JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

202.164.218.73

Recent Activity

Abuse Confidence Score

4% Caution

7 reports

3 reporters · latest 15 hours ago

ISP: PT Indonesia Comnets Plus
Usage Type: Fixed Line ISP
ASN: AS9341
Domain Name: iconpln.net.id
Country: 🇮🇩 Indonesia
City: Terbanggi Besar, Lampung

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

7 from 3 distinct reporters

First reported

December 26th 2024

Most recent report

15 hours ago

Last 60 days

Top reporter locations 🇮🇩 Indonesia 4

Most common categories Hacking 4 Email Spam 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-11-15 04:02:46 UTC · (15 hours ago)	[Sun Nov 15 11:02:46.310527 2026] [security2:error] [pid 687984:tid 140517237061312] [client 202.164.218.73:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/m ... show more [Sun Nov 15 11:02:46.310527 2026] [security2:error] [pid 687984:tid 140517237061312] [client 202.164.218.73:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "214"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=484&id=1175%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-18-24-oktober-2016&start=100 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=484&id=1175%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-18-24-oktober-2016&star..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "avku5p4T6g4 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-11-13 02:42:30 UTC · (2 days ago)	[Fri Nov 13 09:42:29.311779 2026] [security2:error] [pid 394791:tid 139646449194688] [client 202.164.218.73:0] ModSecurity: Access denied with code 403 (phase 3). Operator EQ matched 1 at TX:early_blocking. [file "/etc/modsecurity/coreruleset-4.29.0/ ... show more [Fri Nov 13 09:42:29.311779 2026] [security2:error] [pid 394791:tid 139646449194688] [client 202.164.218.73:0] ModSecurity: Access denied with code 403 (phase 3). Operator EQ matched 1 at TX:early_blocking. [file "/etc/modsecurity/coreruleset-4.29.0/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "231"] [id "959101"] [msg "Outbound Anomaly Score Exceeded in phase 3 (Total Score: 4)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/search/"] [unique_id "avZ5FUF_Nm1MnPjKvLGazwAAA0Y"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[394894] [7LMUYV8kYBU] [avZ5FUF_Nm1MnPjKvLGazwAAA0Y] keep_alive=[0] [2026-11-13 09:42:29.311788] [R:avZ5FUF_Nm1MnPjKvLGazwAAA0Y] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/157.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id' COOKIE:'fb66df88cff4414b0afe6309464db212=4717d775d2853b953d80c6be71c9297f; _bmkg_jatim ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-10-22 01:55:12 UTC · (3 weeks ago)	[Thu Oct 22 08:55:11.321308 2026] [security2:error] [pid 820655:tid 140093067077312] [client 202.164.218.73:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.j ... show more [Thu Oct 22 08:55:11.321308 2026] [security2:error] [pid 820655:tid 140093067077312] [client 202.164.218.73:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /favicon.ico HTTP/1.1 request_line = GET /favicon.ico HTTP/1.1 Request URI RAW = /favicon.ico Request Basename = favicon.ico"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/favicon.ico"] [unique_id "atls_wiUHt9hQNq8HNKpZwAAABY"], re ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-09-22 07:32:57 UTC · (1 month ago)	Captured JA4H: ge11n_04726067e501 \| Log: 202.164.218.73 - - [22/Sep/2026:10:27:27 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/1.1" 200 16344 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Windows NT 10.0; Win64; ... show more Captured JA4H: ge11n_04726067e501 \| Log: 202.164.218.73 - - [22/Sep/2026:10:27:27 +0700] "GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/1.1" 200 16344 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,referer,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry... ... show less	Email Spam Hacking
🇮🇩 sockominfo	2026-08-31 11:00:28 UTC · (2 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇮🇩 penjaga BRIN	2026-05-12 10:10:41 UTC · (6 months ago)	Web application attack	Web App Attack
🇮🇩 penjaga BRIN	2024-12-26 14:05:01 UTC · (1 year ago)	Multiple web server 400 error codes from same source ip.-111	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 177.174.109.143

🇧🇬 158.173.89.122

🇺🇸 24.136.29.233

🇳🇱 185.93.89.167

🇫🇮 147.185.133.221

🇳🇱 178.62.133.230

🇺🇸 66.132.172.233

🇷🇺 45.8.251.28

🇿🇦 40.123.240.128

🇨🇦 34.130.49.77

🇳🇱 213.209.159.210

🇻🇳 210.245.30.140

🇹🇷 85.153.238.112

🇺🇸 66.132.195.171

🇸🇬 47.128.35.139

🇳🇱 35.214.229.219

🇸🇬 34.143.224.212

🇹🇷 5.252.96.184

🇦🇺 158.178.141.16

🇺🇸 152.32.206.181