JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.109.101.17

Neutral Activity

Abuse confidence score ?

0% Low Risk

116 reports

79 reporters · latest 11 months ago

ISP	102 Aarti Chambers,
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206264
Domain Name	koddos.net
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.109.101.17 has been reported 116 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.109.101.17

Export CSV

This IP address has been reported a total of 116 times from 79 distinct sources. 103.109.101.17 was first reported on August 25th 2025, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-11-04 02:13:59 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 103.109.101.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.109.101.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 21:13:51.365281 2025] [security2:error] [pid 31251:tid 31251] [client 103.109.101.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.git/config"] [unique_id "aQlhX5DqGgtVyB3syGwJ0gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2025-11-04 00:58:59 (11 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 103.109.101.17 (HK/H ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 103.109.101.17 (HK/Hong Kong/-): (CF_ENABLE) show less	Bad Web Bot
🇳🇱 Site.eu	2025-11-04 00:06:15 (11 months ago)	Excessive multi-domain requests	Brute-Force
🇪🇸 masterguru	2025-11-03 18:08:00 (11 months ago)	Restricted File Access Attempt. Matched phrase "/.git/" at REQUEST_FILENAME. (930130-122)	Hacking Web App Attack
🇬🇧 pinguin	2025-11-03 15:53:56 (11 months ago)	Triggered Cloudflare WAF (firewallManaged) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Turso/1.2 (+https://turso.tech) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Roper123	2025-11-03 10:14:02 (11 months ago)	Web exploits	Web App Attack
🇩🇪 Kreapptivo	2025-11-03 06:37:45 (11 months ago)	[03/Nov/2025:07:37:41 +0100] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (X11; Linux x ... show more [03/Nov/2025:07:37:41 +0100] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇷🇴 INTEQ	2025-11-03 03:43:33 (11 months ago)	Web attack from 103.109.101.17	Web App Attack
🇬🇧 [email protected]	2025-11-03 00:31:28 (11 months ago)	...	Brute-Force SSH
🇪🇪 Unwasted	2025-11-02 23:34:52 (11 months ago)	File scanning	Hacking Web App Attack
🇪🇸 tutaim.com	2025-11-02 23:00:13 (11 months ago)	⛔ [03/11/25] This IP has been detected performing multiple attacks on websites (6 attempts blocked). ... show more ⛔ [03/11/25] This IP has been detected performing multiple attacks on websites (6 attempts blocked). Potential malicious activity. show less	FTP Brute-Force Brute-Force Web App Attack SSH
🇺🇸 Starburst SysOp Team	2025-11-02 22:09:33 (11 months ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 17.101.109.103.rbl.malw ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 17.101.109.103.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3) show less	Hacking
🇳🇱 jaapeldoorn	2025-11-02 14:37:42 (11 months ago)	[Sun Nov 02 15:37:38.643386 2025] [authz_core:error] [pid 3897:tid 3935] [client 103.109.101.17:4725 ... show more [Sun Nov 02 15:37:38.643386 2025] [authz_core:error] [pid 3897:tid 3935] [client 103.109.101.17:47250] AH01630: client denied by server configuration: /var/www [Sun Nov 02 15:37:39.025839 2025] [authz_core:error] [pid 3897:tid 3937] [client 103.109.101.17:47250] AH01630: client denied by server configuration: /var/www [Sun Nov 02 15:37:39.407559 2025] [authz_core:error] [pid 3897:tid 3938] [client 103.109.101.17:47250] AH01630: client denied by server configuration: /var/www ... show less	Brute-Force
🇦🇺 clapper	2025-11-02 13:43:57 (11 months ago)	(mod_security) mod_security (id:949110) triggered by 103.109.101.17 (HK/Hong Kong/-): 5 in the last ... show more (mod_security) mod_security (id:949110) triggered by 103.109.101.17 (HK/Hong Kong/-): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2025-11-02 08:34:59 (11 months ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.220.137.34

🇩🇪 185.203.217.227

🇹🇳 102.31.189.172

🇨🇳 101.75.224.26

🇫🇷 91.231.89.155

🇺🇸 71.217.167.118

🇦🇷 45.70.10.233

🇺🇸 45.61.187.10

🇧🇪 34.77.94.67

🇺🇸 34.74.218.3

🇧🇪 34.22.178.211

🇺🇸 20.168.116.119

🇸🇪 217.211.208.125

🇧🇪 207.175.37.141

🇮🇳 202.164.32.112

🇬🇧 193.163.125.160

🇳🇱 185.223.235.2

🇵🇾 181.91.87.15

🇺🇸 173.63.166.140

🇩🇪 167.94.146.53