JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.137.189.70

103.137.189.70 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 100%: ?

100%

ISP	PT Indonesia Comnets Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Bandung, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.137.189.70

Whois 103.137.189.70

IP Abuse Reports for 103.137.189.70:

This IP address has been reported a total of 54 times from 33 distinct sources. 103.137.189.70 was first reported on July 28th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 blik2108	2026-09-20 02:31:13 (1 hour ago)	103.137.189.70 - - [20/Sep/2026:02:31:09 +0000] "GET /media/com_sppagebuilder/css/sppagebuilder.css ... show more 103.137.189.70 - - [20/Sep/2026:02:31:09 +0000] "GET /media/com_sppagebuilder/css/sppagebuilder.css HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" "-" 103.137.189.70 - - [20/Sep/2026:02:31:09 +0000] "GET /media/astroid/assets/css/astroid-framework.css HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-" 103.137.189.70 - - [20/Sep/2026:02:31:09 +0000] "GET /media/com_sppagebuilder/js/sppagebuilder.js HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" "-" 103.137.189.70 - - [20/Sep/2026:02:31:09 +0000] "GET /media/astroid/assets/js/astroid.min.js HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-" 103.137.189.70 - - [20/Sep/2026:02:31: ... show less	Web App Attack
🇳🇱 enpepet	2026-09-19 20:07:12 (7 hours ago)	GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/2010 ... show more GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0 URL:/en/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Port Scan Hacking Brute-Force Bad Web Bot
Anonymous	2026-09-19 13:09:00 (14 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-19 09:05:08 (18 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇧🇬 HighWay	2026-09-19 08:00:47 (19 hours ago)	103.137.189.70 - - [19/Sep/2026:08:00:42 +0000] "GET /administrator/components/com_splms/splms.xml H ... show more 103.137.189.70 - - [19/Sep/2026:08:00:42 +0000] "GET /administrator/components/com_splms/splms.xml HTTP/1.1" 404 4756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 103.137.189.70 - - [19/Sep/2026:08:00:43 +0000] "GET /index.php?option=com_splms HTTP/1.1" 404 32318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 103.137.189.70 - - [19/Sep/2026:08:00:43 +0000] "GET /index.php?option=com_splms HTTP/1.1" 404 32318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 103.137.189.70 - - [19/Sep/2026:08:00:43 +0000] "GET /administrator/components/com_icagenda/icagenda.xml HTTP/1.1" 404 4756 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 103.137.189.70 - - [19/Sep/2026:08:00:43 +0000] "GET /administrator/components/co ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-19 07:11:14 (20 hours ago)	Excessive 404/403 errors	Brute-Force
🇸🇪 vaia.cloud	2026-09-19 03:40:01 (23 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-19 03:15:08 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-18 23:00:15 (1 day ago)	(mod_security) mod_security (id:240000) triggered by 103.137.189.70 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 103.137.189.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 19:00:10.326939 2026] [security2:error] [pid 3498:tid 3498] [client 103.137.189.70:48200] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|etudesoftware.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "etudesoftware.com"] [uri "/images/stories/xb33_1p9f0u.php"] [unique_id "aq3CeljaZv5Ek2q7Gq9scwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2026-09-18 20:18:37 (1 day ago)	loe- 404 : Too many 404 errors	Brute-Force
🇩🇪 LRob	2026-09-18 19:08:09 (1 day ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: POST \| path: / \| 2026-09-18 19:08 UTC show less	Bad Web Bot
🇭🇺 bcsaba	2026-09-18 17:08:26 (1 day ago)	Looking for json file on web server 103.137.189.70 - - [18/Sep/2026:19:08:24 +0200] "GET /administra ... show more Looking for json file on web server 103.137.189.70 - - [18/Sep/2026:19:08:24 +0200] "GET /administrator/components/com_sppagebuilder/sppagebuilder.json HTTP/1.1" 401 172 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" show less	Web App Attack
🇵🇱 yanek83	2026-09-18 12:51:00 (1 day ago)	Automated scanner attempting Local File Inclusion (LFI) attacks and path traversal vulnerabilities a ... show more Automated scanner attempting Local File Inclusion (LFI) attacks and path traversal vulnerabilities against Joomla components (Helix3 com_ajax). show less	Bad Web Bot Exploited Host Web App Attack Hacking
🇳🇱 WeCloudit-Anti-Abuse	2026-09-18 09:53:27 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇧🇬 HighWay	2026-09-17 21:20:10 (2 days ago)	103.137.189.70 - - [17/Sep/2026:21:20:04 +0000] "GET /administrator/components/com_splms/splms.xml H ... show more 103.137.189.70 - - [17/Sep/2026:21:20:04 +0000] "GET /administrator/components/com_splms/splms.xml HTTP/1.1" 404 4757 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 103.137.189.70 - - [17/Sep/2026:21:20:04 +0000] "GET /index.php?option=com_splms HTTP/1.1" 404 28330 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 103.137.189.70 - - [17/Sep/2026:21:20:05 +0000] "GET /index.php?option=com_splms&view=courses HTTP/1.1" 404 28232 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 103.137.189.70 - - [17/Sep/2026:21:20:05 +0000] "GET /administrator/components/com_icagenda/icagenda.xml HTTP/1.1" 404 4757 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 103.137.189.70 - - [17/Sep/2026:21:20:05 +0000] "GET /index.php?option=com_pagebuilderck HTTP/1.1" 404 ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 190.114.40.216

🇻🇳 183.80.185.140

🇨🇳 121.11.96.13

🇫🇷 109.199.106.34

🇺🇸 3.217.219.124

🇩🇪 198.7.125.141

🇸🇬 165.154.236.104

🇺🇸 162.216.150.246

🇮🇩 103.53.77.70

🇺🇸 100.50.17.159

🇺🇸 71.6.158.166

🇩🇪 69.5.169.36

🇺🇸 52.168.141.47

🇳🇱 51.159.91.169

🇳🇱 45.156.128.57

🇺🇸 45.55.154.26

🇬🇧 35.203.211.184

🇨🇳 27.24.141.147

🇬🇧 5.226.140.87

🇵🇰 182.185.120.60