JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.187.10.2

5.187.10.2 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 42%: ?

42%

ISP	LLC Skytel
Usage Type	Fixed Line ISP
ASN	AS49628
Domain Name	skytel.ge
Country	🇬🇪 Georgia
City	Tbilisi, Tbilisi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.187.10.2

Whois 5.187.10.2

IP Abuse Reports for 5.187.10.2:

This IP address has been reported a total of 74 times from 47 distinct sources. 5.187.10.2 was first reported on June 26th 2022, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NetVexor	2026-08-23 12:56:54 (5 days ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
Anonymous	2026-08-23 07:13:20 (5 days ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-08-20 14:59:34 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-18 02:44:39 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 MPL	2026-08-15 00:35:34 (2 weeks ago)	tcp/22 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-08-09 18:52:39 (2 weeks ago)	2026-08-09 18:52:39 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇩🇪 EGP Abuse Dept	2026-08-07 02:24:14 (3 weeks ago)	Scraping webshop URLs (www.ngs.nl), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-04 11:55:47 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-28 20:13:51 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-12 15:00:29 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 ALPHANET	2026-06-25 03:45:05 (2 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇮🇩 hermawan	2026-06-17 14:03:08 (2 months ago)	[Wed Jun 17 21:03:04.768587 2026] [security2:error] [pid 1771527:tid 139898046379712] [client 5.187. ... show more [Wed Jun 17 21:03:04.768587 2026] [security2:error] [pid 1771527:tid 139898046379712] [client 5.187.10.2:60040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ajKpGPq4As2kAPLDpH-BWAABgwA"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1771528] [abGrhDMhrYQ] [ajKpGPq4As2kAPLDpH-BWAABgwA] keep_alive=[1] [2026-06-17 21:03:04.768590] [R:ajKpGPq4As2kAPLDpH-BWAABgwA] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 16_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/385.0.802777482 Mobile/15E148 Safari/604.1' Host:'staklim-jatim.bmkg.go ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-31 06:17:37 (2 months ago)	[Sun May 31 13:17:32.780811 2026] [security2:error] [pid 919699:tid 140573594838720] [client 5.187.1 ... show more [Sun May 31 13:17:32.780811 2026] [security2:error] [pid 919699:tid 140573594838720] [client 5.187.10.2:53271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "ahvSfMfzeLmhzWiSkj16_gABBAg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[919708] [ZUd+CBfUIvI] [ahvSfMfzeLmhzWiSkj16_gABBAg] keep_alive=[1] [2026-05-31 13:17:32.780815] [R:ahvSfMfzeLmhzWiSkj16_gABBAg] UA:'M ... show less	Email Spam Hacking
🇬🇧 Oakley	2026-05-13 22:32:21 (3 months ago)	(mod_security) mod_security (id:900210) triggered by 5.187.10.2 (GE/Georgia/-): 2 in the last 900 se ... show more (mod_security) mod_security (id:900210) triggered by 5.187.10.2 (GE/Georgia/-): 2 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-05-06 06:25:05 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 5.187.10.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 5.187.10.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 02:24:54.744772 2026] [security2:error] [pid 10778:tid 10778] [client 5.187.10.2:37868] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/gutter-system-installations-orlando-fl/ www.raintechgutters.com"] [unique_id "afretvTRl6oVkxzvHhAFMwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:ff10:c8:594::4

🇮🇳 185.100.212.141

🇧🇷 170.81.216.78

🇭🇰 101.32.49.171

🇷🇴 92.118.39.50

🇩🇪 88.214.25.125

🇺🇸 66.132.186.202

🇰🇷 61.73.123.20

🇧🇷 205.210.31.218

🇬🇧 193.32.209.229

🇳🇱 185.223.235.61

🇺🇸 154.40.38.233

🇩🇪 151.243.11.12

🇨🇳 124.90.50.135

🇨🇳 123.132.190.16

🇨🇳 120.227.128.121

🇨🇳 120.48.71.14

🇨🇳 120.48.22.219

🇨🇳 116.179.32.109

🇭🇰 113.28.194.234