Total reports
4 from
4 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
🇮🇩
hermawan
|
|
[Thu Oct 22 10:28:44.112895 2026] [security2:error] [pid 891002:tid 140093327120064] [client 189.63.14.49:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/core ...
show more
[Thu Oct 22 10:28:44.112895 2026] [security2:error] [pid 891002:tid 140093327120064] [client 189.63.14.49:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:referer: https://www.yahoo.go.id/ request_line = GET /index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/4013-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2020/555558407-analisis-dan-prediksi-dasarian-dinamika-atmosfer-laut-dan-prediksi-curah-hujan-update-dasarian-i-tanggal-1-10-desember-2020 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/4013-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2020/555558407-analisis-dan-prediksi-dasarian-dinamika-atmosfer-laut-
...
show less
|
Email Spam
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 189.63.14.49 (bd3f0e31.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:05:24.753572 2026] [security2:error] [pid 3319:tid 3319] [client 189. ...
show more
(mod_security) mod_security (id:210350) triggered by 189.63.14.49 (bd3f0e31.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:05:24.753572 2026] [security2:error] [pid 3319:tid 3319] [client 189.63.14.49:8669] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "aticdH3TacuwV2rG5BjyowAAABw"], referer: https://cbcfargo.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
ksol-hostmaster
|
|
2026/09/30 17:18:37 [error] 19856#104864: *4002463 access forbidden by rule, client: 189.63.14.49, server: new.hondaforum.hu, request: "GET /topic/muszaki-cikkek-szorakoztato-elektronika-haztartasi-gepek/289908/ HTTP/1.1", host: "new.hondaforum.hu"
. ...
show more
2026/09/30 17:18:37 [error] 19856#104864: *4002463 access forbidden by rule, client: 189.63.14.49, server: new.hondaforum.hu, request: "GET /topic/muszaki-cikkek-szorakoztato-elektronika-haztartasi-gepek/289908/ HTTP/1.1", host: "new.hondaforum.hu"
...
show less
|
Web Spam
|
