JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

192.248.40.136

Neutral Activity

Abuse Confidence Score

0% Low Risk

96 reports

51 reporters · latest 2 years ago

ISP: Lanka Education and Research Network (LEARN)
Usage Type: University/College/School
ASN: AS38229
Domain Name: learn.ac.lk
Country: 🇱🇰 Sri Lanka
City: Kandy, Central Province

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

192.248.40.136 has been reported 96 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

96 from 51 distinct reporters

First reported

February 7th 2022

Most recent report

2 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 08:57:47 UTC · (2 years ago)	Unauthorized connection attempt	Brute-Force
🇺🇸 gu-alvareza	2024-03-09 07:05:22 UTC · (2 years ago)	PHPUnit.Eval-stdin.PHP.Remote.Code.Execution	Hacking Web App Attack
Anonymous	2024-03-09 03:29:22 UTC · (2 years ago)	bot search	Port Scan Bad Web Bot
🇩🇪 XeroX	2024-03-06 17:03:08 UTC · (2 years ago)	2024-03-06T18:02:40.537311+01:00 de1 sshd[1901622]: Failed password for root from 192.248.40.136 port 39206 ssh2 2024-03-06T18:02:43.237731+01:00 de1 sshd[1902099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho ... show more 2024-03-06T18:02:40.537311+01:00 de1 sshd[1901622]: Failed password for root from 192.248.40.136 port 39206 ssh2 2024-03-06T18:02:43.237731+01:00 de1 sshd[1902099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.248.40.136 user=root 2024-03-06T18:02:44.740556+01:00 de1 sshd[1902099]: Failed password for root from 192.248.40.136 port 39216 ssh2 ... show less	Brute-Force SSH
🇺🇸 gu-alvareza	2024-03-06 07:05:21 UTC · (2 years ago)	PHPUnit.Eval-stdin.PHP.Remote.Code.Execution	Hacking Web App Attack
🇩🇪 rh24	2024-03-05 11:08:19 UTC · (2 years ago)	(sshd) Failed SSH login from 192.248.40.136 (LK/Sri Lanka/-)	Brute-Force SSH
🇩🇪 Mr-Money	2024-03-05 08:01:48 UTC · (2 years ago)	192.248.40.136 - - [05/Mar/2024:09:01:47 +0100] "GET /script HTTP/1.1" 404 424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0" ...	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
Anonymous	2024-03-04 01:50:45 UTC · (2 years ago)		Brute-Force SSH
🇺🇸 whitehat AbuseIPDB Official	2024-03-03 10:13:05 UTC · (2 years ago)	2024-03-03T10:12:55.567211shield sshd\[25201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.248.40.136 user=root 2024-03-03T10:12:57.521642shield sshd\[25201\]: Failed password for root from 192.248 ... show more 2024-03-03T10:12:55.567211shield sshd\[25201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.248.40.136 user=root 2024-03-03T10:12:57.521642shield sshd\[25201\]: Failed password for root from 192.248.40.136 port 44104 ssh2 2024-03-03T10:12:59.576351shield sshd\[25231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.248.40.136 user=root 2024-03-03T10:13:02.081636shield sshd\[25231\]: Failed password for root from 192.248.40.136 port 58960 ssh2 2024-03-03T10:13:04.411937shield sshd\[25247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.248.40.136 user=root show less	Brute-Force SSH
🇩🇪 LoNET	2024-03-02 19:27:41 UTC · (2 years ago)	Report 1017982 with IP 2065528 for SSH brute-force attack by source 2060207 via ssh-honeypot/0.2.0+http	Brute-Force SSH
