Enter an IP Address, Domain Name, or Subnet:
e.g. 34.204.173.45, microsoft.com, or 5.188.10.0/24
User hermawan, the webmaster of karangploso.jatim.bmkg.go.id, joined AbuseIPDB in March 2018 and has reported 146,728* IP addresses.
*Cached value. Updated daily.
10,000+ REPORTED IPS
ACTIVE USER
WEBMASTER
SUPPORTER
- « Previous
- Next »
| IP | Date | Comment | Categories |
|---|---|---|---|
54.196.10.119
|
[Thu Oct 17 23:34:21.004262 2019] [:error] [pid 29013:tid 140108896343808] [client 54.196.10.119:332 ... show more[Thu Oct 17 23:34:21.004262 2019] [:error] [pid 29013:tid 140108896343808] [client 54.196.10.119:33278] [client 54.196.10.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "[email protected]"]
... show less |
Hacking Web App Attack | |
|
5.45.207.51
|
[Thu Oct 17 23:03:32.181654 2019] [:error] [pid 29014:tid 140109013841664] [client 5.45.207.51:57497 ... show more[Thu Oct 17 23:03:32.181654 2019] [:error] [pid 29014:tid 140109013841664] [client 5.45.207.51:57497] [client 5.45.207.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XaiQ1CFapQcJM8aL7m7zpAAAAEE"]
... show less |
Hacking Web App Attack | |
|
45.82.153.76
|
Email Spam Hacking | ||
|
45.227.253.138
|
Email Spam Hacking | ||
|
171.67.70.80
|
Email Spam Hacking | ||
|
5.45.207.56
|
[Thu Oct 17 21:58:10.107154 2019] [:error] [pid 24860:tid 139861927331584] [client 5.45.207.56:54707 ... show more[Thu Oct 17 21:58:10.107154 2019] [:error] [pid 24860:tid 139861927331584] [client 5.45.207.56:54707] [client 5.45.207.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XaiBgnczMKoOh-BrkgWIswAAABM"]
... show less |
Hacking Web App Attack | |
|
182.1.92.193
|
Brute-Force Web App Attack | ||
|
180.254.38.112
|
Brute-Force Web App Attack | ||
|
157.245.185.245
|
[Thu Oct 17 19:28:39.627766 2019] [:error] [pid 7744:tid 140108921521920] [client 157.245.185.245:59 ... show more[Thu Oct 17 19:28:39.627766 2019] [:error] [pid 7744:tid 140108921521920] [client 157.245.185.245:59340] [client 157.245.185.245] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^[\\\\w\\\\d/\\\\.\\\\-\\\\+]+(?:\\\\s?;\\\\s?(?:boundary|charset)\\\\s?=\\\\s?['\\"\\\\w\\\\d\\\\.\\\\-]+)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "889"] [id "920470"] [msg "Illegal Content-Type header"] [data "application/x-www-form-urlencoded;"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/CONTENT_TYPE"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "staklim-malang.info"] [uri "/admin"] [unique_id "Xahed1w-InjTBYV1FUuTEgAAAI4"], referer: http://staklim-malang.info/admin
... show less |
Hacking Web App Attack | |
|
193.169.254.32
|
[Thu Oct 17 19:09:19.762006 2019] [:error] [pid 7744:tid 140108963485440] [client 193.169.254.32:606 ... show more[Thu Oct 17 19:09:19.762006 2019] [:error] [pid 7744:tid 140108963485440] [client 193.169.254.32:60600] [client 193.169.254.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XahZ71w-InjTBYV1FUuS8gAAAIk"]
... show less |
Hacking Web App Attack | |
|
45.227.253.138
|
Email Spam Hacking | ||
|
5.45.207.51
|
[Thu Oct 17 17:31:36.889270 2019] [:error] [pid 7744:tid 140108879558400] [client 5.45.207.51:57731] ... show more[Thu Oct 17 17:31:36.889270 2019] [:error] [pid 7744:tid 140108879558400] [client 5.45.207.51:57731] [client 5.45.207.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XahDCFw-InjTBYV1FUt9sgAAAJM"]
... show less |
Hacking Web App Attack | |
|
113.100.73.201
|
[Thu Oct 17 17:16:56.190741 2019] [:error] [pid 7744:tid 140108980270848] [client 113.100.73.201:382 ... show more[Thu Oct 17 17:16:56.190741 2019] [:error] [pid 7744:tid 140108980270848] [client 113.100.73.201:38232] [client 113.100.73.201] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "Xag-mFw-InjTBYV1FUt8UgAAAIc"]
