JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

139.196.43.156

Neutral Activity

Abuse confidence score ?

0% Low Risk

124 reports

49 reporters · latest 3 years ago

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

139.196.43.156 has been reported 124 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 139.196.43.156

Export CSV

This IP address has been reported a total of 124 times from 49 distinct sources. 139.196.43.156 was first reported on January 3rd 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2023-09-14 00:32:46 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-09 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-09-13 10:50:04 /manager/html 2023-09-13 10:50:04 / 2023-09-13 19:23:43 / show less	Web App Attack
🇨🇳 ThreatBook.io	2023-09-12 23:53:30 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-09 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-09-12 23:21:35 / 2023-09-12 18:33:22 / 2023-09-12 18:33:23 /manager/html 2023-09-12 23:21:35 /manager/html show less	Web App Attack
🇨🇳 ThreatBook.io	2023-09-12 04:58:50 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-09 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-09-11 14:59:09 /manager/html 2023-09-11 14:59:09 / show less	Web App Attack
🇩🇪 raspi4	2023-09-07 07:23:05 (3 years ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇺🇸 BSG Webmaster	2023-09-05 07:35:08 (3 years ago)	Port scanning (Port 80)	Port Scan Hacking
🇮🇩 hermawan	2023-09-04 16:35:25 (3 years ago)	[Mon Sep 04 23:35:22.787800 2023] [security2:error] [pid 270261:tid 139732390504000] [client 139.196 ... show more [Mon Sep 04 23:35:22.787800 2023] [security2:error] [pid 270261:tid 139732390504000] [client 139.196.43.156:61164] [client 139.196.43.156] ModSecurity: Access denied with code 403 (phase 1). Match of "pm karangploso.jatim.bmkg.go.id staklim-jatim.bmkg.go.id staklim-malang.info matomo.staklim-malang.info" against "REQUEST_HEADERS:HOST" required. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "10"] [id "440217"] [msg "Not Current Hostname"] [data "Matched Data: found within REQUEST_HEADERS:HOST: 58.156.166.103 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "58.156.166.103"] [uri "/"] [unique_id "ZPYHSvCxdxmdNFGDiAP3IAAAALE"] [58.156.166.103] [karangploso.jatim.bmkg.go.id] top=[270430] [cunEGCMCuh8] [ZPYHSvCxdxmdNFGDiAP3IAAAALE] keep_alive=[0] [2023-09-04 23:35:22.787802] [R:ZPYHSvCxdxmdNFGDiAP3IAAAALE] Host:'58.156.166.103' ... show less	Hacking Web App Attack
Anonymous	2023-09-04 13:45:04 (3 years ago)	TCP/80 probe	Port Scan
🇯🇵 stfw	2023-08-29 12:22:59 (3 years ago)	8082/tcp [2023-08-06/29]2pkt	Port Scan
🇮🇪 RoboSOC	2023-08-27 20:24:46 (3 years ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇩🇪 MRTECH	2023-08-26 05:21:00 (3 years ago)	Fail2Ban - \[UFW\]Port probing on unauthorized port ...	Port Scan
🇨🇳 ThreatBook.io	2023-08-22 23:35:46 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-08 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-08-22 03:50:37 / 2023-08-22 03:50:37 /manager/html show less	Web App Attack
🇨🇳 ThreatBook.io	2023-08-20 23:30:31 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-08 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-08-20 01:49:29 /manager/html 2023-08-20 01:49:29 / show less	Web App Attack
🇨🇳 ThreatBook.io	2023-08-19 23:37:22 (3 years ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-08 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/139.196.43.156 2023-08-19 16:52:10 /manager/html 2023-08-19 13:00:16 / 2023-08-19 13:00:16 /manager/html 2023-08-19 16:52:10 / show less	Web App Attack
🇮🇩 Burayot	2023-08-18 17:43:31 (3 years ago)	LF_MODSEC: (mod_security) mod_security (id:960015) triggered by 139.196.43.156 (CN/China/-): 2 in th ... show more LF_MODSEC: (mod_security) mod_security (id:960015) triggered by 139.196.43.156 (CN/China/-): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2023-08-18 06:09:05 (3 years ago)	Illegitimate and/or suspicious requests.	Hacking

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇿 210.54.120.219

🇨🇭 209.99.190.186

🇳🇱 204.76.203.4

🇩🇪 195.90.211.127

🇵🇱 194.180.49.123

🇳🇱 192.253.248.222

🇩🇪 185.204.171.55

🇲🇽 177.226.210.107

🇺🇸 166.1.56.186

🇺🇸 147.185.132.217

🇩🇪 69.5.169.183

🇮🇳 68.183.87.29

🇺🇸 65.49.20.74

🇧🇧 65.48.255.106

🇺🇸 50.6.207.212

🇸🇬 43.134.85.158

🇹🇭 27.130.180.207

🇳🇱 185.242.226.67

🇳🇱 185.226.197.30

🇺🇸 185.88.102.177