AbuseIPDB » 114.4.215.140
114.4.215.140
This IP was reported 7 times. Confidence of
Abuse
is 13% : ?
ISP
PT Indosat Tbk (www.indosat.com)
Usage Type
Mobile ISP
ASN
AS4761
Hostname(s)
114-4-215-140.resources.indosat.com
Domain Name
ioh.co.id
Country
🇮🇩
Indonesia
City
Bandung, West Java
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 114.4.215.140 :
This IP address has been reported a total of
7
times from
4 distinct
sources.
114.4.215.140 was first reported on
July 14th 2025 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
BoosterGold2099
2026-08-28 10:40:19
(3 days ago)
Hacking
Exploited Host
Web App Attack
🇮🇩
sockominfo
2026-08-04 16:00:31
(3 weeks ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-28 18:00:53
(1 month ago)
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB), Critical: After-hours login detec ...
show more
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB), Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-28 17:00:10
(1 month ago)
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ...
show more
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇺🇸
kosada.com
2026-07-17 08:39:38
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
sockominfo
2026-06-26 20:00:53
(2 months ago)
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). ...
show more
Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-07-14 07:00:26
(1 year ago)
[Mon Jul 14 14:00:20.479307 2025] [security2:error] [pid 496271:tid 140524666173120] [client 114.4.2 ...
show more
[Mon Jul 14 14:00:20.479307 2025] [security2:error] [pid 496271:tid 140524666173120] [client 114.4.215.140:3250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "myactivity.google.com" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "461"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: myactivity.google.com found within REQUEST_HEADERS:Referer: https://myactivity.google.com/ request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2025/04_April_2025/03_Prediksi_Curah_Hujan_Bulan_AGUSTUS_2025_di_Provinsi_Jawa_Timur-Update_dari_Analisis_Bulan_April_2025.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2025/04_April_2025/03_Prediksi_Curah_
...
show less
Hacking
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: