🇮🇩 hermawan	2025-07-21 13:16:10 (1 year ago)	[Mon Jul 21 20:14:13.867117 2025] [security2:error] [pid 18443:tid 140717649274560] [client 188.253. ... show more [Mon Jul 21 20:14:13.867117 2025] [security2:error] [pid 18443:tid 140717649274560] [client 188.253.4.3:8897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/CMSPages" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /CMSPages found within REQUEST_FILENAME: /CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData request_line = POST /CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData"] [unique_id "aH49JZifTfDODWqnhHH_AgAAAEw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[18482] [r59rQLC1EpA] [aH49JZifTfDODWqnhHH_AgAAAEw] keep_alive=[0] [2025-07-21 20:14:13.867132] [R:aH49JZifTfDODWqnhHH_AgAAAEw] UA:'Mozilla/5.0 (Fedora; Linux i686) Appl ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-21 01:16:15 (1 year ago)	[Mon Jul 21 08:15:04.995994 2025] [security2:error] [pid 259104:tid 140081281095360] [client 188.253 ... show more [Mon Jul 21 08:15:04.995994 2025] [security2:error] [pid 259104:tid 140081281095360] [client 188.253.4.3:10653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wls-wsat" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /wls-wsat found within REQUEST_FILENAME: /wls-wsat/CoordinatorPortType request_line = POST /wls-wsat/CoordinatorPortType HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/wls-wsat/CoordinatorPortType"] [unique_id "aH2UmFiQ6Z-toUmC9pXBjgAAAEk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[259140] [kl2pNGa+aG0] [aH2UmFiQ6Z-toUmC9pXBjgAAAEk] keep_alive=[0] [2025-07-21 08:15:04.996000] [R:aH2UmFiQ6Z-toUmC9pXBjgAAAEk] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36' Host:'staklim-jatim.bmk ... show less	Hacking Web App Attack
🇮🇩 penjaga BRIN	2025-07-20 17:00:19 (1 year ago)	Struts2 OGNL Remote Code Execution Vulnerability(56945)	Web App Attack
🇮🇩 penjaga BRIN	2025-07-20 16:29:16 (1 year ago)	Bash Remote Code Execution Vulnerability(36729)	Web App Attack
🇮🇩 hermawan	2025-07-20 08:04:21 (1 year ago)	[Sun Jul 20 15:02:05.191632 2025] [security2:error] [pid 48333:tid 140552044426944] [client 188.253. ... show more [Sun Jul 20 15:02:05.191632 2025] [security2:error] [pid 48333:tid 140552044426944] [client 188.253.4.3:28117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/test.cgi" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /test.cgi found within REQUEST_FILENAME: /test.cgi request_line = GET /test.cgi HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/test.cgi"] [unique_id "aHyifV8bqyun1Gmr0mVxSAAAAII"], referer () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[48362] [UmdgxhdVCvc] [aHyifV8bqyun1Gmr0mVxSAAAAII] keep_alive=[0] [2025-07-20 15:02:05.191636] [R:aHyifV8bqyun1Gmr0mVxSAAAAII] UA:'Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Safari/103.0 Safari/537.36' Host:'staklim-jatim.bmk ... show less	Hacking Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-07-20 02:07:30 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇮🇩 penjaga BRIN	2025-07-19 19:05:21 (1 year ago)	PHP CGI-bin vulnerability attempt.-112	Web App Attack
🇮🇩 penjaga BRIN	2025-07-19 17:05:01 (1 year ago)	Eyou Email System Remote Command Execution Vulnerability(91329)	Web App Attack
🇮🇩 penjaga BRIN	2025-07-19 16:47:22 (1 year ago)	Apache Struts2 Redirect/Action Method Remote Code Execution Vulnerability(56944)	Web App Attack
🇮🇩 penjaga BRIN	2025-07-19 16:27:46 (1 year ago)	Bash Remote Code Execution Vulnerability(36729)	Web App Attack
🇮🇩 Burayot	2025-07-19 13:24:43 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 188.253.4.3 (SG/Singapore/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 188.253.4.3 (SG/Singapore/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.159.239.160

🇧🇷 164.152.250.192

🇺🇸 162.216.149.234

🇫🇮 147.185.133.163

🇮🇳 122.187.226.21

🇫🇷 91.231.89.37

🇬🇧 86.38.187.242

🇷🇺 72.56.34.29

🇳🇱 45.148.10.141

🇺🇸 45.33.14.197

🇬🇧 35.203.211.235

🇻🇳 171.244.143.209

🇺🇸 165.154.202.254

🇧🇩 151.158.44.55

🇮🇳 139.59.16.152

🇧🇷 138.122.21.19

🇺🇸 136.109.253.60

🇺🇸 104.22.195.131

🇪🇸 68.221.29.70

🇺🇸 64.62.156.154