JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.172.196.221

103.172.196.221 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 0%: ?

ISP	PT Cahaya Solusindo Internusa
Usage Type	Fixed Line ISP
ASN	AS142394
Domain Name	csnet.id
Country	🇮🇩 Indonesia
City	Nganjuk, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.172.196.221

Whois 103.172.196.221

IP Abuse Reports for 103.172.196.221:

This IP address has been reported a total of 32 times from 14 distinct sources. 103.172.196.221 was first reported on July 31st 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-23 15:46:15 (5 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Bad Web Bot Exploited Host
🇬🇧 Silly Development	2025-11-01 13:11:43 (7 months ago)	Malicious activity detected from 142394 CSNET-AS-ID PT Cahaya Solusindo Internusa towards host panel ... show more Malicious activity detected from 142394 CSNET-AS-ID PT Cahaya Solusindo Internusa towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-11-01T13:11:43Z (7 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2025-11-01 01:45:57 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 103.172.196.221 (mail.csnet.id): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 103.172.196.221 (mail.csnet.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 21:45:51.440462 2025] [security2:error] [pid 21158:tid 21158] [client 103.172.196.221:36385] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.monogay.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.monogay.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQVmT8ijojkirFx_9vHBZgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 1gz	2025-10-15 16:53:45 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.206.0 Safari/532.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Audir8 \| RRHosting	2025-10-05 20:50:29 (8 months ago)	2025-10-05T20:47:55.549567rrhostingusa wings[2058776]: 2025/10/05 20:47:55 http: TLS handshake error ... show more 2025-10-05T20:47:55.549567rrhostingusa wings[2058776]: 2025/10/05 20:47:55 http: TLS handshake error from 103.172.196.221:57213: EOF 2025-10-05T20:47:55.549567rrhostingusa wings[2058776]: 2025/10/05 20:47:55 http: TLS handshake error from 103.172.196.221:57188: EOF 2025-10-05T20:48:40.351984rrhostingusa wings[2058776]: 2025/10/05 20:48:39 http: TLS handshake error from 103.172.196.221:57389: write tcp 10.0.0.206:8443->103.172.196.221:57389: write: broken pipe ... show less	Web App Attack
🇺🇸 skycodee	2025-10-05 12:49:07 (8 months ago)	Repeated TLS handshake abuse against Pterodactyl Wings (port 8080)	DDoS Attack
🇩🇪 1gz	2025-09-29 21:52:31 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Opera/9.80 (Windows NT 6.1; WOW64; U; pt) Presto/2.10.229 Version/11.62 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Silly Development	2025-09-29 20:52:20 (8 months ago)	Malicious activity detected from 142394 CSNET-AS-ID PT Cahaya Solusindo Internusa towards host silly ... show more Malicious activity detected from 142394 CSNET-AS-ID PT Cahaya Solusindo Internusa towards host sillydev.co.uk (GET HTTP/2) @ 2025-09-29T20:52:20Z (1 occurrences) show less	DDoS Attack Exploited Host
🇷🇴 INTEQ	2025-09-28 03:55:19 (8 months ago)	Web attack from 103.172.196.221	Web App Attack
🇩🇪 1gz	2025-09-19 19:24:21 (9 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: 0iuzQL8fykwniXL This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇳🇱 exxos	2025-09-13 11:03:01 (9 months ago)	HTTP1.x attacks	DDoS Attack
🇬🇧 Silly Development	2025-09-05 04:00:01 (9 months ago)	Malicious activity detected from 142394 CSNET-AS-ID PT Cahaya Solusindo Internusa towards host panel ... show more Malicious activity detected from 142394 CSNET-AS-ID PT Cahaya Solusindo Internusa towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-09-05T04:00:01Z (2 occurrences) show less	DDoS Attack Exploited Host
🇸🇬 Vano Ganzzz	2025-09-01 11:59:21 (9 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 142394 (CSNET-AS-ID PT Cahaya So ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 142394 (CSNET-AS-ID PT Cahaya Solusindo Internusa) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-09-01T11:59:21Z Ray ID: 978499dffe5b3dab UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Code:e1w8k1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇩🇪 CommanderRoot	2025-08-30 18:33:59 (9 months ago)	HTTP request flood	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-08-16 23:08:50 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.116

🇺🇸 72.10.32.138

🇧🇷 191.5.31.61

🇺🇸 148.153.32.54

🇫🇮 147.185.133.203

🇩🇪 130.12.182.68

🇩🇪 87.123.198.77

🇺🇸 65.49.1.25

🇸🇬 47.128.25.183

🇳🇱 45.198.224.120

🇨🇳 183.253.114.66

🇺🇸 162.216.149.218

🇨🇳 120.230.23.202

🇺🇸 71.202.140.22

🇪🇸 5.182.83.231

🇺🇸 3.21.171.90

🇹🇷 213.14.61.158

🇵🇪 190.223.196.78

🇲🇽 187.190.35.163

🇺🇸 153.66.28.132