JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.174.123.134

103.174.123.134 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 23%: ?

23%

ISP	PT Jaya Sejahtra Nugraha
Usage Type	Fixed Line ISP
ASN	AS147096
Domain Name	strongnet.id
Country	🇮🇩 Indonesia
City	Sumedang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.174.123.134

Whois 103.174.123.134

IP Abuse Reports for 103.174.123.134:

This IP address has been reported a total of 16 times from 14 distinct sources. 103.174.123.134 was first reported on June 21st 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-02 19:44:23 (4 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-26 14:19:22 (6 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇫🇷 Sklurk	2026-06-02 01:13:10 (1 month ago)	Web App Attack	Web App Attack
🇨🇭 ALPHANET	2026-05-09 13:05:04 (1 month ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇬🇧 PeravixGroup	2026-04-28 01:50:57 (2 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 SiliSoftware	2026-04-10 02:09:10 (2 months ago)	/phpBB3/viewforum.php?f=15&sid=f771e9543060f71b75fd12a92c97e61e	Web App Attack
🇺🇸 RAP	2026-01-16 13:14:12 (5 months ago)	2026-01-16 13:14:12 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇦🇺 MAGIC	2025-10-06 03:02:13 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 exxos	2025-09-15 19:03:01 (9 months ago)	http-no-verb	Hacking
🇩🇪 Packets-Decreaser.NET	2025-09-07 01:49:58 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-08-31 02:36:15 (10 months ago)	(mod_security) mod_security (id:210831) triggered by 103.174.123.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 103.174.123.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 22:36:09.358639 2025] [security2:error] [pid 31451:tid 31451] [client 103.174.123.134:36634] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/usage_202508.html"] [unique_id "aLO1Gc-y9Ajg_P4II9-CXgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2025-08-30 08:11:54 (10 months ago)	Aug 30 10:11:50 canopus postfix/smtpd[554069]: NOQUEUE: reject: RCPT from unknown[103.174.123.134]: ... show more Aug 30 10:11:50 canopus postfix/smtpd[554069]: NOQUEUE: reject: RCPT from unknown[103.174.123.134]: 554 5.7.1 Service unavailable; Client host [103.174.123.134] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/103.174.123.134 / Listed by PBL, see https://check.spamhaus.org/query/ip/103.174.123.134 / Listed by XBL, see https://check.spamhaus.org/query/ip/103.174.123.134; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail22.lan> Aug 30 10:11:51 canopus postfix/smtpd[554069]: NOQUEUE: reject: RCPT from unknown[103.174.123.134]: 554 5.7.1 Service unavailable; Client host [103.174.123.134] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/103.174.123.134 / Listed by PBL, see https://check.spamhaus.org/query/ip/103.174.123.134 / Listed by XBL, see https://check.spamhaus.org/query/ip/103.174.123.134; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail22.lan> Au ... show less	Brute-Force Exploited Host
🇨🇿 unhfree.net	2025-08-14 10:07:36 (10 months ago)	Aug 14 07:28:24 canopus postfix/smtpd[2929358]: NOQUEUE: reject: RCPT from unknown[103.174.123.134]: ... show more Aug 14 07:28:24 canopus postfix/smtpd[2929358]: NOQUEUE: reject: RCPT from unknown[103.174.123.134]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<pc9366.network> Aug 14 11:32:42 canopus postfix/smtpd[2942798]: NOQUEUE: reject: RCPT from unknown[103.174.123.134]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<user-4151> Aug 14 12:07:35 canopus postfix/smtpd[2947424]: NOQUEUE: reject: RCPT from unknown[103.174.123.134]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<MX-7536.corp> Aug 14 12:07:35 canopus postfix/smtpd[2947424]: NOQUEUE: reject: RCPT from unknown[103.174.123.134]: 554 5.7.1 <sh ... show less	Brute-Force Exploited Host
🇯🇵 ki3	2025-07-28 21:17:29 (11 months ago)	Fail2Ban: Web App Attacks and Forum Spam 103.174.123.134 1753737448.0(JST)	Web Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-27 07:06:50 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.174.123.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.174.123.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 27 03:06:42.483291 2025] [security2:error] [pid 2380577:tid 2380577] [client 103.174.123.134:45820] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aF5DApC0qsCW9o1mNauXZQAAAAI"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a04:4e40:e000:0:33c:a689:be95:5a4

🇧🇷 205.210.31.181

🇭🇰 199.45.154.126

🇪🇨 186.68.83.104

🇺🇦 176.102.192.245

🇩🇪 164.90.228.79

🇫🇮 159.255.32.212

🇲🇽 149.232.128.209

🇫🇮 147.185.133.113

🇺🇸 136.0.120.227

🇺🇸 103.211.185.221

🇹🇷 94.154.43.140

🇩🇰 85.203.47.196

🇺🇸 64.95.9.247

🇩🇪 47.245.141.179

🇬🇧 35.203.211.134

🇻🇪 201.249.192.30

🇳🇱 193.176.31.249

🇧🇷 186.251.56.20

🇳🇱 172.71.101.246