JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.167.68.35

103.167.68.35 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	PT Kataji Nukami Indonesia
Usage Type	Fixed Line ISP
ASN	AS141982
Domain Name	sayaginet.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.167.68.35

Whois 103.167.68.35

IP Abuse Reports for 103.167.68.35:

This IP address has been reported a total of 15 times from 10 distinct sources. 103.167.68.35 was first reported on February 18th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 SuperEvilLuke	2025-08-05 19:00:38 (10 months ago)	Malicious activity detected from 141982 IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia towards hos ... show more Malicious activity detected from 141982 IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:00:38Z (4 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-08-03 17:44:36 (10 months ago)	Malicious activity detected from 141982 IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia towards hos ... show more Malicious activity detected from 141982 IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia towards host sillydev.co.uk (GET HTTP/2) @ 2025-08-03T17:44:36Z (1 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-08-01 23:13:45 (10 months ago)	Malicious activity detected from 141982 IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia towards hos ... show more Malicious activity detected from 141982 IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-08-01T23:13:45Z (1 occurrences) show less	DDoS Attack Exploited Host
🇧🇪 cmbplf	2025-07-24 04:01:52 (10 months ago)	13.202 requests in 1 hour (9h59m59sfromnow)	Brute-Force Bad Web Bot
🇫🇷 ᴀʀᴛ	2025-07-22 06:32:32 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. ASN: 141982 (IDNIC-SAYAGINET-AS-ID PT Kataji Nuka ... show more Triggered Cloudflare WAF (firewallCustom) from ID. ASN: 141982 (IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 COMPLEX	2025-05-19 22:01:26 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141982 (IDNIC-SAYAGINET-AS-ID PT ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141982 (IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia) Protocol: HTTP/2 (GET method) Timestamp: 2025-05-19T21:58:29Z show less	Bad Web Bot
🇪🇸 el-brujo	2025-05-16 11:00:00 (1 year ago)	DDoS Attack Layer 7	DDoS Attack
🇪🇸 el-brujo	2025-05-16 11:00:00 (1 year ago)	DDoS Attack Layer 7	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-05-09 13:16:07 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇬🇧 uira.live	2025-05-04 11:21:49 (1 year ago)	Malicious activity detected from 141982 IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia towards hos ... show more Malicious activity detected from 141982 IDNIC-SAYAGINET-AS-ID PT Kataji Nukami Indonesia towards host uira.live (GET HTTP/2) @ 2025-05-04T11:21:49Z (2 occurrences) show less	DDoS Attack
🇮🇩 pusathosting.com	2025-03-29 18:20:08 (1 year ago)	imap-id failed login	Brute-Force
🇮🇩 hermawan	2025-03-25 23:36:37 (1 year ago)	[Wed Mar 26 06:29:40.794605 2025] [security2:error] [pid 116189:tid 140460916598464] [client 103.167 ... show more [Wed Mar 26 06:29:40.794605 2025] [security2:error] [pid 116189:tid 140460916598464] [client 103.167.68.35:56382] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2130"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/134.0.6998.40 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; SM-S901E ... show less	Hacking Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-03-12 03:52:28 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-02-19 14:42:45 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-02-18 09:33:03 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:8c03:2001

🇺🇸 198.2.129.21

🇨🇳 112.6.227.209

🇧🇩 103.251.247.198

🇮🇳 82.180.143.72

🇷🇴 80.94.92.184

🇸🇦 46.152.250.193

🇭🇰 23.91.97.170

🇺🇸 2607:f8b0:4001:c54::128

🇩🇴 200.88.160.28

🇷🇺 188.18.183.49

🇩🇪 167.94.145.24

🇻🇳 116.99.174.61

🇻🇳 113.164.66.10

🇭🇰 101.36.111.119

🇨🇳 47.101.137.46

🇺🇸 47.77.230.66

🇮🇳 2a02:4780:11:943:0:a9d:b316:1

🇸🇬 2404:6800:4003:c04::126

🇩🇪 213.209.159.231