JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.173.230.147

103.173.230.147 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 0%: ?

ISP	PT Jaringan Internet Banten
Usage Type	Fixed Line ISP
ASN	AS147087
Domain Name	jib.net.id
Country	🇮🇩 Indonesia
City	Serang, Banten

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.173.230.147

Whois 103.173.230.147

IP Abuse Reports for 103.173.230.147:

This IP address has been reported a total of 60 times from 23 distinct sources. 103.173.230.147 was first reported on November 1st 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2024-10-11 02:10:39 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇪🇸 10dencehispahard SL	2024-10-08 07:18:00 (1 year ago)	DoS Attack	DDoS Attack Brute-Force
🇮🇩 caliph	2024-09-28 11:01:05 (1 year ago)	SPAM Requests to whois.caliphdev.com	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2024-09-16 16:59:26 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2024-09-15 18:10:55 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.173.230.147 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.173.230.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 15 14:10:46.967269 2024] [security2:error] [pid 20725:tid 20725] [client 103.173.230.147:37182] [client 103.173.230.147] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 141.98.102.227 (0+1 hits since last alert)\|engine-watch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "engine-watch.com"] [uri "/xmlrpc.php"] [unique_id "ZucjJt8W99pLV0vH0sGWPwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2024-09-07 11:07:43 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 MHuiG	2024-09-04 08:10:06 (1 year ago)	The IP has triggered Cloudflare WAF. action: block source: l7ddos clientAsn: 147087 clientASNDescrip ... show more The IP has triggered Cloudflare WAF. action: block source: l7ddos clientAsn: 147087 clientASNDescription: IDNIC-JIB-AS-ID PT Jaringan Internet Banten clientCountryName: ID clientIP: 103.173.230.147 clientRequestHTTPHost: abuseipdb.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /cc.gif clientRequestQuery: datetime: 2024-09-04T06:34:19Z rayName: 8bdbf402e90a91ab ruleId: 4b8c4e16bab54d428dd0af3b81b5405c userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.74 Safari/537.36 Edg/99.0.1150.52. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇪🇸 el-brujo	2024-09-04 06:33:54 (1 year ago)	Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh ... show more Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Action: block Source: l7ddos ASN Description: IDNIC-JIB-AS-ID PT Jaringan Internet Banten Country: ID Method: GET Timestamp: 2024-09-04T06:33:54Z ruleId: 4b8c4e16bab54d428dd0af3b81b5405c. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 MHuiG	2024-09-03 14:07:42 (1 year ago)	The IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 147 ... show more The IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 147087 clientASNDescription: IDNIC-JIB-AS-ID PT Jaringan Internet Banten clientCountryName: ID clientIP: 103.173.230.147 clientRequestHTTPHost: blog.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /AbuseIPDB clientRequestQuery: datetime: 2024-09-03T13:19:15Z rayName: 8bd607cbcb0649ba ruleId: f4a2c940dd7944e58e72d246ea29b5af userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.3 Safari/605.1.15. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇨🇭 lyratris.com	2024-08-28 00:30:19 (1 year ago)	Layer 7 HTTP Flood	DDoS Attack
🇨🇭 lyratris.com	2024-08-27 23:51:38 (1 year ago)	2024/08/27 23:51:30 [error] 100480#0: 73062311 limiting requests, excess: 20.251 by zone "testcooki ... show more 2024/08/27 23:51:30 [error] 100480#0: 73062311 limiting requests, excess: 20.251 by zone "testcookie-ratelimit", client: 103.173.230.147, server: sittingonclouds.com, request: "GET / HTTP/1.1", host: "sittingonclouds.com" 2024/08/27 23:51:32 [error] 100480#0: 73062311 limiting requests, excess: 20.008 by zone "testcookie-ratelimit", client: 103.173.230.147, server: sittingonclouds.com, request: "GET / HTTP/1.1", host: "sittingonclouds.com" 2024/08/27 23:51:32 [error] 100480#0: 73062311 limiting requests, excess: 20.008 by zone "testcookie-ratelimit", client: 103.173.230.147, server: sittingonclouds.com, request: "GET / HTTP/1.1", host: "sittingonclouds.com" 2024/08/27 23:51:32 [error] 100480#0: 73062311 limiting requests, excess: 20.328 by zone "testcookie-ratelimit", client: 103.173.230.147, server: sittingonclouds.com, request: "GET / HTTP/1.1", host: "sittingonclouds.com" 2024/08/27 23:51:32 [error] 100480#0: 73062311 limiting requests, excess: 20.328 by zone "testcookie-rateli ... show less	DDoS Attack
🇩🇪 CommanderRoot	2024-08-26 08:50:51 (1 year ago)	HTTP request flood	DDoS Attack Web Spam
🇨🇭 lyratris.com	2024-08-21 18:37:12 (1 year ago)	2024/08/21 18:36:42 [error] 14658#0: 1720889 limiting requests, excess: 25.419 by zone "testcookie- ... show more 2024/08/21 18:36:42 [error] 14658#0: 1720889 limiting requests, excess: 25.419 by zone "testcookie-ratelimit", client: 103.173.230.147, server: my.lyratris.com, request: "GET / HTTP/1.1", host: "my.lyratris.com" 2024/08/21 18:36:42 [error] 14658#0: 1721967 limiting requests, excess: 25.325 by zone "testcookie-ratelimit", client: 103.173.230.147, server: my.lyratris.com, request: "GET / HTTP/1.1", host: "my.lyratris.com" 2024/08/21 18:36:42 [error] 14658#0: 1721967 limiting requests, excess: 25.325 by zone "testcookie-ratelimit", client: 103.173.230.147, server: my.lyratris.com, request: "GET / HTTP/1.1", host: "my.lyratris.com" 2024/08/21 18:36:43 [error] 14658#0: 1721967 limiting requests, excess: 25.716 by zone "testcookie-ratelimit", client: 103.173.230.147, server: my.lyratris.com, request: "GET / HTTP/1.1", host: "my.lyratris.com" 2024/08/21 18:36:43 [error] 14658#0: 1720889 limiting requests, excess: 25.672 by zone "testcookie-ratelimit", client: 103.173.230.147, server: my. ... show less	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2024-08-20 13:05:41 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 ogbc-admin	2024-07-24 13:05:38 (1 year ago)	Jul 24 07:41:13 ogbcashdown wp(ogbcashdown.org)[3714911]: Authentication attempt for unknown user ad ... show more Jul 24 07:41:13 ogbcashdown wp(ogbcashdown.org)[3714911]: Authentication attempt for unknown user admin from 103.173.230.147 Jul 24 08:05:38 ogbcashdown wp(ogbcashdown.org)[3724327]: Authentication attempt for unknown user admin from 103.173.230.147 ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.137.36.182

🇳🇬 165.154.10.201

🇩🇪 161.35.31.251

🇨🇳 118.81.207.19

🇧🇬 79.124.62.134

🇳🇱 45.148.10.121

🇨🇳 218.9.233.97

🇳🇱 213.21.248.107

🇵🇰 202.47.44.212

🇺🇸 199.27.159.156

🇹🇼 198.235.24.121

🇳🇱 193.176.31.205

🇬🇧 185.247.137.191

🇫🇷 185.177.72.12

🇺🇸 185.141.119.137

🇨🇳 180.117.122.235

🇺🇸 172.214.209.153

🇻🇳 171.244.142.205

🇸🇬 101.47.15.26

🇭🇰 101.36.124.127