AbuseIPDB » 140.249.15.143

140.249.15.143 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 12%: ?

12%

ISP	ChinaNet Shandong Province Network
Usage Type	Unknown
Domain Name	chinatelecom.com.cn
Country	China
City	Linyi, Shandong

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 140.249.15.143

Whois 140.249.15.143

IP Abuse Reports for 140.249.15.143:

This IP address has been reported a total of 19 times from 3 distinct sources. 140.249.15.143 was first reported on April 6th 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-10-03 04:06:19 (6 days ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2024-09-24 13:35:53 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
TPI-Abuse	2024-09-18 19:34:53 (2 weeks ago)	(mod_security) mod_security (id:210801) triggered by 140.249.15.143 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210801) triggered by 140.249.15.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 18 15:34:45.552067 2024] [security2:error] [pid 13809:tid 13809] [client 140.249.15.143:37280] [client 140.249.15.143] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "jikespider" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|advantstudio.com\|F\|2"] [data "baiduspider+(+http://www.baidu.com/search/spider.htm);google\|baiduspider\|baidu\|spider\|sogou\|bing\|yahoo\|soso\|sosospider\|360spider\|youdao\|jikespider;)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "advantstudio.com"] [uri "/"] [unique_id "ZusrVXCSQBvooH2vfRPLkAAAAAo"], referer: http://www.xlhs.com/azgame/66514.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-18 15:06:08 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2024-08-12 08:31:37 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2024-06-05 04:21:10 (4 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2024-05-05 04:58:43 (5 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2024-04-08 03:08:02 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2024-04-04 01:35:45 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2024-03-29 12:37:55 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2024-03-17 16:54:44 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
Anonymous	2024-03-10 06:42:16 (6 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
ThreatBook.io	2023-05-25 01:32:38 (1 year ago)	ThreatBook Intelligence: Search Engine Crawler,Scanner more details on https://threatbook.io/ip/140. ... show moreThreatBook Intelligence: Search Engine Crawler,Scanner more details on https://threatbook.io/ip/140.249.15.143 2023-05-24 12:38:00 / 2023-05-24 12:38:27 /assets/webpack/main.b5cfaf04.chunk.js 2023-05-24 12:37:56 / 2023-05-24 12:38:27 /assets/webpack/pages.sessions.new.fbc60106.chunk.js 2023-05-24 12:38:01 / 2023-05-24 12:38:27 /assets/webpack/runtime.7c7b62b1.bundle.js 2023-05-24 12:38:00 / 2023-05-24 12:37:56 /scm/esg-ucem/esg-ucem-core.git 2023-05-24 12:37:57 /scm/esg-ucem/esg-ucem-core.git show less	Web App Attack
ThreatBook.io	2023-05-18 02:07:42 (1 year ago)	ThreatBook Intelligence: Search Engine Crawler,Scanner more details on https://threatbook.io/ip/140. ... show moreThreatBook Intelligence: Search Engine Crawler,Scanner more details on https://threatbook.io/ip/140.249.15.143 2023-05-17 10:38:16 / 2023-05-17 10:38:15 / 2023-05-17 10:38:15 / 2023-05-17 10:38:15 /scm/esg-ucem/esg-ucem-core.git 2023-05-17 10:38:15 /scm/esg-ucem/esg-ucem-core.git 2023-05-17 10:38:16 / show less	Web App Attack
ThreatBook.io	2023-04-30 02:15:13 (1 year ago)	ThreatBook Intelligence: Search Engine Crawler,IDC more details on https://threatbook.io/ip/140.249. ... show moreThreatBook Intelligence: Search Engine Crawler,IDC more details on https://threatbook.io/ip/140.249.15.143 2023-04-29 13:58:46 /scm/esg-ucem/esg-ucem-core.git 2023-04-29 13:58:48 / 2023-04-29 13:58:52 / 2023-04-29 13:59:21 /assets/webpack/main.b5cfaf04.chunk.js 2023-04-29 13:59:20 /assets/webpack/pages.sessions.new.fbc60106.chunk.js 2023-04-29 13:58:46 /scm/esg-ucem/esg-ucem-core.git 2023-04-29 13:58:47 / 2023-04-29 13:58:51 / 2023-04-29 13:59:21 /assets/webpack/runtime.7c7b62b1.bundle.js show less	Web App Attack