AbuseIPDB » 110.139.201.7

110.139.201.7 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 19%: ?

19%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	Indonesia
City	Palu, Central Sulawesi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 110.139.201.7

Whois 110.139.201.7

IP Abuse Reports for 110.139.201.7:

This IP address has been reported a total of 3 times from 3 distinct sources. 110.139.201.7 was first reported on June 9th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
URAN Publishing Service	2025-06-10 07:40:07 (1 week ago)	110.139.201.7 - - [10/Jun/2025:10:40:02 +0300] "GET /wp-login.php HTTP/1.1" 404 2632 "-" "Mozilla/5. ... show more110.139.201.7 - - [10/Jun/2025:10:40:02 +0300] "GET /wp-login.php HTTP/1.1" 404 2632 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 110.139.201.7 - - [10/Jun/2025:10:40:04 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
london2038.com	2025-06-09 08:29:32 (2 weeks ago)	Probing for exploits 110.139.201.7 - - [09/Jun/2025:10:29:23 +0200] "GET /xmlrpc.php HTTP/1.1" ... show moreProbing for exploits 110.139.201.7 - - [09/Jun/2025:10:29:23 +0200] "GET /xmlrpc.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 110.139.201.7 - - [09/Jun/2025:10:29:24 +0200] "GET /wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" show less	Hacking Web App Attack
TPI-Abuse	2025-06-09 03:02:55 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 110.139.201.7 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:225170) triggered by 110.139.201.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 08 23:02:47.363483 2025] [security2:error] [pid 1826794:tid 1826794] [client 110.139.201.7:53662] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.hvacmechanalysis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hvacmechanalysis.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aEZO12XwXbJGicJk6FHv2AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