JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.232.121.31

46.232.121.31 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	Unknown
Usage Type	Unknown
ASN	Unknown
Domain Name	Unknown
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.232.121.31

Whois 46.232.121.31

IP Abuse Reports for 46.232.121.31:

This IP address has been reported a total of 28 times from 12 distinct sources. 46.232.121.31 was first reported on April 26th 2023, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 nfsec.pl	2025-12-21 04:30:34 (8 months ago)	Detected: TCP scan on port: 3389 with flags: SYN	Port Scan
🇮🇩 hermawan	2025-07-13 13:43:44 (1 year ago)	[Sun Jul 13 20:39:48.934091 2025] [security2:error] [pid 105096:tid 140523981485760] [client 46.232. ... show more [Sun Jul 13 20:39:48.934091 2025] [security2:error] [pid 105096:tid 140523981485760] [client 46.232.121.31:39507] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "372"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 46.232.121.31 request_line = GET /__ HTTP/1.1 Request URI RAW = /__ Request Basename = __"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/__"] [unique_id "aHO3JNVO1eBZ6xqbJqfFJQAAAMw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[105135] [UC1PrQ9FTok] [aHO3JNVO1eBZ6xqbJqfFJQAAAMw] keep_alive=[0] [2025-07-13 20:39:48.934099] [R:aHO3JNVO1eBZ6xqbJqfFJQAAAMw] UA:'Mozilla/5.0 (SS; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0' Host:'staklim-jatim.bmkg.go.i ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-12 22:32:59 (1 year ago)	[Sun Jul 13 05:32:06.915365 2025] [security2:error] [pid 162750:tid 139830830814912] [client 46.232. ... show more [Sun Jul 13 05:32:06.915365 2025] [security2:error] [pid 162750:tid 139830830814912] [client 46.232.121.31:46565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/api" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /api found within REQUEST_FILENAME: /api/timelion/run request_line = POST /api/timelion/run HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/api/timelion/run"] [unique_id "aHLiZn53Jyo4KURX2ry-hgAAABQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[162797] [/Noc/wLxu2E] [aHLiZn53Jyo4KURX2ry-hgAAABQ] keep_alive=[0] [2025-07-13 05:32:06.915368] [R:aHLiZn53Jyo4KURX2ry-hgAAABQ] UA:'Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accept-Encoding:'gzip Accept-La ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-10 15:31:46 (1 year ago)	[Thu Jul 10 22:31:00.788828 2025] [security2:error] [pid 25852:tid 140158523397824] [client 46.232.1 ... show more [Thu Jul 10 22:31:00.788828 2025] [security2:error] [pid 25852:tid 140158523397824] [client 46.232.121.31:42033] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "371"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 46.232.121.31 request_line = GET / HTTP/1.1 Request URI RAW = / Request Basename = "] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aG_ctIWhUWHJhToBTzI2dwAAAAY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[25919] [l8kx4dRWkGE] [aG_ctIWhUWHJhToBTzI2dwAAAAY] keep_alive=[0] [2025-07-10 22:31:00.788836] [R:aG_ctIWhUWHJhToBTzI2dwAAAAY] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/6 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-10 07:56:05 (1 year ago)	[Thu Jul 10 14:55:02.979804 2025] [security2:error] [pid 296462:tid 140400627001024] [client 46.232. ... show more [Thu Jul 10 14:55:02.979804 2025] [security2:error] [pid 296462:tid 140400627001024] [client 46.232.121.31:34723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/logo-eoffice.php" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "68"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /logo-eoffice.php found within REQUEST_FILENAME: /images/logo/logo-eoffice.php request_line = GET /images/logo/logo-eoffice.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/logo/logo-eoffice.php"] [unique_id "aG9x1rDMu2FRNj8rtl1hOAAAAAc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[296497] [KJTMgg5EYOI] [aG9x1rDMu2FRNj8rtl1hOAAAAAc] keep_alive=[0] [2025-07-10 14:55:02.979809] [R:aG9x1rDMu2FRNj8rtl1hOAAAAAc] UA:'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36' Host:'staklim-jatim ... show less	Hacking Web App Attack
🇮🇩 penjaga BRIN	2025-07-09 23:43:55 (1 year ago)	Remote.CMD.Shell	Web App Attack
🇮🇩 hermawan	2025-07-09 18:07:31 (1 year ago)	[Thu Jul 10 01:04:55.684463 2025] [security2:error] [pid 21619:tid 140404376704704] [client 46.232.1 ... show more [Thu Jul 10 01:04:55.684463 2025] [security2:error] [pid 21619:tid 140404376704704] [client 46.232.121.31:41697] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "163"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: config-create found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /?+config-create+/&lang=../../../../../../../../../../../usr/local/lib/php/pearcmd&/safedog()+LSTGHOpsk9.log HTTP/1.1 Request URI RAW = /?+config-create+/&lang=../../../../../../../../../../../usr/local/lib/php/pearcmd&/safedog()+LSTGHOpsk9.log Request Basename = "] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aG6vRy4fFybj9IWFQLGvAwAAABU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[21667] [ ... show less	Hacking Web App Attack
🇮🇩 penjaga BRIN	2025-07-09 16:58:28 (1 year ago)	Eyou Email System Remote Command Execution Vulnerability(91329)	Web App Attack
🇮🇩 penjaga BRIN	2025-07-09 15:16:26 (1 year ago)	Common web attack.-111	Web App Attack
🇮🇩 penjaga BRIN	2025-03-23 17:13:47 (1 year ago)	HTTP SQL Injection Attempt(59128)	Web App Attack
🇮🇩 penjaga BRIN	2025-03-23 01:19:55 (1 year ago)	HTTP SQL Injection Attempt(30514)	Web App Attack
🇮🇩 penjaga BRIN	2025-03-23 00:41:57 (1 year ago)	Apache Log4j Remote Code Execution Vulnerability(91991)	Web App Attack
🇮🇩 penjaga BRIN	2025-03-22 16:56:30 (1 year ago)	HTTP SQL Injection Attempt(59128)	Web App Attack
🇮🇩 penjaga BRIN	2025-03-22 16:36:24 (1 year ago)	Atlassian Confluence Directory Traversal Vulnerability(55462)	Web App Attack
🇮🇩 penjaga BRIN	2025-03-14 16:19:49 (1 year ago)	Bash Remote Code Execution Vulnerability(36729)	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.126.194.62

🇧🇩 202.191.122.201

🇧🇩 165.101.222.20

🇰🇷 118.36.136.12

🇸🇬 43.173.180.84

🇨🇦 208.96.233.67

🇺🇸 208.59.49.108

🇹🇬 196.168.212.63

🇧🇪 188.95.55.119

🇮🇳 152.32.159.79

🇷🇺 95.153.227.82

🇫🇷 91.196.152.53

🇸🇬 43.172.195.246

🇮🇳 20.235.136.168

🇳🇱 20.54.134.42

🇺🇸 2604:a940:301:225:0:10::

🇺🇸 216.126.225.6

🇩🇪 213.209.159.16

🇰🇷 210.97.90.185

🇮🇳 182.95.178.154