AbuseIPDB » 72.63.18.3
72.63.18.3
This IP was reported 7 times. Confidence of
Abuse
is 4% : ?
ISP
UAB code200
Usage Type
Data Center/Web Hosting/Transit
ASN
AS30058
Domain Name
code200.global
Country
🇺🇸
United States of America
City
Ashburn, Virginia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 72.63.18.3 :
This IP address has been reported a total of
7
times from
1 distinct
source.
72.63.18.3 was first reported on
May 25th 2026 , and the most recent report was
21 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-06-20 16:32:15
(21 hours ago)
[Sat Jun 20 23:32:10.822696 2026] [security2:error] [pid 317011:tid 140111231559360] [client 72.63.1 ...
show more
[Sat Jun 20 23:32:10.822696 2026] [security2:error] [pid 317011:tid 140111231559360] [client 72.63.18.3:39850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ajbAij4LPqD_Pu4VQqLImQABjwQ"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[317016] [Oolw8/FyPVY] [ajbAij4LPqD_Pu4VQqLImQABjwQ] keep_alive=[1] [2026-06-20 23:32:10.822700] [R:ajbAij4LPqD_Pu4VQqLImQABjwQ] UA:'Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581' Host:'staklim-jatim.bmkg.
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-18 22:56:15
(2 days ago)
[Fri Jun 19 05:56:11.499517 2026] [security2:error] [pid 1026272:tid 140710878611136] [client 72.63. ...
show more
[Fri Jun 19 05:56:11.499517 2026] [security2:error] [pid 1026272:tid 140710878611136] [client 72.63.18.3:64328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "ajR3i-rIMWvCVLI7FlGMFQAFBwY"], referer https://www.bmkg.go.id/ [st
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-15 18:45:36
(5 days ago)
[Tue Jun 16 01:45:35.829498 2026] [security2:error] [pid 118646:tid 139893083682496] [client 72.63.1 ...
show more
[Tue Jun 16 01:45:35.829498 2026] [security2:error] [pid 118646:tid 139893083682496] [client 72.63.18.3:56260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "ajBITzANv_zPgmZOYz3nOAAAzg0"], referer https://www.yahoo.go.id/
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-06 16:46:34
(2 weeks ago)
[Sat Jun 06 23:46:29.558800 2026] [security2:error] [pid 140471:tid 140594224551616] [client 72.63.1 ...
show more
[Sat Jun 06 23:46:29.558800 2026] [security2:error] [pid 140471:tid 140594224551616] [client 72.63.18.3:61560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "aiRO5eVuETqidLo19-Fg2AABywI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[140484] [hoHXhNgwEbw] [aiRO5eVuETqidLo19-Fg2AABywI] keep_alive=[1] [2026-06-06 23:46:29.558806] [R:aiRO5eVuETqidLo19-Fg2AABywI] UA:'Mozilla/5.0 (iPhone; CPU iPhone O
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-06-02 11:37:25
(2 weeks ago)
[Tue Jun 02 18:37:22.032188 2026] [security2:error] [pid 366767:tid 140637111314112] [client 72.63.1 ...
show more
[Tue Jun 02 18:37:22.032188 2026] [security2:error] [pid 366767:tid 140637111314112] [client 72.63.18.3:28418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /images/Klimatologi/Infografis/Infografis_Perubahan_Nama/Sertifikat_Kenaikan_Kelas_Unit_Pelaksanaan_Teknis_dari_Kelas_II_menjadi_Kelas_I_Stasiun_Klimatologi_Jawa_Timur_07_Mei_2026-600.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis_Perubahan_Nama/Sertifikat_Kenaikan_Kelas_Unit_Pelaksanaan_Teknis_dari_Kelas_II_menjadi_Kelas_I_Stasiun_Klimatologi_Jawa_Timur_07_Mei_2026-600.webp"] [unique_id "ah7AcmlD9aq2n3iSWaUu4AABBgE"], referer http://www.baidu
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-29 00:39:17
(3 weeks ago)
[Fri May 29 07:39:16.291191 2026] [security2:error] [pid 1163672:tid 139851979462336] [client 72.63. ...
show more
[Fri May 29 07:39:16.291191 2026] [security2:error] [pid 1163672:tid 139851979462336] [client 72.63.18.3:44836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /images/Klimatologi/Konferensi_Pers/2026/03_Maret_2026/Press_Release_Prediksi_Musim_Kemarau_2026.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Konferensi_Pers/2026/03_Maret_2026/Press_Release_Prediksi_Musim_Kemarau_2026.webp"] [unique_id "ahjgNJg5VBJPxmxz1DpFTQABExU"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1163694] [S80KE6ofhO4] [ahjgNJg5VBJPxmxz1DpFTQABExU] keep_alive=[1] [2026-05-29 07:39:16.291196] [R:ahjgNJg5
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-05-25 05:21:05
(3 weeks ago)
[Mon May 25 12:21:03.977065 2026] [security2:error] [pid 753674:tid 140518462236352] [client 72.63.1 ...
show more
[Mon May 25 12:21:03.977065 2026] [security2:error] [pid 753674:tid 140518462236352] [client 72.63.18.3:36338] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0 Request URI RAW = /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya Request Basename = perbandingan-awal-musim-kemarau-dengan-normalnya"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag
...
show less
Email Spam
Hacking
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: