119.235.221.236
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- PT. Mora Telematika Indonesia
- Usage Type
- Fixed Line ISP
- ASN
- AS131111
- Domain Name
- moratelindo.co.id
- Country
- 🇮🇩 Indonesia
- City
- Jakarta, Jakarta
Abuse Reports
Total reports
14 from
13 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 IP Analyzer |
Unauthorized connection attempt from IP address 119.235.221.236 on Port 445(SMB)
|
Port Scan | |
| 🇩🇪 jann |
Honeypot: connection to unused port 445 at 2026-11-08 11:00:38 UTC. No service runs there, any connection is unsolicited scanning.
|
Port Scan | |
| 🇫🇷 geeek |
Port scanning: 445 TCP Blocked
|
Port Scan | |
| 🇫🇷 zulzeen |
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)
|
Hacking Brute-Force | |
| 🇫🇷 JohnAtlas |
Honeypot: connection attempt to unused port(s) 445/tcp on a server where these services do not exist. Automated firewall trap.
|
Port Scan Hacking | |
| 🇳🇱 venix |
Unauthorized connection attempt detected from IP address 119.235.221.236 to port 445 (web01.amsterdam)
|
Brute-Force Exploited Host | |
| 🇺🇸 MPL |
tcp/445
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=4; port 445 proto 6 detection honeypot_tcp; port 445 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇫🇮 iamxorum |
|
Port Scan | |
| 🇺🇸 stechusa |
ELEVATED_THREAT | country=ID | ASN=PT Mora Telematika Indonesia | 14 IPs targeting /brand/satco-products-inc/satco-light-bulbs.html | Facet request during elevated threat (facet_ratio=0.69, unique_ips=157) | HTTP/1.1 over TLS (elevated=True)
|
Bad Web Bot DDoS Attack | |
| 🇺🇸 stechusa |
[Askari] | country=ID | Behavior: HTTP/1.1 over TLS, Targeting specific pages, Outdated browser, Concurrent page load during attack
|
Bad Web Bot DDoS Attack | |
| 🇺🇸 kosada.com |
Web bot: DDoS
|
DDoS Attack Bad Web Bot | |
| 🇮🇩 Burayot |
LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 119.235.221.236 (ID/Indonesia/-): 2 in the last 3600 secs
|
Web App Attack | |
| 🇮🇹 VHosting |
Detected attack and reported by a human
|
DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown