JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.129.149.19

103.129.149.19

Neutral Activity

136 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

PT Biznet Gio Nusantara

Usage Type

Data Center/Web Hosting/Transit

ASN

AS133800

Hostname(s)

ip-19-149-129-103.wjv-1.biznetg.io

Domain Name

biznetgio.com

Country

🇮🇩 Indonesia

City

Bogor, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.129.149.19 has been reported 136 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.129.149.19:

This IP address has been reported a total of 136 times from 43 distinct sources. 103.129.149.19 was first reported on November 19th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-01-27 12:45:50 (1 year ago)	[26/Jan/2025:06:59:59 -0500] - [26/Jan/2025:07:00:41 -0500] General vuln. probe	Hacking
🇨🇳 ThreatBook.io	2025-01-26 23:48:17 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/103.129.149.19 2025-01 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/103.129.149.19 2025-01-26 20:11:00 /,{"body":"","content_type":"","header":{"Accept":["/"],"User-Agent":["Mozilla/5.0 (X11; OpenBSD amd64; rv:28.0) Gecko/20100101 Firefox/28.0"]},"host":"182.92.148.201","method":"POST","proto":"HTTP/1.1","remote_addr":"103.129.149.19:44486","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (X11; OpenBSD amd64; rv:28.0) Gecko/20100101 Firefox/28.0"} show less	Web App Attack
🇺🇸 MPL	2025-01-26 13:05:33 (1 year ago)	tcp/80 (12 or more attempts)	Port Scan
Anonymous	2025-01-26 00:48:41 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇹🇭 Sawasdee	2025-01-26 00:33:08 (1 year ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇧🇪 voormedia	2025-01-25 10:48:03 (1 year ago)	Accessed trap at '/actuator/env'	Web App Attack
🇸🇬 Starburst SysOp Team	2025-01-25 09:24:51 (1 year ago)	(mod_security-custom) mod_security (id:210730) triggered by 103.129.149.19 (ID/Indonesia/ip-19-149-1 ... show more (mod_security-custom) mod_security (id:210730) triggered by 103.129.149.19 (ID/Indonesia/ip-19-149-129-103.wjv-1.biznetg.io): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Sat Jan 25 09:24:47.728395 2025] [:error] [pid 2569758:tid 2569777] [client 103.129.149.19:39354] [client 103.129.149.19] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|46.250.231.211\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "46.250.231.211"] [uri "/application.ini"] [unique_id "Z5St30TkY-KyUk0KnIatHwAAANE"] show less	Hacking
🇺🇸 Starburst SysOp Team	2025-01-25 04:24:38 (1 year ago)	(mod_security-custom) mod_security (id:217200) triggered by 103.129.149.19 (ID/Indonesia/ip-19-149-1 ... show more (mod_security-custom) mod_security (id:217200) triggered by 103.129.149.19 (ID/Indonesia/ip-19-149-129-103.wjv-1.biznetg.io): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Sat Jan 25 04:24:33.119308 2025] [:error] [pid 787870:tid 787878] [client 103.129.149.19:33988] [client 103.129.149.19] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|152.53.31.7\|F\|2"] [data "/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "152.53.31.7"] [uri "/"] [unique_id "Z5Rngf0GdJaQN5phNDzIRwAAAAU"] show less	Hacking
🇺🇸 MPL	2025-01-24 22:23:16 (1 year ago)	tcp/80 (12 or more attempts)	Port Scan
🇩🇪 SCHAPPY	2025-01-24 18:48:19 (1 year ago)	Faked HTTP referer string using numeric IP address of destination host instead of host name.	Hacking Web App Attack
🇧🇪 LRNP	2025-01-24 05:05:44 (1 year ago)	_:80 103.129.149.19 - - [24/Jan/2025:05:05:32 +0000] "GET /env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (W ... show more _:80 103.129.149.19 - - [24/Jan/2025:05:05:32 +0000] "GET /env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" _:80 103.129.149.19 - - [24/Jan/2025:05:05:33 +0000] "GET /mappings.json HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" _:80 103.129.149.19 - - [24/Jan/2025:05:05:33 +0000] "GET /info HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" _:80 103.129.149.19 - - [24/Jan/2025:05:05:35 +0000] "GET /application.properties HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" _:80 103.129.149.19 - - [24/Jan/2025:05:05:36 +0000] "GET /application.ini HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" _:80 103.129.149.1 ... show less	Bad Web Bot Web App Attack
🇷🇸 Smel	2025-01-24 05:00:05 (1 year ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 PlexLads	2025-01-24 03:33:04 (1 year ago)	103.129.149.19 - - [23/Jan/2025:19:33:01 -0800] "GET /env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (iPad; ... show more 103.129.149.19 - - [23/Jan/2025:19:33:01 -0800] "GET /env HTTP/1.1" 404 341 "-" "Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko ) Version/5.1 Mobile/9B176 Safari/7534.48.3" 103.129.149.19 - - [23/Jan/2025:19:33:02 -0800] "GET /mappings.json HTTP/1.1" 404 341 "-" "Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko ) Version/5.1 Mobile/9B176 Safari/7534.48.3" 103.129.149.19 - - [23/Jan/2025:19:33:02 -0800] "GET /info HTTP/1.1" 404 341 "-" "Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko ) Version/5.1 Mobile/9B176 Safari/7534.48.3" 103.129.149.19 - - [23/Jan/2025:19:33:03 -0800] "GET /application.properties HTTP/1.1" 404 341 "-" "Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko ) Version/5.1 Mobile/9B176 Safari/7534.48.3" 103.129.149.19 - - [23/Jan/2025:19:33:03 -0800] "GET /application.ini HTTP/1.1" 404 341 "-" "Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS ... show less	Hacking Web App Attack
Anonymous	2025-01-23 16:53:57 (1 year ago)		DNS Compromise DDoS Attack
🇬🇧 PulseServers	2025-01-23 11:52:25 (1 year ago)	Probing a honeypot for vulnerabilities. Ignored robots.txt - UK10 Honeypot ...	Hacking Web App Attack

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 182.253.237.100

🇮🇳 182.70.123.42

🇨🇳 171.120.33.83

🇫🇷 85.217.140.36

🇩🇪 57.131.129.97

🇧🇷 45.170.20.176

🇺🇸 35.252.111.36

🇮🇩 34.50.65.250

🇦🇿 212.47.134.234

🇧🇩 203.76.96.215

🇳🇬 197.210.117.134

🇧🇷 187.28.1.110

🇹🇷 176.234.224.137

🇭🇺 91.82.58.77

🇵🇭 58.69.116.244

🇺🇸 57.141.14.56

🇮🇳 14.141.228.180

🇩🇪 213.209.159.241

🇵🇾 200.61.51.82

🇺🇸 184.105.247.196