This IP address has been reported a total of
456
times from
81 distinct
sources.
5.32.176.116 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ...
show moreAttribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Aggressive search filter manipulation / web scraper probe on port 443 | URI: Excessive filters used: /catalogsearch/result/?product_vc_mcu=105%2C106&product_vc_type=99%2C101%2C103&q=ex+90 | UA: Opera/8.11.(Windows NT 11.0; fil-PH) Presto/2.9.175 Version/12.00 | (Magento Site)
show less
[Fri May 29 13:19:09.007114 2026] [security2:error] [pid 1398193:tid 139852109571776] [client 5.32.1 ...
show more[Fri May 29 13:19:09.007114 2026] [security2:error] [pid 1398193:tid 139852109571776] [client 5.32.176.116:50698] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan Request Basename = 555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "langua
...
show less
Blocked by UFW [8080/tcp]
Source port: 57504
TTL: 240
Packet length: 40
TOS: 0x00
This report was g ...
show moreBlocked by UFW [8080/tcp]
Source port: 57504
TTL: 240
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.32.176.116
2026-01-0 ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.32.176.116
2026-01-09 19:13:27 /
show less
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.32.176.116
2025-12-2 ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.32.176.116
2025-12-24 01:13:53 ["enable","system","shell","sh","cat /proc/mounts; /bin/busybox BDYZT"]
show less