This IP address has been reported a total of
4
times from
4 distinct
sources.
96.9.207.225 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 1
report;
Indonesia
with 1
report.
The most common categories in these recent reports were:
Hacking
1
time;
Web App Attack
1
time;
Bad Web Bot
1
time;
Email Spam
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Fri Oct 02 10:09:57.224768 2026] [security2:error] [pid 8291:tid 140167725704896] [client 96.9.207. ...
show more[Fri Oct 02 10:09:57.224768 2026] [security2:error] [pid 8291:tid 140167725704896] [client 96.9.207.225:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "208"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=480&id=1247%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-22-28-november-2016&start=150 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=480&id=1247%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-22-28-november-2016&sta..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "ar8ghYHSGCi3yRo
...
show less
Email Spam
Hacking
Anonymous
Web attack
Bad Web Bot
Web App Attack
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show moreDistributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Ips being used for card skimming attacks on ecomerce platforms. Attempted to contact IP owners and B ...
show moreIps being used for card skimming attacks on ecomerce platforms. Attempted to contact IP owners and BGP announcers to no avail.
show less
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