🇺🇸 RAP	2024-03-02 11:11:34 UTC · (2 years ago)	2024-03-02 11:11:34 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇨🇿 gszasz	2024-03-02 10:20:09 UTC · (2 years ago)	2024-03-02T11:20:05.307795phoenix2 sshd[8634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.248.40.136 user=root 2024-03-02T11:20:07.749706phoenix2 sshd[8634]: Failed password for root from 192.248.40.1 ... show more 2024-03-02T11:20:05.307795phoenix2 sshd[8634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.248.40.136 user=root 2024-03-02T11:20:07.749706phoenix2 sshd[8634]: Failed password for root from 192.248.40.136 port 50528 ssh2 2024-03-02T11:20:07.979042phoenix2 sshd[8634]: Connection closed by 192.248.40.136 port 50528 [preauth] ... show less	Brute-Force SSH
🇭🇷 IgorS.zg.hr	2024-03-02 01:55:39 UTC · (2 years ago)	SSHD brute force attack detected by fail2ban	Brute-Force SSH
PeravixGroup	2024-02-28 18:12:50 UTC · (2 years ago)	2024-02-28T18:12:44.679399 AdbuseHP sshd[1323017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.248.40.136 user=root 2024-02-28T18:12:46.674007 AdbuseHP sshd[1323017]: Failed password for root from 192. ... show more 2024-02-28T18:12:44.679399 AdbuseHP sshd[1323017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.248.40.136 user=root 2024-02-28T18:12:46.674007 AdbuseHP sshd[1323017]: Failed password for root from 192.248.40.136 port 56416 ssh2 ... show less	Brute-Force SSH
🇸🇬 tommygod.ddns.net	2024-02-28 09:27:09 UTC · (2 years ago)	[28/Feb/2024:09:27:06 +0000] Zd78aqFVCfJFWVwMz40wZwAAAAE 192.248.40.136 41000 172.104.34.116 80 [28/Feb/2024:09:27:07 +0000] Zd78a9IT7_R0wNk4aXIlTgAAAAQ 192.248.40.136 57810 172.104.34.116 80 [28/Feb/2024:09:27:07 +0000] Zd78a6YdOherwSE8PPNcngAAAAM 1 ... show more [28/Feb/2024:09:27:06 +0000] Zd78aqFVCfJFWVwMz40wZwAAAAE 192.248.40.136 41000 172.104.34.116 80 [28/Feb/2024:09:27:07 +0000] Zd78a9IT7_R0wNk4aXIlTgAAAAQ 192.248.40.136 57810 172.104.34.116 80 [28/Feb/2024:09:27:07 +0000] Zd78a6YdOherwSE8PPNcngAAAAM 192.248.40.136 57816 172.104.34.116 80 [28/Feb/2024:09:27:07 +0000] Zd78a7Fdj2M4OUIz4ycoMQAAAAg 192.248.40.136 54238 172.104.34.116 443 [28/Feb/2024:09:27:07 +0000] Zd78a0QU8FSIvUxXVFnwGgAAAAk 192.248.40.136 57832 172.104.34.116 80 [28/Feb/2024:09:27:08 +0000] Zd78bHcgtb3C1TveVi2_KgAAAAc 192.248.40.136 57848 172.104.34.116 80 [28/Feb/2024:09:27:08 +0000] Zd78bKFVCfJFWVwMz40waAAAAAE 192.248.40.136 57850 172.104.34.116 80 [28/Feb/2024:09:27:08 +0000] Zd78bNIT7_R0wNk4aXIlTwAAAAQ 192.248.40.136 57864 172.104.34.116 80 [28/Feb/2024:09:27:08 +0000] Zd78bKYdOherwSE8PPNcnwAAAAM 192.248.40.136 57872 172.104.34.116 80 [28/Feb/2024:09:27:08 +0000] Zd78bEQU8FSIvUxXVFnwGwAAAAk 192.248.40.136 57878 172.104.34.116 80 show less	SQL Injection Brute-Force

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 188.240.59.40

🇧🇷 179.48.18.42

🇳🇱 45.148.10.157

🇺🇸 20.150.212.188

🇵🇱 172.64.200.197

🇵🇱 172.64.200.171

🇮🇳 103.17.193.221

🇩🇪 195.182.16.183

🇨🇳 183.134.4.166

🇵🇱 172.64.198.150

🇫🇷 169.40.142.26

🇳🇱 109.160.32.156

🇨🇭 107.189.14.87

🇨🇳 103.255.200.90

🇧🇷 45.229.91.2

🇧🇷 179.186.120.133

🇺🇸 162.216.149.187

🇮🇷 130.193.77.236

🇧🇷 128.201.9.152

🇨🇳 112.94.253.177