AbuseIPDB » 5.255.231.75

5.255.231.75 was found in our database!

This IP was reported 591 times. Confidence of Abuse is 0%: ?

ISP	Yandex enterprise network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS208398
Hostname(s)	5-255-231-75.spider.yandex.com
Domain Name	yandex.net
Country	Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Important Note: 5.255.231.75 is an IP address from within our whitelist belonging to the subnet 5.255.192.0/18, which we identify as: "Yandex".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 5.255.231.75

Whois 5.255.231.75

IP Abuse Reports for 5.255.231.75:

This IP address has been reported a total of 591 times from 55 distinct sources. 5.255.231.75 was first reported on May 21st 2021, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Secure Gateway®️	2024-12-05 22:00:58 (1 month ago)	Report By Secure Gateway Security Team: XSS Injection Attempt Detected	SQL Injection
ALSCO®️	2024-12-03 22:00:55 (1 month ago)	Report By ALSCO Security Team: Suspicious File Upload Attempt	Hacking
Secure Gateway®️	2024-12-03 22:00:54 (1 month ago)	Report By Secure Gateway Security Team: Unauthorized Connection Attempt	Web App Attack
Anonymous	2024-12-03 07:54:06 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
hermawan	2024-12-02 11:48:03 (1 month ago)	[Mon Dec 02 10:18:20.435230 2024] [security2:error] [pid 847673:tid 128507552192192] [client 5.255.2 ... show more[Mon Dec 02 10:18:20.435230 2024] [security2:error] [pid 847673:tid 128507552192192] [client 5.255.231.75:41052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "Z00m_K4JAVmZTM-tXAFm0gAAAw0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[847809] [yKgdAJm9M2o] [Z00m_K4JAVmZTM-tXAFm0gAAAw0] keep_alive=[0] [2024-12-02 10:18:20.435233] [R:Z00m_K4JAVmZTM-tXAFm0gAAAw0] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accept-Encoding:'identity ... show less	Hacking Web App Attack
Anonymous	2024-12-01 22:00:12 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
hermawan	2024-11-30 01:31:20 (1 month ago)	[Sat Nov 30 02:18:20.495362 2024] [security2:error] [pid 817995:tid 126614604072640] [client 5.255.2 ... show more[Sat Nov 30 02:18:20.495362 2024] [security2:error] [pid 817995:tid 126614604072640] [client 5.255.231.75:60898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "Z0oTfGuiRvnnMXJLrSyGzAAAAW4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[818163] [+gTTD6p2Edc] [Z0oTfGuiRvnnMXJLrSyGzAAAAW4] keep_alive=[0] [2024-11-30 02:18:20.495366] [R:Z0oTfGuiRvnnMXJLrSyGzAAAAW4] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accept-Encoding:'identity ... show less	Hacking Web App Attack
Secure Gateway®️	2024-11-28 22:02:48 (1 month ago)	Report By Secure Gateway Security Team: SQL Injection Attempt Detected	Web App Attack
ALSCO®️	2024-11-28 22:02:48 (1 month ago)	Report By ALSCO Security Team: Suspicious File Upload Attempt	Web App Attack
hermawan	2024-11-28 19:14:00 (1 month ago)	[Fri Nov 29 00:47:10.190009 2024] [security2:error] [pid 150554:tid 136281862436544] [client 5.255.2 ... show more[Fri Nov 29 00:47:10.190009 2024] [security2:error] [pid 150554:tid 136281862436544] [client 5.255.231.75:42556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "61"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexImages/3.0; +http://yandex.com/bots) request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2021/06/Infografis-Bulanan_Prakiraan_Hujan_Bulan_AGUSTUS-SEPTEMBER-OKTOBER_Tahun_2021_Update_Dari_Analisis_Bulan_Juni_2021_di_Provinsi_Jawa_Timur.jpg HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/2021/06/Infografis-Bulanan_Prakiraan_Hujan_Bulan_AGUSTUS-SEPTEMBER-OKTOBER_Tahun_2021_Update_Dari_Analisis_Bulan_Juni_2021_di_Provinsi ... show less	Hacking Web App Attack
Mendip_Defender	2024-11-27 00:48:36 (1 month ago)	5.255.231.75 - - [27/Nov/2024:00:48:48 +0000] "GET /index.php/category/5 HTTP/1.0" 200 9303 "-" "Moz ... show more5.255.231.75 - - [27/Nov/2024:00:48:48 +0000] "GET /index.php/category/5 HTTP/1.0" 200 9303 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" ... show less	Bad Web Bot
Secure Gateway®️	2024-11-26 22:02:13 (1 month ago)	Report By Secure Gateway Security Team: Unauthorized Connection Attempt	Hacking
ALSCO®️	2024-11-26 22:02:13 (1 month ago)	Report By ALSCO Security Team: Unsolicited Connection Attempt	SQL Injection
Anonymous	2024-11-26 06:02:50 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Secure Gateway®️	2024-11-25 22:00:28 (1 month ago)	Report By Secure Gateway Security Team: Unauthorized Connection Attempt	Web App Attack