... show less |
Hacking Web App Attack | |
|
221.13.12.60
|
[Thu Oct 17 17:11:25.686012 2019] [:error] [pid 25265:tid 140108896343808] [client 221.13.12.60:3979 ... show more[Thu Oct 17 17:11:25.686012 2019] [:error] [pid 25265:tid 140108896343808] [client 221.13.12.60:39794] [client 221.13.12.60] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "123.125.114.144"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "123.125.114.144"] [uri "/"] [unique_id "[email protected]"]
... show less |
Hacking Web App Attack | |
|
35.164.173.17
|
Email Spam Hacking | ||
|
5.45.207.84
|
[Thu Oct 17 16:24:58.273669 2019] [:error] [pid 25265:tid 140109107779328] [client 5.45.207.84:60821 ... show more[Thu Oct 17 16:24:58.273669 2019] [:error] [pid 25265:tid 140109107779328] [client 5.45.207.84:60821] [client 5.45.207.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XagzagiBmZbEykobcYEkjQAAAEA"]
... show less |
Hacking Web App Attack | |
|
66.249.71.77
|
Hacking Web App Attack | ||
|
37.9.113.46
|
[Thu Oct 17 15:18:38.705054 2019] [:error] [pid 25265:tid 140108988663552] [client 37.9.113.46:54897 ... show more[Thu Oct 17 15:18:38.705054 2019] [:error] [pid 25265:tid 140108988663552] [client 37.9.113.46:54897] [client 37.9.113.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "Xagj3giBmZbEykobcYEjfwAAAEY"]
... show less |
Hacking Web App Attack | |
|
186.14.139.8
|
[Thu Oct 17 14:55:09.684834 2019] [:error] [pid 7744:tid 140108904736512] [client 186.14.139.8:38178 ... show more[Thu Oct 17 14:55:09.684834 2019] [:error] [pid 7744:tid 140108904736512] [client 186.14.139.8:38178] [client 186.14.139.8] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "XageXVw-InjTBYV1FUtvagAAAJA"]
... show less |
Hacking Web App Attack | |
|
150.109.170.49
|
[Thu Oct 17 14:17:55.321263 2019] [:error] [pid 25265:tid 140108988663552] [client 150.109.170.49:47 ... show more[Thu Oct 17 14:17:55.321263 2019] [:error] [pid 25265:tid 140108988663552] [client 150.109.170.49:47484] [client 150.109.170.49] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "XagVowiBmZbEykobcYEZdwAAAEY"]
... show less |
Hacking Web App Attack | |
|
102.176.244.210
|
[Thu Oct 17 13:56:59.868189 2019] [:error] [pid 12317:tid 140108946700032] [client 102.176.244.210:5 ... show more[Thu Oct 17 13:56:59.868189 2019] [:error] [pid 12317:tid 140108946700032] [client 102.176.244.210:55110] [client 102.176.244.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XagQu2VTcankCmHKk4y7GAAAAAs"]
... show less |
Hacking Web App Attack | |
|
185.100.87.190
|
Email Spam Hacking | ||
|
109.195.148.149
|
[Thu Oct 17 13:31:27.607935 2019] [:error] [pid 25265:tid 140109090993920] [client 109.195.148.149:3 ... show more[Thu Oct 17 13:31:27.607935 2019] [:error] [pid 25265:tid 140109090993920] [client 109.195.148.149:32930] [client 109.195.148.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XagKvwiBmZbEykobcYEO1gAAAEI"]
... show less |
Hacking Web App Attack | |
|
51.91.212.79
|
Email Spam Hacking | ||
|
177.225.111.68
|
[Thu Oct 17 12:48:32.493939 2019] [:error] [pid 16403:tid 140109013841664] [client 177.225.111.68:44 ... show more[Thu Oct 17 12:48:32.493939 2019] [:error] [pid 16403:tid 140109013841664] [client 177.225.111.68:44552] [client 177.225.111.68] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "103.27.207.197"] [uri "/editBlackAndWhiteList"] [unique_id "[email protected]"]
... show less |
Hacking Web App Attack |
- « Previous
- Next »