Total reports
10 from
9 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
🇺🇸
RAP
|
|
2026-10-11 19:48:02 UTC Unauthorized activity to TCP port 22. SSH
|
SSH
|
|
🇺🇸
鬼影233
|
|
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
|
Bad Web Bot
|
|
🇸🇬
garrymenata
|
|
200.111.225.114 - - [24/Aug/2026:02:45:47 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
200.111.225.114 - - [24/Aug/2026:02:45:49 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux ...
show more
200.111.225.114 - - [24/Aug/2026:02:45:47 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
200.111.225.114 - - [24/Aug/2026:02:45:49 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
200.111.225.114 - - [24/Aug/2026:02:45:51 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
...
show less
|
DDoS Attack
Bad Web Bot
|
|
🇯🇵
jay hung
|
|
2026-07-22T06:52:10.069292+00:00 quarktech kernel: [3347792.165816] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=200.111.225.114 DST=172.237.20.248 LEN=735 TOS=0x00 PREC=0x40 TTL=41 ID=24565 DF PROTO=UDP SPT=43371 DPT=23 ...
show more
2026-07-22T06:52:10.069292+00:00 quarktech kernel: [3347792.165816] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=200.111.225.114 DST=172.237.20.248 LEN=735 TOS=0x00 PREC=0x40 TTL=41 ID=24565 DF PROTO=UDP SPT=43371 DPT=2366 LEN=715
...
show less
|
Port Scan
|
|
Anonymous
|
|
denied traffic to a non-approved destination port. destination port 62244.
|
Port Scan
|
|
🇮🇩
securejdprop
|
|
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 281).
|
Hacking
Web App Attack
|
|
🇩🇪
Admins@FBN
|
|
FW-PortScan: Traffic Blocked srcport=42111 dstport=5524
|
Port Scan
|
|
Anonymous
|
|
Unauthorized connection attempt
|
Port Scan
Hacking
Exploited Host
|
|
🇮🇩
hermawan
|
|
[Fri Nov 28 22:02:42.874455 2025] [security2:error] [pid 301344:tid 140464724358848] [client 200.111.225.114:1718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/corer ...
show more
[Fri Nov 28 22:02:42.874455 2025] [security2:error] [pid 301344:tid 140464724358848] [client 200.111.225.114:1718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "252"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Brave found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/90.0.4430.72 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-of-all-tags/distribusi-curah-hujan-dasarian-propinsi-jawa-timur-tahun-2018 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/distribusi-curah-hujan-dasarian-propinsi-jawa-timur-tahun-2018"] [unique_id "aSm5kgx9DPnn_px04_uNKAAAAFY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[301393] [AVvW6+gTox
...
show less
|
Hacking
Web App Attack
|
|
Anonymous
|
|
scanning http requests from known botnet
|
Web App Attack
|
