AbuseIPDB » 213.180.203.129

213.180.203.129 was found in our database!

This IP was reported 715 times. Confidence of Abuse is 0%: ?

ISP	Yandex enterprise network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208398
Hostname(s)	213-180-203-129.spider.yandex.com
Domain Name	yandex.net
Country	Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Important Note: 213.180.203.129 is an IP address from within our whitelist belonging to the subnet 213.180.192.0/19, which we identify as: "Yandex".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 213.180.203.129

Whois 213.180.203.129

IP Abuse Reports for 213.180.203.129:

This IP address has been reported a total of 715 times from 48 distinct sources. 213.180.203.129 was first reported on December 24th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rh24	2023-06-27 20:19:46 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.180.203.129 (RU/ ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.180.203.129 (RU/Russia/213-180-203-129.spider.yandex.com) show less	Bad Web Bot
hermawan	2023-06-27 02:36:57 (1 year ago)	[Tue Jun 27 09:36:53.613261 2023] [security2:error] [pid 398790:tid 140610694530624] [client 213.180 ... show more[Tue Jun 27 09:36:53.613261 2023] [security2:error] [pid 398790:tid 140610694530624] [client 213.180.203.129:52308] [client 213.180.203.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "ZJpLRQpGG5GfcIIKCP5M_gAAAf8"] [staklim-malang.info] [staklim-malang.info] top=[398903] [Aq8LV9Me/0g] [ZJpLRQpGG5GfcIIKCP5M_gAAAf8] keep_alive=[0] [2023-06-27 09:36:53.613266] [R:ZJpLRQpGG5GfcIIKCP5M_gAAAf8] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-malang.info' ACCEPT:'/' Accept-Encoding:'identity ... show less	Hacking Web App Attack
Anonymous	2023-06-21 04:49:41 (1 year ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
advena	2023-06-21 00:15:56 (1 year ago)	213.180.203.129 (AS13238 YANDEX) was intercepted at 2023-06-21T00:01:16Z after violating WAF directi ... show more213.180.203.129 (AS13238 YANDEX) was intercepted at 2023-06-21T00:01:16Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
advena	2023-06-20 14:15:54 (1 year ago)	213.180.203.129 (AS13238 YANDEX) was intercepted at 2023-06-20T14:02:01Z after violating WAF directi ... show more213.180.203.129 (AS13238 YANDEX) was intercepted at 2023-06-20T14:02:01Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
Bytemark	2023-06-20 01:39:39 (1 year ago)	213.180.203.129 - - [20/Jun/2023:02:39:38 +0100] "GET /phpBB3/viewforum.php?f=25 HTTP/1.1" 301 7476 ... show more213.180.203.129 - - [20/Jun/2023:02:39:38 +0100] "GET /phpBB3/viewforum.php?f=25 HTTP/1.1" 301 7476 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" show less	Brute-Force Web App Attack
Anonymous	2023-06-19 19:59:23 (1 year ago)	port scan and connect, tcp 443 (https)	Port Scan
rh24	2023-06-19 03:42:55 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.180.203.129 (RU/ ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.180.203.129 (RU/Russia/213-180-203-129.spider.yandex.com) show less	Bad Web Bot
hermawan	2023-06-19 03:22:42 (1 year ago)	[Mon Jun 19 10:22:38.619589 2023] [security2:error] [pid 9703:tid 140052365567552] [client 213.180.2 ... show more[Mon Jun 19 10:22:38.619589 2023] [security2:error] [pid 9703:tid 140052365567552] [client 213.180.203.129:47234] [client 213.180.203.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "ZI_J_rwq071p_7SkhKLftAAAANc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[9836] [7zXdC7PhGnc] [ZI_J_rwq071p_7SkhKLftAAAANc] keep_alive=[0] [2023-06-19 10:22:38.619593] [R:ZI_J_rwq071p_7SkhKLftAAAANc] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accept-Encod ... show less	Hacking Web App Attack
mclo	2023-05-28 21:57:16 (2 years ago)	213.180.203.129 - - [28/May/2023:23:57:14 +0200] "GET /robots.txt HTTP/1.1" 404 162 "-" "Mozilla/5.0 ... show more213.180.203.129 - - [28/May/2023:23:57:14 +0200] "GET /robots.txt HTTP/1.1" 404 162 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" ... show less	Web App Attack
ThreatBook.io	2023-05-24 22:07:56 (2 years ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/213.180.203.129<br ... show moreThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/213.180.203.129 2023-05-24 00:55:40 / show less	Web App Attack
rh24	2023-05-20 06:44:10 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.180.203.129 (RU/ ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.180.203.129 (RU/Russia/213-180-203-129.spider.yandex.com) show less	Bad Web Bot
Mediashaker	2023-05-19 00:02:54 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.180.203.129 (RU/ ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 213.180.203.129 (RU/Russia/213-180-203-129.spider.yandex.com) show less	Bad Web Bot
System27	2023-05-17 15:56:21 (2 years ago)	Automated System Attack detected on VPS System, Threat level: 100%. Reason(s) for report: Multiple A ... show moreAutomated System Attack detected on VPS System, Threat level: 100%. Reason(s) for report: Multiple Auth Attempts (5) failed. show less	SSH
IrisFlower	2023-05-16 23:10:06 (2 years ago)	Unauthorized connection attempt detected from IP address 213.180.203.129 to port 443 [J]	Port Scan Hacking

Showing 661 to 675 of 715 reports

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs:

124.43.4.17

45.95.146.126

135.237.125.27

92.118.39.57

195.184.76.243

117.35.203.204

116.110.26.234

27.204.196.57

20.169.104.58

195.178.191.5

152.32.253.152

38.252.245.172

193.233.48.138

45.55.186.92

210.66.115.238

195.184.76.110

182.95.47.126

45.33.94.76

222.96.6.132

167.172.111.28