JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.187.10.2

5.187.10.2 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 44%: ?

44%

ISP	LLC Skytel
Usage Type	Fixed Line ISP
ASN	AS49628
Domain Name	skytel.ge
Country	🇬🇪 Georgia
City	Tbilisi, Tbilisi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.187.10.2

Whois 5.187.10.2

IP Abuse Reports for 5.187.10.2:

This IP address has been reported a total of 74 times from 47 distinct sources. 5.187.10.2 was first reported on June 26th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NetVexor	2026-08-23 12:56:54 (1 day ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
Anonymous	2026-08-23 07:13:20 (1 day ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-08-20 14:59:34 (4 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-18 02:44:39 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 MPL	2026-08-15 00:35:34 (1 week ago)	tcp/22 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-08-09 18:52:39 (2 weeks ago)	2026-08-09 18:52:39 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇩🇪 EGP Abuse Dept	2026-08-07 02:24:14 (2 weeks ago)	Scraping webshop URLs (www.ngs.nl), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-04 11:55:47 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-28 20:13:51 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-12 15:00:29 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 ALPHANET	2026-06-25 03:45:05 (2 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇮🇩 hermawan	2026-06-17 14:03:08 (2 months ago)	[Wed Jun 17 21:03:04.768587 2026] [security2:error] [pid 1771527:tid 139898046379712] [client 5.187. ... show more [Wed Jun 17 21:03:04.768587 2026] [security2:error] [pid 1771527:tid 139898046379712] [client 5.187.10.2:60040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ajKpGPq4As2kAPLDpH-BWAABgwA"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1771528] [abGrhDMhrYQ] [ajKpGPq4As2kAPLDpH-BWAABgwA] keep_alive=[1] [2026-06-17 21:03:04.768590] [R:ajKpGPq4As2kAPLDpH-BWAABgwA] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 16_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/385.0.802777482 Mobile/15E148 Safari/604.1' Host:'staklim-jatim.bmkg.go ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-31 06:17:37 (2 months ago)	[Sun May 31 13:17:32.780811 2026] [security2:error] [pid 919699:tid 140573594838720] [client 5.187.1 ... show more [Sun May 31 13:17:32.780811 2026] [security2:error] [pid 919699:tid 140573594838720] [client 5.187.10.2:53271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "ahvSfMfzeLmhzWiSkj16_gABBAg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[919708] [ZUd+CBfUIvI] [ahvSfMfzeLmhzWiSkj16_gABBAg] keep_alive=[1] [2026-05-31 13:17:32.780815] [R:ahvSfMfzeLmhzWiSkj16_gABBAg] UA:'M ... show less	Email Spam Hacking
🇬🇧 Oakley	2026-05-13 22:32:21 (3 months ago)	(mod_security) mod_security (id:900210) triggered by 5.187.10.2 (GE/Georgia/-): 2 in the last 900 se ... show more (mod_security) mod_security (id:900210) triggered by 5.187.10.2 (GE/Georgia/-): 2 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-05-06 06:25:05 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 5.187.10.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 5.187.10.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 02:24:54.744772 2026] [security2:error] [pid 10778:tid 10778] [client 5.187.10.2:37868] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/gutter-system-installations-orlando-fl/ www.raintechgutters.com"] [unique_id "afretvTRl6oVkxzvHhAFMwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.109.252.219

🇮🇷 217.60.255.130

🇧🇷 205.210.31.211

🇺🇸 192.178.112.155

🇵🇾 181.91.86.148

🇺🇸 172.252.120.170

🇺🇸 172.234.139.164

🇺🇸 167.71.189.91

🇺🇸 143.42.164.182

🇨🇭 107.189.1.9

🇫🇷 85.217.140.19

🇳🇱 45.148.10.157

🇸🇬 45.78.202.217

🇨🇳 36.4.142.156

🇨🇦 20.48.163.91

🇳🇱 195.170.172.216

🇲🇽 189.153.118.169

🇧🇷 168.232.221.164

🇺🇸 152.32.234.97

🇧🇷 152.32.199.112