JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.153.149.26

103.153.149.26 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	PT Jaringan Sarana Nusantara
Usage Type	Fixed Line ISP
ASN	AS64300
Domain Name	jaringanku.net.id
Country	🇮🇩 Indonesia
City	Weleri, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.153.149.26

Whois 103.153.149.26

IP Abuse Reports for 103.153.149.26:

This IP address has been reported a total of 18 times from 13 distinct sources. 103.153.149.26 was first reported on January 31st 2023, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Read.Team	2026-02-19 02:56:16 (3 months ago)	DDoS attack source: TCP ACK Flood targeting 15.204.18.200. Detected via automated PCAP analysis. Rep ... show more DDoS attack source: TCP ACK Flood targeting 15.204.18.200. Detected via automated PCAP analysis. Report ref: zn2cj8q8yt show less	DDoS Attack
🇨🇭 Modules	2025-12-17 01:06:58 (5 months ago)	Open proxy http://103.153.149.26:8080 (RT:8685ms,Loc:Indonesia,ASN:AS64300)	Open Proxy
🇺🇸 kosada.com	2025-12-16 23:14:36 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2025-10-19 07:40:25 (7 months ago)	[Sun Oct 19 13:57:37.475137 2025] [security2:error] [pid 1451036:tid 140210435245760] [client 103.15 ... show more [Sun Oct 19 13:57:37.475137 2025] [security2:error] [pid 1451036:tid 140210435245760] [client 103.153.149.26:63702] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=478&id=1123%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-30-agustus-5-september-2016&start=90 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=478&id=1123%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-30-agustus-5-septemb..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aPSL4dHKXh4 ... show less	Hacking Web App Attack
🇬🇧 Silly Development	2025-09-29 20:52:30 (8 months ago)	Malicious activity detected from 64300 JSN-AS-ID PT JARINGANKU SARANA NUSANTARA towards host sillyde ... show more Malicious activity detected from 64300 JSN-AS-ID PT JARINGANKU SARANA NUSANTARA towards host sillydev.co.uk (GET HTTP/2) @ 2025-09-29T20:52:30Z (4 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-09-25 14:19:09 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 ᴀʀᴛ	2025-07-24 11:07:33 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. ASN: 64300 (JSN-AS-ID PT JARINGANKU SARANA NUSANT ... show more Triggered Cloudflare WAF (firewallCustom) from ID. ASN: 64300 (JSN-AS-ID PT JARINGANKU SARANA NUSANTARA) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 Burayot	2025-07-13 22:27:42 (10 months ago)	LF_IMAPD: (imapd) Failed IMAP login from 103.153.149.26 (ID/Indonesia/-): 1 in the last 3600 secs	Brute-Force
🇮🇩 hermawan	2025-05-23 07:49:04 (1 year ago)	[Fri May 23 14:48:33.886160 2025] [security2:error] [pid 104109:tid 140474217125568] [client 103.153 ... show more [Fri May 23 14:48:33.886160 2025] [security2:error] [pid 104109:tid 140474217125568] [client 103.153.149.26:56652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "myactivity.google.com" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "439"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: myactivity.google.com found within REQUEST_HEADERS:Referer: https://myactivity.google.com/ request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Sifat_Hujan_Bulanan/Prakiraan_Sifat_Hujan_Bulanan_Provinsi_Jawa_Timur/2025/02_FEBRUARI_2025/03_Prakiraan_Sifat_Hujan_Bulan_JUNI_2025_di_Provinsi_Jawa_Timur-Update_dari_Analisis_Bulan_Februari_2025.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Sifat_Hujan_Bulanan/Prakiraan_Sifat_Hujan_Bulanan_Provinsi_Jawa_Timur/2025/02_FEBRUARI_2025/03_Prakir ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2025-05-18 17:00:28 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-05-18 12:14:04 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-05-18 10:47:26 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_APACHE_403	Brute-Force SSH
🇩🇪 Packets-Decreaser.NET	2025-05-16 21:31:44 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 COMPLEX	2025-05-11 04:20:14 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 64300 (JSN-AS-ID PT JARINGANKU S ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 64300 (JSN-AS-ID PT JARINGANKU SARANA NUSANTARA) Protocol: HTTP/2 (GET method) Timestamp: 2025-05-11T04:11:17Z show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-05-09 06:41:17 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 212.73.148.8

🇺🇸 172.202.118.18

🇿🇦 165.165.110.37

🇸🇬 146.190.83.66

🇪🇸 31.24.155.180

🇻🇳 27.79.40.33

🇹🇼 198.235.24.86

🇺🇸 91.246.176.9

🇩🇪 81.90.28.175

🇺🇸 64.53.7.231

🇺🇸 47.251.161.124

🇨🇳 203.76.241.18

🇺🇸 144.202.92.17

🇺🇸 135.237.126.116

🇵🇱 134.112.56.47

🇭🇰 112.120.171.95

🇧🇩 103.183.62.0

🇿🇲 102.23.122.235

🇮🇶 65.20.250.180

🇩🇪 213.209.159.56