This IP address has been reported a total of
8
times from
5 distinct
sources.
140.213.35.189 was first reported on
March 2nd 2025 , and the most recent report was
1 week ago Indonesia
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
2
times;
DDoS Attack
1
time;
Ping of Death
1
time;
IoT Targeted
1
time;
Bad Web Bot
1
time;
Other
8
times.
Old Reports
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
David Koswari
2026-10-16 05:12:00
(1 week ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇮🇩
robertjanuarta
2026-10-13 09:50:23
(1 week ago)
Web App Attack
🇮🇩
sockominfo
2026-04-11 23:00:43
(6 months ago)
User login to application during non-business hours. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. ...
show more
User login to application during non-business hours. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-04-11 22:01:37
(6 months ago)
User login to application during non-business hours. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. ...
show more
User login to application during non-business hours. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-04-11 21:00:46
(6 months ago)
User login to application during non-business hours. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. ...
show more
User login to application during non-business hours. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-04-11 19:00:47
(6 months ago)
User login to application during non-business hours. Threat Score: 6/10 (MEDIUM). Reported by Tanger ...
show more
User login to application during non-business hours. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇫🇮
oh.mg
2025-04-24 14:45:54
(1 year ago)
[Thu Apr 24 16:45:51.624270 2025] [security2:error] [pid 1823090:tid 1823112] [client 140.213.35.189 ...
show more
[Thu Apr 24 16:45:51.624270 2025] [security2:error] [pid 1823090:tid 1823112] [client 140.213.35.189:0] [client 140.213.35.189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.mmn.ca"] [uri "/"] [unique_id "aApOnxrhvNzg8aNFJSd6oAAAANQ"]
[Thu Apr 24 16:45:53.584831 2025] [security2:error] [pid 1823090:tid 1823106] [client 140.213.35.189:0] [client 140.213.35.189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-e
...
show less
Bad Web Bot
Web App Attack
2025-03-02 06:37:00
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
Showing 1 to
8
of 8 reports
