JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.124.137.27

Neutral Activity

Abuse confidence score ?

0% Low Risk

67 reports

46 reporters · latest 1 year ago

ISP	PT.Global Media Data Prima
Usage Type	Fixed Line ISP
ASN	AS138089
Domain Name	gmdp.net.id
Country	🇮🇩 Indonesia
City	Wonogiri, Central Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.124.137.27 has been reported 67 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.124.137.27

Export CSV

This IP address has been reported a total of 67 times from 46 distinct sources. 103.124.137.27 was first reported on May 9th 2021, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-12-04 04:47:56 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇦 URAN Publishing Service	2024-12-04 04:32:43 (1 year ago)	103.124.137.27 - - [04/Dec/2024:06:32:42 +0200] "GET /.env HTTP/1.1" 404 2860 "http://scimono.bsmu.e ... show more 103.124.137.27 - - [04/Dec/2024:06:32:42 +0200] "GET /.env HTTP/1.1" 404 2860 "http://scimono.bsmu.edu.ua/.env" "Go-http-client/1.1" ... show less	Web App Attack
Anonymous	2024-12-03 08:44:02 (1 year ago)	103.124.137.27 - - [03/Dec/2024:09:29:19 +0100] "GET / HTTP/1.1" 403 5353 "http://iemanja.eu/.env" " ... show more 103.124.137.27 - - [03/Dec/2024:09:29:19 +0100] "GET / HTTP/1.1" 403 5353 "http://iemanja.eu/.env" "Go-http-client/1.1" ... show less	Web App Attack
🇮🇩 penjaga BRIN	2024-12-03 07:14:08 (1 year ago)	apache-alfa-111	Web App Attack
🇺🇸 TPI-Abuse	2024-12-03 04:39:32 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.124.137.27 (ptr-103-124-137-27.gmdp.net.id) ... show more (mod_security) mod_security (id:210492) triggered by 103.124.137.27 (ptr-103-124-137-27.gmdp.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 02 23:39:28.170770 2024] [security2:error] [pid 7196:tid 7196] [client 103.124.137.27:21207] [client 103.124.137.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glideleague.com"] [uri "/.env"] [unique_id "Z06LgBruqUUjkALqkK6UyQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 sid3windr	2024-12-03 04:30:04 (1 year ago)	GET /.env (Tarpitted for , wasted 0B)	Web App Attack
🇺🇦 URAN Publishing Service	2024-12-03 04:20:48 (1 year ago)	103.124.137.27 - - [03/Dec/2024:06:20:47 +0200] "GET /.env HTTP/1.1" 404 2859 "http://scimono.bsmu.e ... show more 103.124.137.27 - - [03/Dec/2024:06:20:47 +0200] "GET /.env HTTP/1.1" 404 2859 "http://scimono.bsmu.edu.ua/.env" "Go-http-client/1.1" ... show less	Web App Attack
🇯🇵 Rcat	2024-12-03 04:04:19 (1 year ago)	103.124.137.27 - - [03/Dec/2024:13:04:17 +0900] "GET /.env HTTP/1.1" 400 150 "-" "Go-http-client/1.1 ... show more 103.124.137.27 - - [03/Dec/2024:13:04:17 +0900] "GET /.env HTTP/1.1" 400 150 "-" "Go-http-client/1.1" "rftp.mydns.jp" ... show less	Hacking
🇳🇿 Tripwire	2024-12-03 03:26:47 (1 year ago)	Scanning for exploits - /.env	Web App Attack
🇸🇬 Starburst SysOp Team	2024-12-03 03:22:19 (1 year ago)	(mod_security-custom) mod_security (id:210492) triggered by 103.124.137.27 (ID/Indonesia/ptr-103-124 ... show more (mod_security-custom) mod_security (id:210492) triggered by 103.124.137.27 (ID/Indonesia/ptr-103-124-137-27.gmdp.net.id): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Tue Dec 03 03:22:13.684256 2024] [:error] [pid 2627524:tid 2627527] [client 103.124.137.27:22300] [client 103.124.137.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sin2-3.starburstserver.net"] [uri "/.env"] [unique_id "Z055ZYgQeIJdruW5q8A0dwAAAME"] show less	Hacking
🇺🇦 URAN Publishing Service	2024-12-03 03:20:17 (1 year ago)	103.124.137.27 - - [03/Dec/2024:05:20:06 +0200] "GET /.env HTTP/1.1" 404 2861 "http://artmind.ndiu.o ... show more 103.124.137.27 - - [03/Dec/2024:05:20:06 +0200] "GET /.env HTTP/1.1" 404 2861 "http://artmind.ndiu.org.ua/.env" "Go-http-client/1.1" 103.124.137.27 - - [03/Dec/2024:05:20:14 +0200] "GET /.env HTTP/1.1" 404 2861 "http://artmind.ndiu.org.ua/.env" "Go-http-client/1.1" ... show less	Web App Attack
Anonymous	2024-12-03 03:17:51 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2022-07-02 00:32:23 (4 years ago)	Jul 2 06:32:22 ns3104219 postfix/smtpd[21493]: NOQUEUE: reject: RCPT from unknown[103.124.137.27]: ... show more Jul 2 06:32:22 ns3104219 postfix/smtpd[21493]: NOQUEUE: reject: RCPT from unknown[103.124.137.27]: 450 4.7.1 <mail-yw1-a55.google.com>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail-yw1-a55.google.com> ... show less	Email Spam Web App Attack
🇺🇸 ad5gb.com	2022-06-15 10:26:15 (4 years ago)	103.124.137.27 - - [15/Jun/2022:09:24:03 -0500] "GET http://ad5gb.com/ HTTP/1.1" 301 303 000 0 0 0 5 ... show more 103.124.137.27 - - [15/Jun/2022:09:24:03 -0500] "GET http://ad5gb.com/ HTTP/1.1" 301 303 000 0 0 0 571 327 0 0 0 DIRECT FIN FIN TCP_MISS ... show less	Brute-Force
🇮🇸 ISPLtd	2022-05-31 11:49:45 (4 years ago)	May 31 12:38:47 SRC=103.124.137.27 PROTO=TCP SPT=53532 DPT=3478 SYN May 31 12:38:48 SRC=103.124.137. ... show more May 31 12:38:47 SRC=103.124.137.27 PROTO=TCP SPT=53532 DPT=3478 SYN May 31 12:38:48 SRC=103.124.137.27 PROTO=TCP SPT=53532 DPT=3478 SYN May 31 12:38:48 SRC=103.124.137.27 PROTO=TCP SPT=53545 DPT=3478 ... show less	Port Scan

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.203.218.174

🇺🇸 137.184.75.34

🇺🇸 24.90.237.141

🇺🇸 2604:a880:400:d1:0:5:3587:1

🇺🇸 2604:a880:400:d1:0:4:defa:1

🇺🇸 216.218.206.121

🇧🇪 207.175.231.35

🇧🇪 198.235.24.184

🇺🇸 192.81.132.226

🇨🇱 191.113.77.81

🇳🇱 185.242.226.60

🇨🇳 182.54.23.74

🇳🇱 176.65.148.244

🇺🇸 165.22.179.84

🇮🇩 163.7.6.41

🇮🇳 152.52.15.213

🇮🇳 122.183.58.215

🇹🇼 111.70.32.10

🇮🇳 103.182.117.47

🇺🇦 93.171.231.235