AbuseIPDB » 139.5.200.74

139.5.200.74 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 100%: ?

100%

ISP	Netsec Limited
Usage Type	Data Center/Web Hosting/Transit
Domain Name	simcentric.com
Country	Hong Kong
City	Hong Kong

Report 139.5.200.74

Whois 139.5.200.74

IP Abuse Reports for 139.5.200.74:

This IP address has been reported a total of 134 times from 79 distinct sources. 139.5.200.74 was first reported on August 29th 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
www.unitiz.com	2024-12-04 09:47:40 (3 days ago)	Probing non-existent URLs	Bad Web Bot Web App Attack
canine.tools	2024-11-30 17:13:41 (1 week ago)	[fail2ban Auto Report] 139.5.200.74 - - [30/Nov/2024:12:13:41 -0500] "GET /wp-login.php HTTP/1.1" 30 ... show more[fail2ban Auto Report] 139.5.200.74 - - [30/Nov/2024:12:13:41 -0500] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" ... show less	Brute-Force Web App Attack
Steve	2024-11-30 16:45:07 (1 week ago)	Attempts against non-existent wordpress site	Brute-Force Web App Attack
deskpass.com	2024-11-30 16:33:31 (1 week ago)	GET /wp-login.php	Web App Attack
Xuan Can	2024-11-30 16:28:05 (1 week ago)	(mod_security) mod_security (id:6) triggered by 139.5.200.74 (HK/Hong Kong/-): 1 in the last 3600 se ... show more(mod_security) mod_security (id:6) triggered by 139.5.200.74 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 30 23:27:57.930043 2024] [security2:error] [pid 40047:tid 40096] [client 139.5.200.74:52046] [client 139.5.200.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "web30s.vn"] [uri "/wp-login.php"] [unique_id "Z0s9De8b5FS4Tc4FLqSj_gAAAFQ"] show less	Brute-Force SSH
Anonymous	2024-11-30 15:59:17 (1 week ago)	Malicious activity detected	Hacking Web App Attack
ph	2024-11-30 15:58:49 (1 week ago)	Bad web bot attempting to run wp-login.php on non-WP site	Hacking Bad Web Bot Web App Attack
Hirte	2024-11-30 15:47:44 (1 week ago)	SS5: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
rdpguard.com	2024-11-30 15:19:59 (1 week ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Mehmet_The_Script_Kiddie	2024-11-30 15:11:15 (1 week ago)	CloudFlare WAF REPORT: /wp-login.php	Bad Web Bot Web App Attack
exxos	2024-11-30 14:59:50 (1 week ago)	web exploit attacks	Web App Attack
Xuan Can	2024-11-30 14:36:42 (1 week ago)	(mod_security) mod_security (id:6) triggered by 139.5.200.74 (HK/Hong Kong/-): 1 in the last 3600 se ... show more(mod_security) mod_security (id:6) triggered by 139.5.200.74 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 30 21:36:34.186211 2024] [security2:error] [pid 1189:tid 1233] [client 139.5.200.74:59774] [client 139.5.200.74] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "web30s.vn"] [uri "/wp-login.php"] [unique_id "Z0si8sPeMIqHdA2K_PAPewAAAVA"] show less	Brute-Force SSH
botreporter	2024-11-30 14:27:04 (1 week ago)	CMS vulnerability/installation scanning	Brute-Force Web App Attack
whitehat AbuseIPDB Official	2024-11-30 12:28:10 (1 week ago)	Sniffing for wp-login	Bad Web Bot Web App Attack
JimArchon72	2024-11-30 12:00:01 (1 week ago)	2024/11/30 11:57:32 "GET /wp-login.php HTTP/1.1"	Web App Attack