JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.144.146.42

103.144.146.42 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 0%: ?

ISP	PT.LEXXA DATA INDONUSA
Usage Type	Fixed Line ISP
ASN	AS139428
Hostname(s)	146-42.lexxadata.net.id
Domain Name	lexxadata.co.id
Country	🇮🇩 Indonesia
City	Kedungwaru, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.144.146.42

Whois 103.144.146.42

IP Abuse Reports for 103.144.146.42:

This IP address has been reported a total of 36 times from 26 distinct sources. 103.144.146.42 was first reported on October 7th 2021, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-03-08 10:19:34 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 103.144.146.42 (ID/Indonesia/146-4 ... show more LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 103.144.146.42 (ID/Indonesia/146-42.lexxadata.net.id): 2 in the last 3600 secs show less	Web App Attack
🇨🇭 Zeprax	2025-12-18 13:56:06 (6 months ago)	Layer 7 Flood Detected	DDoS Attack
🇨🇭 backslash	2025-12-11 11:45:10 (6 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
Anonymous	2025-12-05 07:40:09 (6 months ago)	Detected Hacking, SQL Injection or general Web App Attack	Web App Attack
🇮🇩 hermawan	2025-11-24 00:35:27 (7 months ago)	[Mon Nov 24 07:29:10.645492 2025] [security2:error] [pid 376475:tid 140015012075200] [client 103.144 ... show more [Mon Nov 24 07:29:10.645492 2025] [security2:error] [pid 376475:tid 140015012075200] [client 103.144.146.42:41284] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: chatgpt found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/meteorologi/list-of-all-tags/2301?utm_source=chatgpt.com HTTP/2.0 Request URI RAW = /index.php/profil/meteorologi/list-of-all-tags/2301?utm_source=chatgpt.com Request Basename = 2301"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/2301"] [unique_id "aSOm1rJSwsCs1uYzAhawpgAAgxE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[376519] [yXN/QMy9mRY] [aSO ... show less	Hacking Web App Attack
🇸🇬 pusathosting.com	2025-11-16 21:10:06 (7 months ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-16 07:24:24 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-10-14 03:06:10 (8 months ago)	wordpress-trap	Web App Attack
🇳🇱 exxos	2025-09-05 13:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-08-26 01:03:01 (10 months ago)	Attacks with Bad user agents	Hacking
🇮🇩 hermawan	2025-08-25 11:41:30 (10 months ago)	[Mon Aug 25 18:40:08.889809 2025] [security2:error] [pid 134584:tid 140407051626176] [client 103.144 ... show more [Mon Aug 25 18:40:08.889809 2025] [security2:error] [pid 134584:tid 140407051626176] [client 103.144.146.42:56038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "If-Modified-Since" at REQUEST_HEADERS_NAMES:If-Modified-Since. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "375"] [id "440005"] [msg "BAD REQUEST_HEADERS_NAMES - Detected and Blocked"] [data "Matched Data: If-Modified-Since found within REQUEST_HEADERS_NAMES:If-Modified-Since: If-Modified-Since request_line = GET /b/sifat_bulanantrenggalek.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/b/sifat_bulanantrenggalek.jpg"] [unique_id "aKxLmNJ32krVIco2FIoVSgABUwY"], referer https://staklim-jatim.bmkg.go.id/image-loader-worker-v3.js [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[134591] [aRoVA+8Xdig] [aKxLmNJ32krVIco2FIoVSgABUwY] keep_alive=[1] [2025-08-25 18:40:08.889815] [R:aKxLmNJ32krVIco2FIoVSgABUwY] UA:'Mozilla/5.0 ... show less	Hacking Web App Attack
Anonymous	2024-03-18 16:04:13 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇲🇾 syokadmin	2023-10-31 02:46:09 (2 years ago)	103.144.146.42 (ID/Indonesia/host42-146.lexxadata.net.id), 2 distributed imapd attacks on account [r ... show more 103.144.146.42 (ID/Indonesia/host42-146.lexxadata.net.id), 2 distributed imapd attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇮🇩 hermawan	2022-11-08 13:36:39 (3 years ago)	[Wed Nov 09 01:36:35.677712 2022] [ssl:info] [pid 193404:tid 140172616947264] [client 103.144.146.42 ... show more [Wed Nov 09 01:36:35.677712 2022] [ssl:info] [pid 193404:tid 140172616947264] [client 103.144.146.42:57332] AH02033: No hostname was provided via SNI for a name based virtual host [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[193430] [9nzZ0YngZNE] [Y2qhs78x_2fLFIFSd_JNEwAAAAQ] keep_alive=[0] [2022-11-09 01:36:35.677716] [R:Y2qhs78x_2fLFIFSd_JNEwAAAAQ] UA:'Mozilla/5.0 (Linux; Android 5.0; Note11 Pro+ Build/LRX21M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/95.0.4638.74 Mobile Safari/537.36' Host:'karangploso.jatim.bmkg.go.id' ... show less	Hacking Web App Attack
🇺🇸 vestibtech	2022-09-08 10:21:33 (3 years ago)	Sep 8 08:21:32 Host-KLAX-C postfix/in_clean/cleanup[299219]: 55C451BF625: reject: header Subject: W ... show more Sep 8 08:21:32 Host-KLAX-C postfix/in_clean/cleanup[299219]: 55C451BF625: reject: header Subject: Waiting for the payment. from unknown[103.144.146.42]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.144.146.42]>: 5.7.1 Message identified as SPAM - Rule #500 ... show less	Email Spam

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:150:13a5::100:3d

🇺🇸 205.210.31.14

🇨🇳 183.236.130.182

🇺🇸 172.56.162.162

🇺🇸 3.236.186.67

🇺🇸 3.236.156.9

🇫🇷 170.168.241.207

🇹🇼 114.34.106.146

🇳🇱 45.156.87.127

🇨🇳 39.104.50.26

🇺🇸 32.197.166.114

🇺🇸 3.235.249.26

🇺🇸 3.235.247.158

🇺🇸 3.235.51.93

🇺🇸 205.210.31.104

🇺🇸 172.206.6.168

🇺🇸 143.42.0.97

🇸🇪 130.49.79.205

🇨🇳 111.9.47.89

🇵🇱 95.214.53.157