JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.138.53.30

103.138.53.30 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 13%: ?

13%

ISP	PT Afna Digital Indonesia
Usage Type	Fixed Line ISP
ASN	AS149723
Domain Name	afna.link
Country	🇮🇩 Indonesia
City	Pajaten, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.138.53.30

Whois 103.138.53.30

IP Abuse Reports for 103.138.53.30:

This IP address has been reported a total of 15 times from 12 distinct sources. 103.138.53.30 was first reported on March 30th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-05-31 09:47:17 (1 week ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇮🇩 hermawan	2026-05-23 06:37:39 (2 weeks ago)	[Sat May 23 13:37:36.595573 2026] [security2:error] [pid 1122394:tid 140471432107712] [client 103.13 ... show more [Sat May 23 13:37:36.595573 2026] [security2:error] [pid 1122394:tid 140471432107712] [client 103.138.53.30:59025] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/2.0 Request URI RAW = /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur Request Basename = deterministik-curah-hujan-provinsi-jawa-timur"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "para ... show less	Email Spam Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-20 18:47:08 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 SMARTNET	2025-11-26 02:37:10 (6 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
🇨🇭 backslash	2025-11-13 13:36:31 (6 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇫🇮 oh.mg	2025-06-23 07:44:20 (11 months ago)	[Mon Jun 23 09:44:12.175625 2025] [security2:error] [pid 1187190:tid 1187218] [client 103.138.53.30: ... show more [Mon Jun 23 09:44:12.175625 2025] [security2:error] [pid 1187190:tid 1187218] [client 103.138.53.30:0] [client 103.138.53.30] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.mmn.ca"] [uri "/"] [unique_id "aFkFzCWCpM8cDvpWN2EdXgAAAQM"] [Mon Jun 23 09:44:19.387252 2025] [security2:error] [pid 1187190:tid 1187237] [client 103.138.53.30:0] [client 103.138.53.30] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evalu ... show less	Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2025-06-17 10:09:27 (11 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇬🇧 uira.live	2025-05-04 11:25:47 (1 year ago)	Malicious activity detected from 149723 IDNIC-AFNALINK-AS-ID PT Afna Digital Indonesia towards host ... show more Malicious activity detected from 149723 IDNIC-AFNALINK-AS-ID PT Afna Digital Indonesia towards host uira.live (GET HTTP/2) @ 2025-05-04T11:25:47Z (9 occurrences) show less	DDoS Attack
🇺🇸 TPI-Abuse	2025-04-23 11:12:07 (1 year ago)	(mod_security) mod_security (id:210740) triggered by 103.138.53.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210740) triggered by 103.138.53.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 07:12:02.600311 2025] [security2:error] [pid 21071:tid 21071] [client 103.138.53.30:45612] [client 103.138.53.30] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|professionalpartyplanner.org\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "professionalpartyplanner.org"] [uri "/"] [unique_id "aAjLAu_JGX2o9lJvJ32STgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-23 08:52:19 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-04-22 21:02:38 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 COMPLEX	2025-04-22 00:08:06 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149723 (IDNIC-AFNALINK-AS-ID PT ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149723 (IDNIC-AFNALINK-AS-ID PT Afna Digital Indonesia) Protocol: HTTP/2 (GET method) Timestamp: 2025-04-22T00:07:19Z show less	Bad Web Bot
🇷🇸 Smel	2021-04-04 09:40:37 (5 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Smel	2021-03-31 05:50:19 (5 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇮🇪 RoboSOC	2021-03-30 22:07:02 (5 years ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.30.36.89

🇨🇳 116.179.32.104

🇳🇱 89.248.163.200

🇩🇪 213.209.159.226

🇩🇪 212.30.36.88

🇩🇪 212.30.36.87

🇩🇴 190.167.6.37

🇨🇳 162.14.73.110

🇨🇦 147.182.149.102

🇱🇹 141.98.10.28

🇺🇸 107.172.157.247

🇷🇺 77.244.64.60

🇺🇸 68.235.46.239

🇺🇸 66.132.195.125

🇬🇧 64.227.34.89

🇨🇦 20.220.34.26

🇺🇸 216.126.239.17

🇩🇪 212.30.36.86

🇩🇪 212.30.36.85

🇷🇴 193.32.162.16