AbuseIPDB » 103.135.226.139

103.135.226.139 was found in our database!

This IP was reported 2,164 times. Confidence of Abuse is 13%: ?

13%

ISP	PT. Trans Indonesia Superkoridor
Usage Type	Fixed Line ISP
Hostname(s)	ip139-226-135-103.tis.net.id
Domain Name	ficomm.net.id
Country	Indonesia
City	Randudongkal, Jawa Tengah

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 103.135.226.139

Whois 103.135.226.139

IP Abuse Reports for 103.135.226.139:

This IP address has been reported a total of 2,164 times from 568 distinct sources. 103.135.226.139 was first reported on April 3rd 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
mgarofano80	2024-08-15 15:32:15 (3 weeks ago)		Brute-Force Web App Attack
sid3windr	2024-08-13 22:03:59 (4 weeks ago)	GET /.env (Tarpitted for 13h33s, wasted 2.68MB)	Web App Attack
mgarofano80	2024-08-13 20:36:57 (4 weeks ago)		Brute-Force Web App Attack
[email protected]	2024-07-15 00:54:41 (1 month ago)	Attempts bruteforce ssh login.	Brute-Force SSH
[email protected]	2024-07-11 05:28:06 (2 months ago)	Attempts to find pages that do not exist on website.	Web App Attack
dpinse	2024-05-09 00:05:22 (4 months ago)	teler detected CVE-2017-16894 against resource /.env from 103.135.226.139	Web App Attack
sid3windr	2024-05-08 17:14:55 (4 months ago)	GET /.env (Tarpitted for 21m50s, wasted 76.88kB)	Web App Attack
sid3windr	2024-05-08 16:45:35 (4 months ago)	GET /.env (Tarpitted for 17m20s, wasted 61.05kB)	Web App Attack
EinfxchFinn	2024-05-08 11:52:01 (4 months ago)	Unauthorized connection attempt to port 80 from 103.135.226.139	Port Scan
10dencehispahard SL	2024-05-08 06:01:07 (4 months ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
cmbplf	2024-05-08 04:19:01 (4 months ago)	132 requests to *.env	Brute-Force Bad Web Bot
Starburst SysOp Team	2024-05-07 23:00:00 (4 months ago)	[Tue May 07 23:00:42.590252 2024] [:error] [pid 1137:tid 140392095782656] [client 103.135.226.139:51 ... show more[Tue May 07 23:00:42.590252 2024] [:error] [pid 1137:tid 140392095782656] [client 103.135.226.139:51020] [client 103.135.226.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "-"] [uri "/.env"] [unique_id "ZjqymnTuTJDuLDDHLZdqxwAAAA0"] show less	Hacking Brute-Force Web App Attack
ozisp.com.au	2024-02-25 16:21:41 (6 months ago)	ID_PT. Trans Indonesia Superkoridor_<33>1708878099 [1:2031502:4] ET INFO Request to Hidden Environme ... show moreID_PT. Trans Indonesia Superkoridor_<33>1708878099 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Classification: Misc activity] [Priority: 3] {TCP} 103.135.226.139:42370 show less	Hacking
cvb	2024-02-25 14:16:22 (6 months ago)	{"reqId":"bz8m7ObrvMfO53xrszNA","level":1,"time":"2024-02-25T14:16:10+00:00","remoteAddr":"103.135.2 ... show more{"reqId":"bz8m7ObrvMfO53xrszNA","level":1,"time":"2024-02-25T14:16:10+00:00","remoteAddr":"103.135.226.139","user":"--","app":"core","method":"POST","url":"/","message":"Trusted domain error. \"103.135.226.139\" tried to access using \"37.120.167.233\" as host.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36","version":"28.0.2.5","data":{"app":"core"}} {"reqId":"Jck9DIb9EEelTWCcKQeb","level":1,"time":"2024-02-25T14:16:16+00:00","remoteAddr":"103.135.226.139","user":"--","app":"core","method":"GET","url":"/.env","message":"Trusted domain error. \"103.135.226.139\" tried to access using \"37.120.167.233\" as host.","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36","version":"28.0.2.5","data":{"app":"core"}} {"reqId":"Hrj9LZnQOlBX2IS3LTCm","level":1,"time": ... RK-Cloud show less	Brute-Force Web App Attack
sid3windr	2024-02-25 13:32:33 (6 months ago)	GET /.env (Tarpitted for 5h59m26s, wasted 1.23MB)	Web App Attack