AbuseIPDB » 95.108.213.124

95.108.213.124 was found in our database!

This IP was reported 441 times. Confidence of Abuse is 0%: ?

ISP	Yandex LLC
Usage Type	Search Engine Spider
Hostname(s)	95-108-213-124.spider.yandex.com
Domain Name	yandex.net
Country	Russian Federation
City	Moscow, Moskva

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 95.108.213.124 is an IP address from within our whitelist. Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

According to our records, this IP belongs to the subnet 95.108.128.0/17, identified as: "Yandex"

Report 95.108.213.124

Whois 95.108.213.124

IP Abuse Reports for 95.108.213.124:

This IP address has been reported a total of 441 times from 43 distinct sources. 95.108.213.124 was first reported on December 14th 2022, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rh24	2024-08-30 00:20:26 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 95.108.213.124 (RU/R ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 95.108.213.124 (RU/Russia/95-108-213-124.spider.yandex.com) show less	Bad Web Bot
hermawan	2024-08-28 08:18:17 (1 month ago)	[Wed Aug 28 15:15:17.317746 2024] [security2:error] [pid 680025:tid 137456431138368] [client 95.108. ... show more[Wed Aug 28 15:15:17.317746 2024] [security2:error] [pid 680025:tid 137456431138368] [client 95.108.213.124:41058] [client 95.108.213.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/analisis-bulanan/4135-analisis-bulanan-tingkat-ketersediaan-air-bagi-tanaman/analisis-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur/analisis-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur-tahun-2022/1656-analisis-bulanan-tingkat-ketersediaan-air-bagi-tanaman-bulan-januari-tahun-2022-di-provinsi-jawa-timur ..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/anal ... show less	Hacking Web App Attack
Anonymous	2024-08-28 06:58:22 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
advena	2024-08-28 05:31:05 (1 month ago)	95.108.213.124 (AS13238 YANDEX) was intercepted at 2024-08-28T05:22:29Z after violating WAF directiv ... show more95.108.213.124 (AS13238 YANDEX) was intercepted at 2024-08-28T05:22:29Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
advena	2024-08-26 21:45:58 (1 month ago)	95.108.213.124 (AS13238 YANDEX) was intercepted at 2024-08-26T21:38:42Z after violating WAF directiv ... show more95.108.213.124 (AS13238 YANDEX) was intercepted at 2024-08-26T21:38:42Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
advena	2024-08-26 10:01:25 (1 month ago)	95.108.213.124 (AS13238 YANDEX) was intercepted at 2024-08-26T09:51:28Z after violating WAF directiv ... show more95.108.213.124 (AS13238 YANDEX) was intercepted at 2024-08-26T09:51:28Z after violating WAF directive: d0380eeb922844b5b69152600cea062c. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
Secure Gateway®️	2024-08-25 22:03:52 (1 month ago)	Report By Secure Gateway Security Team: Unauthorized Connection Attempt	Web App Attack
ALSCO®️	2024-08-25 22:03:52 (1 month ago)	Report By ALSCO Security Team: Brute Force Login Attempt	Web App Attack
Anonymous	2024-08-25 10:26:13 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
hermawan	2024-08-25 07:14:26 (1 month ago)	[Sun Aug 25 14:01:51.413356 2024] [security2:error] [pid 152842:tid 128800847300160] [client 95.108. ... show more[Sun Aug 25 14:01:51.413356 2024] [security2:error] [pid 152842:tid 128800847300160] [client 95.108.213.124:57280] [client 95.108.213.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /robots.txt HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "ZsrW30bH42Qffl-J8HVl4AAAAE4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[152898] [nQ0vlSRGjf0] [ZsrW30bH42Qffl-J8HVl4AAAAE4] keep_alive=[0] [2024-08-25 14:01:51.413359] [R:ZsrW30bH42Qffl-J8HVl4AAAAE4] UA:'Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Acc ... show less	Hacking Web App Attack
Bytemark	2024-08-25 00:19:14 (1 month ago)	95.108.213.124 - - [25/Aug/2024:01:19:13 +0100] "GET /testimonials/2012-13/ HTTP/1.1" 301 5576 "-" " ... show more95.108.213.124 - - [25/Aug/2024:01:19:13 +0100] "GET /testimonials/2012-13/ HTTP/1.1" 301 5576 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" show less	Brute-Force Web App Attack
Mendip_Defender	2024-08-24 11:23:18 (1 month ago)	95.108.213.124 - - [24/Aug/2024:12:23:17 +0100] "GET /category/my-vehicles/klr650-tengai-moose/ HTTP ... show more95.108.213.124 - - [24/Aug/2024:12:23:17 +0100] "GET /category/my-vehicles/klr650-tengai-moose/ HTTP/1.0" 200 25731 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" ... show less	Bad Web Bot
rtbh.com.tr	2024-08-24 00:56:07 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
hermawan	2024-08-22 21:10:53 (1 month ago)	[Fri Aug 23 02:49:42.380465 2024] [security2:error] [pid 520681:tid 127839565252160] [client 95.108. ... show more[Fri Aug 23 02:49:42.380465 2024] [security2:error] [pid 520681:tid 127839565252160] [client 95.108.213.124:51900] [client 95.108.213.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Yandex" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Yandex found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) request_line = GET /index.php/analisis-bulanan/4129-analisis-distribusi-hujan/analisis-distribusi-curah-hujan/analisis-distribusi-curah-hujan-jawa-timur-bulanan/analisis-bulanan-distribusi-curah-hujan-tahun-2022/555559759-analisis-bulanan-distribusi-curah-hujan-bulan-september-tahun-2022-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-bulanan/4129-analisis-distribusi-hujan/analisis-distribusi-c ... show less	Hacking Web App Attack
Secure Gateway®️	2024-08-21 22:00:57 (1 month ago)	Report By Secure Gateway Security Team: Unsolicited Connection Attempt	SQL Injection