JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.152.238.179

103.152.238.179 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 28%: ?

28%

ISP	PT Acces Prima Nusantara
Usage Type	Fixed Line ISP
ASN	AS140448
Domain Name	aprin.net.id
Country	🇮🇩 Indonesia
City	Cikarang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.152.238.179

Whois 103.152.238.179

IP Abuse Reports for 103.152.238.179:

This IP address has been reported a total of 59 times from 31 distinct sources. 103.152.238.179 was first reported on January 10th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Fn4ticHz	2026-06-08 04:45:45 (2 weeks ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇬🇧 Silly Development	2026-06-06 15:05:01 (2 weeks ago)	Malicious activity detected from 140448 PT Acces Prima Nusantara towards host sillydev.co.uk (GET HT ... show more Malicious activity detected from 140448 PT Acces Prima Nusantara towards host sillydev.co.uk (GET HTTP/2) @ 2026-06-06T15:05:01Z (19 occurrences) show less	DDoS Attack Exploited Host
🇨🇦 leithzz	2026-06-06 13:06:23 (2 weeks ago)	Report by Cloudflare.Time: 2026-06-06T13:05:52Z	DDoS Attack
🇸🇬 volcaryx	2026-05-25 12:02:29 (4 weeks ago)	Cloudflare detected an L7 DDoS attack (l7ddos) from ID. Action: BLOCK \| Protocol: HTTP/2 (GET) \| End ... show more Cloudflare detected an L7 DDoS attack (l7ddos) from ID. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇫🇷 MatStef132	2026-05-22 14:04:40 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 ByeByte API	2026-05-16 18:03:42 (1 month ago)	byebyte.space auth: Rate-limit escalation at 2026-05-16T18:00:48Z: 8 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-16T18:00:48Z: 8 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Linux; Android 15; Pixel 7) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/127.0.0.0 Mobile Safari/17.0'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="127", "Chromium";v="127", "Not.A/Brand";v="24"'. Platform: "Android" (mobile=?1). Connection: Keep-Alive. Country (CF): ID. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇳🇱 ByeByte API	2026-05-16 17:32:27 (1 month ago)	byebyte.space auth: Rate-limit escalation at 2026-05-16T17:32:27Z: 8 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-16T17:32:27Z: 8 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Linux; Android 15; SM-A546B) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/17.4'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="124", "Chromium";v="124", "Not.A/Brand";v="24"'. Platform: "Android" (mobile=?1). Connection: Keep-Alive. Referer: 'https://google.com/'. Country (CF): ID. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇳🇱 ByeByte API	2026-05-16 16:56:09 (1 month ago)	byebyte.space auth: Rate-limit escalation at 2026-05-16T16:56:09Z: 8 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-16T16:56:09Z: 8 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.33 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/18.1'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="126", "Chromium";v="126", "Not.A/Brand";v="24"'. Platform: "Windows" (mobile=?0). Connection: Keep-Alive. Referer: 'https://google.com/'. Country (CF): ID. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:02:52 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇮🇹 VHosting	2026-04-26 11:08:01 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇹 VHosting	2026-04-10 05:17:24 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:07:23 (2 months ago)	103.152.238.179 - - [05/Apr/2026:17:13:24 +0200] "GET /web/login HTTP/1.1" 499 0 "https://FqZgI.biz/ ... show more 103.152.238.179 - - [05/Apr/2026:17:13:24 +0200] "GET /web/login HTTP/1.1" 499 0 "https://FqZgI.biz/search" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.152.238.179 - - [05/Apr/2026:17:18:46 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.152.238.179 - - [05/Apr/2026:17:18:46 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 15:59:24 (2 months ago)	103.152.238.179 - - [05/Apr/2026:17:48:53 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.twitte ... show more 103.152.238.179 - - [05/Apr/2026:17:48:53 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.twitter.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.152.238.179 - - [05/Apr/2026:17:49:54 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.securedigital.us/blog" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.152.238.179 - - [05/Apr/2026:17:49:54 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.securedigital.us/blog" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.152.238.179 - - [05/Apr/2026:17:53:58 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.152.238.179 - - [05/Apr/2026:17:53:58 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www. ... show less	DDoS Attack
Anonymous	2026-03-23 05:10:30 (2 months ago)	\| [Dangerous/Indonesia] Aggressive IP 103.152.238.179 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Aggressive IP 103.152.238.179 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 COMPLEX	2026-03-17 18:27:00 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0 show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇳 180.149.125.212

🇺🇸 136.114.75.12

🇳🇱 77.83.39.14

🇧🇪 35.240.24.218

🇻🇳 27.79.4.85

🇻🇳 27.71.84.213

🇺🇸 20.125.70.165

🇺🇸 18.209.223.114

🇫🇷 15.236.247.36

🇲🇽 187.170.61.138

🇺🇸 152.232.117.49

🇩🇪 43.165.3.187

🇨🇦 198.50.202.93

🇺🇸 170.106.0.56

🇨🇳 106.55.29.218

🇨🇦 69.72.31.11

🇩🇪 69.5.169.205

🇫🇷 62.210.189.225

🇺🇸 40.124.81.157

🇩🇪 185.242.3.226