JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.194.1.112

39.194.1.112 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 26%: ?

26%

ISP	Gd. Wisma Mulia Lt.M-19
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Banjarmasin, South Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.194.1.112

Whois 39.194.1.112

IP Abuse Reports for 39.194.1.112:

This IP address has been reported a total of 15 times from 14 distinct sources. 39.194.1.112 was first reported on October 24th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 dyln	2026-06-24 07:31:41 (1 week ago)	Dyls honeypot brute-force: SMB (1 total hits)	Brute-Force
🇸🇰 GOVCERT	2026-06-23 08:09:26 (1 week ago)	Excessive Firewall Denies	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2026-06-20 13:20:29 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.194.1.112 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.194.1.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 09:20:21.214440 2026] [security2:error] [pid 18757:tid 18757] [client 39.194.1.112:11362] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.194.1.112 (+1 hits since last alert)\|schmitzcomm.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "schmitzcomm.net"] [uri "/xmlrpc.php"] [unique_id "ajaTlZgdarv2rIV1ZIhGNQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-20 10:13:47 (1 week ago)	(wordpress) Failed wordpress login from 39.194.1.112 (ID/Indonesia/-)	Brute-Force
Anonymous	2026-02-08 04:20:29 (4 months ago)	Excessive 404 errors	Brute-Force Web App Attack
🇬🇧 poundawebsiteltd	2026-02-08 03:33:21 (4 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 39.194.1.112 - - [08/Feb/2026:03 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 39.194.1.112 - - [08/Feb/2026:03:33:19 +0000] GET / HTTP/1.1 403 2842 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36 show less	Web App Attack
🇮🇩 hermawan	2026-01-28 21:15:59 (5 months ago)	[Thu Jan 29 04:16:00.417874 2026] [security2:error] [pid 230204:tid 140385805375168] [client 39.194. ... show more [Thu Jan 29 04:16:00.417874 2026] [security2:error] [pid 230204:tid 140385805375168] [client 39.194.1.112:3434] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: tmpl found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/galeri-foto-kegiatan/8-halal-bi-halal-bmkg-stasiun-klimatologi-karangploso-malang/info/515-image-091?tmpl=component HTTP/2.0 Request URI RAW = /index.php/galeri-foto-kegiatan/8-halal-bi-halal-bmkg-stasiun-klimatologi-karangploso-malang/info/515-image-091?tmpl=component Request Basename = 515-image-091"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/galeri-foto-kegiatan/8-halal-bi-halal-bmkg-stasiun-klimatologi- ... show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2026-01-17 23:57:25 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/39.194.1.112	SSH
🇫🇷 security.rdmc.fr	2026-01-17 06:15:20 (5 months ago)	Port Scan Attack proto:TCP src:8126 dst:23	Port Scan
🇮🇩 hermawan	2025-11-08 22:03:23 (7 months ago)	[Sun Nov 09 05:01:54.679907 2025] [security2:error] [pid 440028:tid 139644068574912] [client 39.194. ... show more [Sun Nov 09 05:01:54.679907 2025] [security2:error] [pid 440028:tid 139644068574912] [client 39.194.1.112:29184] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=476&id=758%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-6-oktober-12-oktober-2015&start=90 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=758%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-6-oktober-12-oktober-201..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aQ-90hVqdYXW0r ... show less	Hacking Web App Attack
🇩🇪 check-the-sum.fr	2025-10-29 04:42:21 (8 months ago)	Port Scanning	Port Scan
🇩🇪 IP Analyzer	2025-10-29 01:30:09 (8 months ago)	Unauthorized connection attempt from IP address 39.194.1.112 on Port 445(SMB)	Port Scan
🇩🇪 Josef Matula	2025-10-27 00:40:47 (8 months ago)	ports, 445/24H:1/7D:2	Port Scan
🇩🇪 Beta	2025-10-25 05:02:22 (8 months ago)	ports, 445/24H:1/7D:1	Port Scan
Anonymous	2025-10-24 01:00:29 (8 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.172.252.172

🇨🇷 201.203.117.192

🇳🇱 195.178.110.232

🇺🇸 162.216.150.145

🇰🇷 112.161.26.125

🇩🇪 69.5.169.201

🇺🇸 64.227.104.105

🇳🇱 46.151.178.13

🇬🇧 45.82.76.134

🇺🇸 18.224.3.33

🇸🇪 194.103.82.72

🇸🇬 185.150.0.99

🇨🇱 173.194.91.144

🇵🇰 154.208.47.199

🇫🇮 147.185.133.221

🇺🇸 100.29.192.8

🇰🇿 91.229.148.3

🇷🇴 80.94.92.109

🇧🇬 79.124.56.254

🇺🇸 68.196.193.187