AbuseIPDB » 213.180.203.91

213.180.203.91 was found in our database!

This IP was reported 388 times. Confidence of Abuse is 0%: ?

ISP	Yandex LLC
Usage Type	Search Engine Spider
Hostname(s)	213-180-203-91.spider.yandex.com
Domain Name	yandex.net
Country	Russian Federation
City	Moscow, Moskva

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 213.180.203.91 is an IP address from within our whitelist. Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

According to our records, this IP belongs to the subnet 213.180.192.0/19, identified as: "Yandex"

Report 213.180.203.91

Whois 213.180.203.91

IP Abuse Reports for 213.180.203.91:

This IP address has been reported a total of 388 times from 53 distinct sources. 213.180.203.91 was first reported on January 3rd 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-03-26 10:50:34 (5 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
hermawan	2024-03-24 06:23:33 (5 months ago)	[Sun Mar 24 13:23:31.678958 2024] [security2:error] [pid 31693:tid 130038884206144] [client 213.180. ... show more[Sun Mar 24 13:23:31.678958 2024] [security2:error] [pid 31693:tid 130038884206144] [client 213.180.203.91:54182] [client 213.180.203.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "36"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "Zf_G49efH2NOID0_xROHMwAAAQA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[31730] [poGJGDqfbtI] [Zf_G49efH2NOID0_xROHMwAAAQA] keep_alive=[0] [2024-03-24 13:23:31.678962] [R:Zf_G49efH2NOID0_xROHMwAAAQA] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accep ... show less	Hacking Web App Attack
Bytemark	2024-03-19 08:35:40 (5 months ago)	213.180.203.91 - - [19/Mar/2024:08:35:38 +0000] "GET /course/access-to-he-diploma/allied-health-prof ... show more213.180.203.91 - - [19/Mar/2024:08:35:38 +0000] "GET /course/access-to-he-diploma/allied-health-professions/option-2 HTTP/1.1" 404 7210 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" show less	Brute-Force Web App Attack
advena	2024-03-16 12:30:56 (6 months ago)	213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-03-16T12:19:26Z after violating WAF directiv ... show more213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-03-16T12:19:26Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
advena	2024-03-15 12:45:57 (6 months ago)	213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-03-15T12:31:25Z after violating WAF directiv ... show more213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-03-15T12:31:25Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
Bytemark	2024-03-10 19:57:47 (6 months ago)	213.180.203.91 - - [10/Mar/2024:19:57:46 +0000] "GET /course/access-to-he-diploma/medicine/option-1 ... show more213.180.203.91 - - [10/Mar/2024:19:57:46 +0000] "GET /course/access-to-he-diploma/medicine/option-1 HTTP/1.1" 404 7210 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" show less	Brute-Force Web App Attack
Bytemark	2024-03-07 18:50:09 (6 months ago)	213.180.203.91 - - [07/Mar/2024:18:50:08 +0000] "GET /phpBB3/viewtopic.php?t=1553 HTTP/1.1" 301 7360 ... show more213.180.203.91 - - [07/Mar/2024:18:50:08 +0000] "GET /phpBB3/viewtopic.php?t=1553 HTTP/1.1" 301 7360 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" show less	Brute-Force Web App Attack
hermawan	2024-02-22 23:15:12 (6 months ago)	[Fri Feb 23 06:15:09.148428 2024] [security2:error] [pid 549169:tid 127119982069312] [client 213.180 ... show more[Fri Feb 23 06:15:09.148428 2024] [security2:error] [pid 549169:tid 127119982069312] [client 213.180.203.91:37172] [client 213.180.203.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "18"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/2015-04-16-10-15-17/1023-klimatologi/agroklimatologi/kalender-tanam-katam-terpadu/kalender-tanam-katam-terpadu-provinsi-jawa-timur/kalender-tanam-katam-terpadu-kabupaten-pacitan/kalender-tanam-katam-terpadu-kecamatan-ngadirojo-kabupaten-pacitan/kalender-tanam-katam-terpadu-kecamatan-ngadirojo-kabupaten-pacitan-tahun-2016-2017/1430-kalender-tanam-kata..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/2015 ... show less	Hacking Web App Attack
advena	2024-02-21 17:15:56 (6 months ago)	213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-02-21T17:00:59Z after violating WAF directiv ... show more213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-02-21T17:00:59Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
hermawan	2024-02-21 12:19:08 (6 months ago)	[Wed Feb 21 19:19:03.705353 2024] [security2:error] [pid 479523:tid 136531360613952] [client 213.180 ... show more[Wed Feb 21 19:19:03.705353 2024] [security2:error] [pid 479523:tid 136531360613952] [client 213.180.203.91:45746] [client 213.180.203.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "18"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "ZdXqNxSt-j53qW_XD0mCrwAAAAQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[479564] [3RAdVbuVN1U] [ZdXqNxSt-j53qW_XD0mCrwAAAAQ] keep_alive=[0] [2024-02-21 19:19:03.705356] [R:ZdXqNxSt-j53qW_XD0mCrwAAAAQ] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Acc ... show less	Hacking Web App Attack
spyra.rocks	2024-02-19 08:05:41 (6 months ago)		Bad Web Bot
advena	2024-02-16 16:31:00 (7 months ago)	213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-02-16T16:24:37Z after violating WAF directiv ... show more213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-02-16T16:24:37Z after violating WAF directive: 5383d2dd270e4394b6763efc88c82bd6. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
advena	2024-02-14 22:30:56 (7 months ago)	213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-02-14T22:16:11Z after violating WAF directiv ... show more213.180.203.91 (AS13238 YANDEX) was intercepted at 2024-02-14T22:16:11Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
hermawan	2024-02-14 06:37:35 (7 months ago)	[Wed Feb 14 13:37:34.200495 2024] [security2:error] [pid 26978:tid 123305602319936] [client 213.180. ... show more[Wed Feb 14 13:37:34.200495 2024] [security2:error] [pid 26978:tid 123305602319936] [client 213.180.203.91:44652] [client 213.180.203.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "12"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "ZcxfruZ2PvAlDqjp62ccHAAAANI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[27020] [tnn0vuHLAfs] [ZcxfruZ2PvAlDqjp62ccHAAAANI] keep_alive=[0] [2024-02-14 13:37:34.200498] [R:ZcxfruZ2PvAlDqjp62ccHAAAANI] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accep ... show less	Hacking Web App Attack
hermawan	2024-02-13 06:09:00 (7 months ago)	[Tue Feb 13 13:08:58.638407 2024] [security2:error] [pid 187667:tid 124274241177152] [client 213.180 ... show more[Tue Feb 13 13:08:58.638407 2024] [security2:error] [pid 187667:tid 124274241177152] [client 213.180.203.91:60796] [client 213.180.203.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "12"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "ZcsHeiqI6_DERGm1xbOaBwAAAXI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[187729] [1pbbOo2fJYQ] [ZcsHeiqI6_DERGm1xbOaBwAAAXI] keep_alive=[0] [2024-02-13 13:08:58.638410] [R:ZcsHeiqI6_DERGm1xbOaBwAAAXI] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Acc ... show less	Hacking Web App Attack