AbuseIPDB » 103.106.219.130
103.106.219.130
This IP was reported 9 times. Confidence of
Abuse
is 25% : ?
ISP
PT. ARTHA LINTAS DATA MANDIRI
Usage Type
Fixed Line ISP
ASN
AS137329
Domain Name
aldm.net.id
Country
🇮🇩
Indonesia
City
Bangil, East Java
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 103.106.219.130 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
103.106.219.130 was first reported on
February 22nd 2025 , and the most recent report was
1 week ago
Old Reports:
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇪🇸
raiolanetworks.com
2026-10-16 22:37:21
(1 week ago)
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a hone ...
show more
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
show less
Port Scan
🇩🇪
Viveronese
2026-10-16 04:06:17
(1 week ago)
SMTP brute force attacks
Brute-Force
🇩🇪
filstal.org
2026-10-15 21:26:03
(1 week ago)
CrowdSec: crowdsecurity/postfix-helo-rejected
Email Spam
2026-10-15 17:09:46
(1 week ago)
2026-10-15T19:09:44.658473+02:00 gollum postfix/smtpd[618705]: NOQUEUE: reject: RCPT from unknown[10 ...
show more
2026-10-15T19:09:44.658473+02:00 gollum postfix/smtpd[618705]: NOQUEUE: reject: RCPT from unknown[103.106.219.130]: 554 5.7.1 Service unavailable; Client host [103.106.219.130] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/103.106.219.130 / Listed by PBL, see https://check.spamhaus.org/query/ip/103.106.219.130 / Listed by CSS, see https://check.spamhaus.org/query/ip/103.106.219.130; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<103.106.219.130>
...
show less
Email Spam
🇷🇺
DZBOT
2026-07-05 07:11:22
(3 months ago)
DZBOT: [MTA] NO LOGIN / auth failed
Port Scan
Brute-Force
🇺🇸
kosada.com
2026-06-26 22:47:55
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇹
VHosting
2026-04-26 09:29:03
(6 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇮🇩
hermawan
2025-10-12 11:39:53
(1 year ago)
[Sun Oct 12 17:56:21.128637 2025] [security2:error] [pid 337720:tid 139931128137408] [client 103.106 ...
show more
[Sun Oct 12 17:56:21.128637 2025] [security2:error] [pid 337720:tid 139931128137408] [client 103.106.219.130:39457] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?id= found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?id=617&start=120 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?id=617&start=120 Request Basename = arsip-artikel"] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOuJVX0zDk47YtrRZMDyTgABigc"] [staklim-malang.info] [staklim-malang.info] top=[337728] [7XJBALR8F4Q] [aOuJVX0zDk47YtrRZMDyTgABigc] keep_alive=[1] [2025-10-12 17:56:21.128645] [R:aOuJVX0zDk47
...
show less
Hacking
Web App Attack
🇮🇩
hermawan
2025-02-22 07:39:09
(1 year ago)
[Sat Feb 22 14:38:38.978513 2025] [security2:error] [pid 153320:tid 140656954144448] [client 103.106 ...
show more
[Sat Feb 22 14:38:38.978513 2025] [security2:error] [pid 153320:tid 140656954144448] [client 103.106.219.130:48744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "fr" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "187"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: fr found within REQUEST_HEADERS:Accept-Language: en-US,en;q=0.9,fr;q=0.8,id;q=0.7 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/TableFilter/system-v167.css"] [unique_id "Z7l-_iLzvk_A4SbRm4rFdAAAEgk"], referer https://staklim-malang.info/index.php/normal-klimatologi/198-normal-awal-musim/normal-awal-musim-kemarau/normal-awal-musim-kemarau-propinsi-jawa-timur [staklim-malang.info] [staklim-malang.info] top=[153330] [sUYKMp77LKk] [Z7l-_iLzvk_A4SbRm4rFdAAAEgk] keep_alive=[1] [2025-02-22 14:38:38.97851
...
show less
Hacking
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: