JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.63.20.199

72.63.20.199 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 3%: ?

ISP	UAB code200
Usage Type	Data Center/Web Hosting/Transit
ASN	AS30058
Domain Name	code200.global
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.63.20.199

Whois 72.63.20.199

IP Abuse Reports for 72.63.20.199:

This IP address has been reported a total of 6 times from 1 distinct source. 72.63.20.199 was first reported on May 25th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-08 16:29:10 (1 week ago)	[Mon Jun 08 23:29:09.388731 2026] [security2:error] [pid 1241172:tid 140661887022784] [client 72.63. ... show more [Mon Jun 08 23:29:09.388731 2026] [security2:error] [pid 1241172:tid 140661887022784] [client 72.63.20.199:20824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index-v100.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index-v100.js"] [unique_id "aibt1R_mICIOfiiw11NLLwAByQs"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1241184] [claHggDkJYc] [aibt1R_mICIOfiiw11NLLwAByQs] keep_alive=[1] [2026-06-08 23:29:09.388734] [R:aibt1R_mICIOfiiw11NLLwAByQs] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74' Host: ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-07 19:56:22 (1 week ago)	[Mon Jun 08 02:56:18.102457 2026] [security2:error] [pid 302208:tid 140410075735744] [client 72.63.2 ... show more [Mon Jun 08 02:56:18.102457 2026] [security2:error] [pid 302208:tid 140410075735744] [client 72.63.20.199:5840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "aiXM4noJrG1yaEobpPk90AAAiAA"], referer https://www.bing.go.id/ [st ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-02 16:09:21 (2 weeks ago)	[Tue Jun 02 23:09:17.691480 2026] [security2:error] [pid 51737:tid 139947416737472] [client 72.63.20 ... show more [Tue Jun 02 23:09:17.691480 2026] [security2:error] [pid 51737:tid 139947416737472] [client 72.63.20.199:62922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan"] [unique_id "ah8ALaF4lYz4Djqfn8vDUwAAkAM"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[51772] [rEVziAe/yyg] [ah8ALaF4lYz4Djqfn8vDUwAAkAM] keep_alive=[1] [2026-06-02 23:09:17.691488] [R:ah8ALaF4lYz4Djqfn8vDUwAAkAM] UA:'Mozilla/5.0 (Linux; U ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-29 07:24:42 (2 weeks ago)	[Fri May 29 14:24:25.426338 2026] [security2:error] [pid 1425902:tid 139851995743936] [client 72.63. ... show more [Fri May 29 14:24:25.426338 2026] [security2:error] [pid 1425902:tid 139851995743936] [client 72.63.20.199:54082] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas HTTP/2.0 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas Request Basename = 555561326-infografis-himbauan-waspada-suhu-udara-panas"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag " ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-28 07:13:09 (3 weeks ago)	[Thu May 28 14:13:04.303312 2026] [security2:error] [pid 514745:tid 139852229084864] [client 72.63.2 ... show more [Thu May 28 14:13:04.303312 2026] [security2:error] [pid 514745:tid 139852229084864] [client 72.63.20.199:40974] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /pdfjs/web/images/toolbarButton-editorFreeText.svg HTTP/2.0 Request URI RAW = /pdfjs/web/images/toolbarButton-editorFreeText.svg Request Basename = toolbarButton-editorFreeText.svg"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/ ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-25 05:54:11 (3 weeks ago)	05/25/2026-12:54:10.676211 [Drop] [] [1:3100027890:0] Suricata match TLS ja3 scan Uniq Zeek no 27 ... show more 05/25/2026-12:54:10.676211 [Drop] [] [1:3100027890:0] Suricata match TLS ja3 scan Uniq Zeek no 27890 with hash_a19ab9f02aacf42deddc1f2acb3d3f63 [**] [Classification: (null)] [Priority: 3] {TCP} 72.63.20.199:64314 -> 103.166.156.58:443 ... show less	Email Spam Hacking

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 211.92.215.26

🇬🇧 35.203.210.93

🇰🇷 210.114.22.126

🇷🇺 188.19.74.46

🇺🇸 172.253.0.28

🇺🇸 135.232.216.53

🇮🇳 103.208.70.170

🇮🇳 103.19.136.6

🇳🇱 96.62.250.243

🇳🇱 45.142.193.118

🇲🇾 195.86.192.66

🇺🇸 172.253.214.26

🇻🇳 42.96.19.37

🇮🇩 36.64.33.82

🇺🇸 20.12.202.181

🇳🇱 185.226.197.14

🇨🇳 120.48.34.72

🇨🇳 101.76.248.214

🇮🇹 87.27.5.54

🇺🇸 66.132.186.217