This IP address has been reported a total of
36
times from
25 distinct
sources.
113.211.214.123 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Austria
with 2
reports;
Germany
with 2
reports;
Indonesia
with 2
reports.
The most common categories in these recent reports were:
Port Scan
7
times;
SSH
5
times;
Brute-Force
3
times;
Hacking
2
times;
Web App Attack
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot: 4 unsolicited connection attempt(s) to ports where no service is offered (22/tcp); first 2 ...
show moreHoneypot: 4 unsolicited connection attempt(s) to ports where no service is offered (22/tcp); first 2026-10-21 16:25:05 UTC, last 2026-10-21 16:26:46 UTC. Reported by ipdb-security/fitzgerald.eu
show less
Honeypot: 4 unsolicited connection attempt(s) to ports where no service is offered (22/tcp); first 2 ...
show moreHoneypot: 4 unsolicited connection attempt(s) to ports where no service is offered (22/tcp); first 2026-10-21 16:25:05 UTC, last 2026-10-21 16:26:46 UTC. Reported by ipdb-security/fitzgerald.eu
show less
[Mon Oct 12 10:58:27.444524 2026] [security2:error] [pid 1783113:tid 140628495165120] [client 113.21 ...
show more[Mon Oct 12 10:58:27.444524 2026] [security2:error] [pid 1783113:tid 140628495165120] [client 113.211.214.123:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:^(?:json\\\\.|\\\\x5c)?|b[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\\\?@_a-\\\\{]*)?\\\\x5c?u[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\\\?@_a-\\\\{]*)?\\\\x5c?s[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*) ..." at ARGS_NAMES:id. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "3273"] [id "932350"] [msg "Remote Command Execution: Direct Unix Command Execution (No Arguments)"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: id found within ARGS_NAMES:id: id request_line = GET /index.php/profil/arsip-artikel?catid=477&id=954:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-dep
...
show less
DDoS flood attack against 82.152.54.0 (2026-08-20 16:00:36 -> 2026-08-20 16:15:36 UTC) targeting AS2 ...
show moreDDoS flood attack against 82.152.54.0 (2026-08-20 16:00:36 -> 2026-08-20 16:15:36 UTC) targeting AS215599. This IP (AS9534) sent ~185 packets (0.26 MB) during the attack window. Likely a compromised device (botnet).
show less
DDoS flood attack against 46.232.235.0 (2026-08-20 15:37:20 -> 2026-08-20 15:52:20 UTC) targeting AS ...
show moreDDoS flood attack against 46.232.235.0 (2026-08-20 15:37:20 -> 2026-08-20 15:52:20 UTC) targeting AS215599. This IP (AS9534) sent ~4120 packets (5.85 MB) during the attack window. Likely a compromised device (botnet).
show less
UDP flood (DDoS) vs AS215599: 478 pkts / 0.68 MB to UDP 80/8443 across 221 dst IP(s), 2026-08-19 21: ...
show moreUDP flood (DDoS) vs AS215599: 478 pkts / 0.68 MB to UDP 80/8443 across 221 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 478 pkts / 0.68 MB to UDP 80/8443 across 221 dst IP(s), 2026-08-19 21: ...
show moreUDP flood (DDoS) vs AS215599: 478 pkts / 0.68 MB to UDP 80/8443 across 221 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ...
show moreBnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
113.211.214.123 443 - [07/Aug/2026:09:20:28 +0000] "GET [redacted] HTTP/1.1" 200 6935 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
show less
