JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.194.1.223

39.194.1.223 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 28%: ?

28%

ISP	Gd. Wisma Mulia Lt.M-19
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Banjarmasin, South Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.194.1.223

Whois 39.194.1.223

IP Abuse Reports for 39.194.1.223:

This IP address has been reported a total of 10 times from 8 distinct sources. 39.194.1.223 was first reported on November 8th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-10-16 16:32:20 (1 day ago)	(wordpress) Failed wordpress login from 39.194.1.223 (ID/Indonesia/South Kalimantan/Kota Banjarmasin ... show more (wordpress) Failed wordpress login from 39.194.1.223 (ID/Indonesia/South Kalimantan/Kota Banjarmasin/-) show less	Brute-Force
🇺🇸 WeekendWeb	2026-10-13 04:52:55 (4 days ago)	Wordpress Vunerability attack	Web App Attack
Anonymous	2026-10-12 22:46:11 (4 days ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
🇮🇩 hermawan	2026-10-11 04:59:16 (6 days ago)	[Sun Oct 11 11:59:15.605721 2026] [security2:error] [pid 603114:tid 140629015250624] [client 39.194. ... show more [Sun Oct 11 11:59:15.605721 2026] [security2:error] [pid 603114:tid 140629015250624] [client 39.194.1.223:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:referer: https://www.bing.go.id/ request_line = GET /images/vi_webp/eejS_qFJKYc/maxresdefault.webp HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/vi_webp/eejS_qFJKYc/maxresdefault.webp"] [unique_id "assXowGXDTtk8OBf7SG9NwAAARM"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[603160] [pRp0cQmhghM] [assXowGXDTtk8OBf7SG9NwAAARM] keep_alive=[0] [2026-10-11 11:59:15.605730] [R:assXowGXDTtk8OBf7SG9NwAAARM] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) ... show less	Email Spam Hacking
🇺🇸 kosada.com	2026-07-27 18:40:32 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-01-07 00:22:58 (9 months ago)	[Wed Jan 07 07:22:57.501318 2026] [security2:error] [pid 351303:tid 140119309711040] [client 39.194. ... show more [Wed Jan 07 07:22:57.501318 2026] [security2:error] [pid 351303:tid 140119309711040] [client 39.194.1.223:6512] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=473&id=591%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-29-juni-2015&start=90 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=473&id=591%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-23-29-juni-2015&start=90 Requ..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aV2nYROb50 ... show less	Hacking Web App Attack
🇩🇪 EinfxchFinn	2026-01-05 09:52:06 (9 months ago)	Unauthorized connection attempt to port 1433 from 39.194.1.223	Port Scan
🇮🇩 hermawan	2025-11-26 23:11:51 (10 months ago)	[Thu Nov 27 04:30:38.700520 2025] [security2:error] [pid 251618:tid 139901052233408] [client 39.194. ... show more [Thu Nov 27 04:30:38.700520 2025] [security2:error] [pid 251618:tid 139901052233408] [client 39.194.1.223:3044] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "188"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=475&id=1270%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-6-12-desember-2016&start=120 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=475&id=1270%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-6-12-desember-2016&star..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aSdxftQFz6 ... show less	Hacking Web App Attack
🇩🇪 london2038.com	2025-11-08 21:08:49 (11 months ago)	Connection atttempts against closed TCP ports Nov 8 20:58:29 BLOCK SRC=39.194.1.223 LEN=52 TOS=0x00 ... show more Connection atttempts against closed TCP ports Nov 8 20:58:29 BLOCK SRC=39.194.1.223 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=20850 DF PROTO=TCP SPT=16620 DPT=1433 WINDOW=8192 RES=0x00 SYN Nov 8 22:08:46 BLOCK SRC=39.194.1.223 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=63124 PROTO=TCP SPT=12016 DPT=135 WINDOW=32120 RES=0x00 SYN Nov 8 22:08:48 BLOCK SRC=39.194.1.223 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=63124 PROTO=TCP SPT=12016 DPT=135 WINDOW=0 RES=0x00 SYN show less	Port Scan
🇩🇪 David Ferneding	2025-11-08 21:08:28 (11 months ago)	Blocked by UFW (TCP on 135) Source port: 3341 TTL: 116 Packet length: 48 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 135) Source port: 3341 TTL: 116 Packet length: 48 TOS: 0x00 This report (for 39.194.1.223) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.215.232.2

🇺🇸 129.121.139.106

🇺🇸 104.168.134.232

🇻🇪 38.248.168.49

🇩🇪 195.63.27.22

🇬🇧 167.99.83.52

🇸🇪 70.34.202.108

🇺🇸 35.252.225.38

🇲🇾 202.165.26.170

🇷🇺 176.112.107.203

🇻🇳 123.31.31.125

🇬🇧 35.203.211.192

🇮🇹 146.241.119.178

🇺🇸 135.119.93.249

🇺🇸 129.121.136.201

🇭🇰 101.36.119.203

🇩🇪 93.152.221.59

🇺🇸 57.141.6.44

🇧🇪 35.241.162.108

🇳🇱 35.204.195.21