This IP address has been reported a total of
6
times from
6 distinct
sources.
189.217.213.15 was first reported on
May 30th 2026 , and the most recent report was
4 hours ago Indonesia
with 1
report;
Singapore
with 1
report.
The most common categories in these recent reports were:
Blog Spam
1
time;
Email Spam
1
time;
Exploited Host
1
time;
Web Spam
1
time;
Brute-Force
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-12 01:26:53
(4 hours ago)
[Mon Oct 12 08:26:52.729883 2026] [security2:error] [pid 1653389:tid 140629996705472] [client 189.21 ...
show more
[Mon Oct 12 08:26:52.729883 2026] [security2:error] [pid 1653389:tid 140629996705472] [client 189.217.213.15:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "ubuntu" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: ubuntu found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0 request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "asw3XMAAt3WU17UIgbTPdwAAAMc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1653423] [kqfClxpDeAc] [asw3XMAAt3WU17UIgbTPdwAAAMc] keep_alive=[0] [2026-10-12 08:26:52.729888] [R:asw3XMAAt3WU17UIgbTPdwAAAMc] UA:'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'*/*' A
...
show less
Email Spam
Hacking
🇸🇬
mypatricks
2026-08-26 21:47:21
(1 month ago)
189.217.213.15 | Port: 12214 | DNS: customer-189-217-213-15.cablevision.net.mx 2026-08-27T05:47:20+0 ...
show more
189.217.213.15 | Port: 12214 | DNS: customer-189-217-213-15.cablevision.net.mx 2026-08-27T05:47:20+08:00 America/Mexico_City | IPs Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /hashtag/%E9%A3%9E%E6%9C%BA?9d70a1cf25d76ba3f30b60b7865a=JPY&code=JPY | Ref: - | Country: MX/Mexico/−06:00 IP City: Mexico City Windows a31608c6abf1f096-DFW/Dallas, TX, United States 1 hits/0 secs Browser 3
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇵🇱
bmino.pl
2026-07-31 03:33:50
(2 months ago)
Autoban IP(2): 189.217.213.15 - Hostname: Cablevisión, S.A. de C.V. - City: Gustavo Adolfo Madero - ...
show more
Autoban IP(2): 189.217.213.15 - Hostname: Cablevisión, S.A. de C.V. - City: Gustavo Adolfo Madero - Region: Mexico City - Country: Mexico - Location: - Organization: Cablevisión, S.A. de C.V - failed attempts.
show less
Web App Attack
🇩🇪
botreporter
2026-07-30 03:10:47
(2 months ago)
botnet ignoring robots.txt
Bad Web Bot
🇫🇷
Sklurk
2026-07-16 05:31:25
(2 months ago)
Web App Attack
Web App Attack
🇨🇦
polycoda
2026-05-30 11:37:45
(4 months ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
Showing 1 to
6
of 6 reports
