AbuseIPDB » 38.18.20.89

38.18.20.89 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 1%: ?

ISP	Cogent Communications
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	cogentco.com
Country	United States of America
City	Pasadena, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 38.18.20.89

Whois 38.18.20.89

IP Abuse Reports for 38.18.20.89:

This IP address has been reported a total of 4 times from 3 distinct sources. 38.18.20.89 was first reported on June 11th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
findlab	2025-02-15 10:25:01 (1 month ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
hermawan	2024-12-16 21:19:30 (2 months ago)	[Mon Dec 16 18:01:31.150045 2024] [security2:error] [pid 247955:tid 132445517117120] [client 38.18.2 ... show more[Mon Dec 16 18:01:31.150045 2024] [security2:error] [pid 247955:tid 132445517117120] [client 38.18.20.89:54504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.9.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://docs.perplexity.ai/docs/perplexity-bot) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "Z2AIi3DlqCemH3ryV2IrbAAAAps"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[248104] [gBpTGun2V0Q] [Z2AIi3DlqCemH3ryV2IrbAAAAps] keep_alive=[0] [2024-12-16 18:01:31.150049] [R:Z2AIi3DlqCemH3ryV2IrbAAAAps] UA:'Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; ... show less	Hacking Web App Attack
Anonymous	2024-11-24 08:33:41 (3 months ago)	Excessive crawling/scraping	Hacking Brute-Force
hermawan	2024-06-11 11:04:02 (9 months ago)	[Tue Jun 11 18:03:58.839590 2024] [security2:error] [pid 970469:tid 138939866285632] [client 38.18.2 ... show more[Tue Jun 11 18:03:58.839590 2024] [security2:error] [pid 970469:tid 138939866285632] [client 38.18.20.89:17525] [client 38.18.20.89] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /administrator/ /index.php?module /depan/offline/ /OneSignalSDKWorker.js /OneSignalSDKUpdaterWorker.js /worker-analytic-helper-29-11-2022.js /matomo-27-01-2024-v-5-0-1-v1.js /image-loader-worker-v3.js /offline-service-worker-27-01-2024-v5-0-1.js " against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "58"] [id "441003"] [msg "bot downloader Cache-Control no-cache gak punya cookies dan diluar REQUEST_LINE line"] [data "Matched Data: no-cache found within REQUEST_LINE: GET /index.php/informasi-iklim/artikel/126-artikel-perubahan-iklim HTTP/1.1 request_line = GET /index.php/informasi-iklim/artikel/126-artikel-perubahan-iklim HTTP/1.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/artikel/126 ... show less	Hacking Web App Attack