AbuseIPDB » 103.160.148.20

103.160.148.20 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 15%: ?

15%

ISP	CV Hebring Intertek
Usage Type	Fixed Line ISP
Domain Name	arsen.co.id
Country	Indonesia
City	Kupang, Nusa Tenggara Timur

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 103.160.148.20

Whois 103.160.148.20

IP Abuse Reports for 103.160.148.20:

This IP address has been reported a total of 4 times from 3 distinct sources. 103.160.148.20 was first reported on February 2nd 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-09-16 00:01:42 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Elysium Security	2024-09-11 14:09:00 (3 weeks ago)	Mass port scanning on a whole network	Port Scan
hermawan	2024-08-08 13:46:14 (1 month ago)	[Thu Aug 08 18:16:31.617315 2024] [security2:error] [pid 626815:tid 134780859450944] [client 103.160 ... show more[Thu Aug 08 18:16:31.617315 2024] [security2:error] [pid 626815:tid 134780859450944] [client 103.160.148.20:38540] [client 103.160.148.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2147"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/127.0.6533.85 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Lin ... show less	Hacking Web App Attack
hermawan	2024-02-02 16:22:56 (8 months ago)	[Fri Feb 02 23:22:54.953025 2024] [security2:error] [pid 59721:tid 129361046931008] [client 103.160. ... show more[Fri Feb 02 23:22:54.953025 2024] [security2:error] [pid 59721:tid 129361046931008] [client 103.160.148.20:64151] [client 103.160.148.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "info" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "12"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: info found within REQUEST_HEADERS:User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; InfoPath.3; Zoom 3.6.0; ms-office; MSOffice 14) request_line = GET /images/Klimatologi/Analisis/Peta_Zona_Musim/Peta_Zona_Musim_ZOM_di_Provinsi_Jawa_Timur_Tahun_1991-2020.webp HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/Peta_Zona_Musim/Peta_Zona_Musim_ZOM_di_Provinsi_Jawa_Timur_Tahun_1991-2020.webp"] [unique_id "Zb0W3gbHiB6YoD8WFTsv8QAAAd4"] [staklim-jatim.bmkg.go.id] [staklim-jatim. ... show less	Hacking Web App Attack