JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.160.37.195

103.160.37.195 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	PT Jetorbit Teknologi Indonesia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141584
Hostname(s)	comet.jetorbit.net
Domain Name	jetorbit.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.160.37.195

Whois 103.160.37.195

IP Abuse Reports for 103.160.37.195:

This IP address has been reported a total of 28 times from 20 distinct sources. 103.160.37.195 was first reported on December 6th 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 myagent.site	2026-01-05 21:37:55 (5 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇳🇱 BlueWire Hosting	2026-01-05 18:31:35 (5 months ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 big-cloud.nl	2026-01-05 18:31:08 (5 months ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 LRob.fr	2026-01-05 17:19:43 (5 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-12-24 20:10:37 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2025-12-24 19:07:13 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 103.160.37.195 (comet.jetorbit.net): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 103.160.37.195 (comet.jetorbit.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 14:07:07.551565 2025] [security2:error] [pid 26742:tid 26742] [client 103.160.37.195:52240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|majikdecor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "majikdecor.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUw5243ykoYA4oArAM5wFAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-24 14:15:55 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 103.160.37.195 (comet.jetorbit.net): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 103.160.37.195 (comet.jetorbit.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 09:15:51.039095 2025] [security2:error] [pid 30499:tid 30499] [client 103.160.37.195:49118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|indiahouseportland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "indiahouseportland.com"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aUv1l5-blSCNpc32mDxsRgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-12-24 13:41:48 (6 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇩🇪 stinpriza	2025-12-24 12:55:12 (6 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-12-24 12:13:37 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 103.160.37.195 (comet.jetorbit.net): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 103.160.37.195 (comet.jetorbit.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 07:13:29.140291 2025] [security2:error] [pid 30235:tid 30243] [client 103.160.37.195:56720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kemalinal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kemalinal.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aUvY6ZbctXM3QyaCOPYfZwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2025-12-23 23:26:06 (6 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-12-23 20:10:36 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2025-12-22 23:26:04 (6 months ago)		Brute-Force Web App Attack
🇮🇩 Burayot	2025-12-22 20:43:00 (6 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.160.37.195 (ID/Indonesia/comet. ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.160.37.195 (ID/Indonesia/comet.jetorbit.net): 2 in the last 3600 secs show less	Web App Attack
🇩🇪 LRob.fr	2025-12-22 19:18:44 (6 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 194.165.16.166

🇫🇮 147.185.133.40

🇺🇸 147.185.132.81

🇺🇸 147.185.132.76

🇱🇻 81.30.98.44

🇳🇱 45.148.10.62

🇬🇧 35.203.210.94

🇪🇸 5.182.83.231

🇺🇸 205.210.31.84

🇷🇺 194.50.127.135

🇬🇧 188.240.59.37

🇺🇸 172.215.144.32

🇨🇳 171.108.182.210

🇺🇸 147.185.132.70

🇳🇱 88.210.63.69

🇫🇷 85.217.140.52

🇭🇰 74.125.179.151

🇺🇸 71.6.237.169

🇱🇹 45.227.254.170

🇹🇷 45.133.36.59