This IP address has been reported a total of
9
times from
7 distinct
sources.
103.168.149.227 was first reported on
April 4th 2026 , and the most recent report was
1 hour ago France
with 1
report.
The only category in these recent reports was:
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
Sklurk
2026-10-12 07:50:28
(1 hour ago)
Web App Attack
Web App Attack
🇺🇸
kosada.com
2026-07-14 18:29:20
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇳🇱
ByeByte API
2026-06-22 12:28:19
(3 months ago)
Port scan from this IP. Firewall dropped every packet. Targeted UDP ports: 80. Single burst at 2026- ...
show more
Port scan from this IP. Firewall dropped every packet. Targeted UDP ports: 80. Single burst at 2026-06-22 12:28 UTC.
show less
Port Scan
🇺🇸
mnsf
2026-05-29 09:05:26
(4 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇩🇪
SMARTNET
2026-05-27 06:03:53
(4 months ago)
Aisuru(Mirai variant) DDoS | Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d
DDoS Attack
🇫🇷
Sklurk
2026-05-27 02:40:41
(4 months ago)
Web App Attack
Web App Attack
🇺🇸
MPL
2026-04-30 12:24:12
(5 months ago)
tcp/443 (3 or more attempts)
Port Scan
🇮🇩
hermawan
2026-04-04 02:10:48
(6 months ago)
Captured JA4H: ge11n_efd7d767042c | Log: 103.168.149.227 - - [04/Apr/2026:08:52:42 +0700] "GET /inde ...
show more
Captured JA4H: ge11n_efd7d767042c | Log: 103.168.149.227 - - [04/Apr/2026:08:52:42 +0700] "GET /index.php HTTP/1.1" 403 25082 "https://www.bmkg.go.id/" "Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581" ge11n_host,connection,accept-encoding,sec-ch-ua,sec-fetch-site,user-agent,sec-ch-ua-platform,sec-fetch-mode,accept,sec-fetch-dest,sec-ch-ua-mobile,accept-language,referer...
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2026-04-04 01:52:43
(6 months ago)
[Sat Apr 04 08:52:42.868998 2026] [security2:error] [pid 431454:tid 140284335732416] [client 103.168 ...
show more
[Sat Apr 04 08:52:42.868998 2026] [security2:error] [pid 431454:tid 140284335732416] [client 103.168.149.227:56728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "adBu6lSQYZDSXpJmobAR2wAAAUg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[431529] [ohhssFgjpas] [adBu6lSQYZDSXpJmobAR2wAAAUg] keep_alive=[0] [2026-04-04 08:52:42.869011] [R:adBu6lSQYZDSXpJmobAR2wAAAUg] UA:'Mozilla/5.0 (Linux; Android 14; Pixel 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.119 Mobile Safari/537.36 OPR/81.2.4292.78581' Host:'
...
show less
Email Spam
Hacking
Showing 1 to
9
of 9 reports
