JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 8.243.72.9

8.243.72.9 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 18%: ?

18%

ISP	Level 3 Parent, LLC
Usage Type	Fixed Line ISP
ASN	AS3356
Domain Name	lumen.com
Country	🇨🇴 Colombia
City	Bogota, Bogota D.C.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 8.243.72.9

Whois 8.243.72.9

IP Abuse Reports for 8.243.72.9:

This IP address has been reported a total of 16 times from 10 distinct sources. 8.243.72.9 was first reported on May 12th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-27 01:27:15 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 8.243.72.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 8.243.72.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 21:27:12.271121 2026] [security2:error] [pid 4118:tid 4127] [client 8.243.72.9:39610] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|lordennerdale.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lordennerdale.com"] [uri "/"] [unique_id "arhw8K_u6z1M7174l4zVhAAAAEQ"], referer: https://bulkdapacheckerfree.shop/dir/premium-link-building-125031 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 01:25:18 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-15 22:31:40 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇩🇪 Phenix Info	2026-08-31 01:38:15 (1 month ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇺🇸 鬼影233	2026-08-23 17:09:44 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-20 19:57:21 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-01 06:46:40 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-07-11 16:57:00 (3 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇳🇱 EGP Abuse Dept	2026-07-04 04:20:03 (3 months ago)	Scraping webshop URLs (www.creall.com), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-06-29 02:07:30 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-28 09:34:19 (3 months ago)	[Sun Jun 28 16:34:16.095586 2026] [security2:error] [pid 252220:tid 140332135065280] [client 8.243.7 ... show more [Sun Jun 28 16:34:16.095586 2026] [security2:error] [pid 252220:tid 140332135065280] [client 8.243.72.9:33600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "akDqmEcCmdSYoKTMr4cB5QAAjAU"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[252226] [HG+TC81t8Lg] [akDqmEcCmdSYoKTMr4cB5QAAjAU] keep_alive=[1] [2026-06-28 16:34:16.095590] [R:akDqmEcCmdSYoKTMr4cB5QAAjAU] UA:'M ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-24 15:47:22 (3 months ago)	Captured JA4H: ge20n_fd2543106793 \| Log: 8.243.72.9 - - [24/Jun/2026:22:47:18 +0700] "GET /images/Kl ... show more Captured JA4H: ge20n_fd2543106793 \| Log: 8.243.72.9 - - [24/Jun/2026:22:47:18 +0700] "GET /images/Klimatologi/Analisis/02-Analisis_Dasarian/Analisis_Monitoring_Hari_Tanpa_Hujan_Berturut-Turut_Dasarian/Analisis_Monitoring_Hari_Tanpa_Hujan_Berturut-Turut_Dasarian_Provinsi_Jawa_Timur/2019/10/Peta_Analisis_Dasarian_Monitoring_Hari_Tanpa_Hujan_Berturut-Turut_Update_31_Oktober_2019_di_Provinsi_Jawa_Timur.jpg HTTP/2.0" 200 246663 "https://staklim-jatim.bmkg.go.id/index.php/component/tags/tag/577-frekuensi-kejadian-curah-hujan-diatas-50-mm-per-hari-dasarian-di-propinsi-jawa-timur" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.1048.1254 Mobile Safari/537.36" ge20n_accept,user-agent,referer,sec-fetch-dest,accept-encoding,accept-language,host... ... show less	Email Spam Hacking
🇨🇴 AF	2026-06-19 18:03:38 (3 months ago)	Reporte automatizado de actividad sospechosa	DDoS Attack
🇨🇴 Dricci	2026-06-19 17:12:48 (3 months ago)	Reporte automatizado de actividad sospechosa	Port Scan
🇮🇩 hermawan	2026-06-15 06:05:14 (4 months ago)	[Mon Jun 15 13:05:10.548171 2026] [security2:error] [pid 820078:tid 139672836601536] [client 8.243.7 ... show more [Mon Jun 15 13:05:10.548171 2026] [security2:error] [pid 820078:tid 139672836601536] [client 8.243.72.9:64257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "ai-WFlbMZ2H4CSBjuEvsGQABAwc"], referer http://www.baidu.go.id/ [s ... show less	Email Spam Hacking

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 138.84.47.91

🇨🇳 123.14.124.8

🇯🇴 92.253.35.140

🇧🇷 45.205.1.231

🇺🇸 45.45.237.65

🇷🇺 31.184.195.246

🇺🇸 20.168.117.138

🇦🇷 153.67.183.72

🇺🇸 137.184.132.183

🇰🇷 115.160.76.23

🇨🇳 112.103.93.178

🇫🇷 51.75.27.218

🇷🇺 45.87.144.179

🇺🇸 40.124.123.79

🇺🇸 37.19.197.147

🇯🇵 34.146.5.169

🇧🇩 163.227.144.26

🇮🇱 141.226.92.228

🇺🇸 136.124.32.46

🇰🇷 112.161.75.207