JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.176.166.150

103.176.166.150 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 96%: ?

96%

ISP	AirFiber Networks Pvt Ltd
Usage Type	Fixed Line ISP
ASN	AS135780
Domain Name	airfiber.co.in
Country	🇮🇳 India
City	Kanchipuram, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.176.166.150

Whois 103.176.166.150

IP Abuse Reports for 103.176.166.150:

This IP address has been reported a total of 23 times from 21 distinct sources. 103.176.166.150 was first reported on June 22nd 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 strxmpp	2026-06-24 22:38:25 (6 days ago)	103.176.166.150 - - [25/Jun/2026:00:38:24 +0200] "GET /manager/html HTTP/1.1" 404 476 "-" "Mozilla/5 ... show more 103.176.166.150 - - [25/Jun/2026:00:38:24 +0200] "GET /manager/html HTTP/1.1" 404 476 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" ... show less	Bad Web Bot
🇨🇦 Anymous	2026-06-24 12:44:51 (6 days ago)	GET /manager/html HTTP/1.1 404 341 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"	Port Scan Web App Attack
🇱🇹 NotACaptcha	2026-06-24 11:41:20 (6 days ago)	webserver:80 [24/Jun/2026] "GET /manager/html HTTP/1.1" 404 341 "-" "Mozilla/5.0 (X11; Linux x86_64 ... show more webserver:80 [24/Jun/2026] "GET /manager/html HTTP/1.1" 404 341 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" show less	Web App Attack
🇺🇸 itsnixk	2026-06-24 10:42:31 (6 days ago)	(mod_security) mod_security (id:920350) triggered by 103.176.166.150 (IN/India/-): 1 in the last 360 ... show more (mod_security) mod_security (id:920350) triggered by 103.176.166.150 (IN/India/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 24 06:42:25.597793 2026] [security2:error] [pid 796055:tid 796564] [client 103.176.166.150:35916] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/manager/html"] [unique_id "aju0kQDGA2iaSnIsSMl4rgAAAT0"] show less	Port Scan
🇨🇭 ALPHANET	2026-06-24 10:36:13 (6 days ago)	web exploits	Hacking Exploited Host Web App Attack
🇺🇸 RogueAutomata	2026-06-24 10:26:23 (6 days ago)	Detected malicious request: GET /manager/html Detections triggered: Misc software probe/exploit Acc ... show more Detected malicious request: GET /manager/html Detections triggered: Misc software probe/exploit Access via IP addr (v4) show less	Web App Attack
🇺🇸 LotPhantom	2026-06-24 10:20:31 (6 days ago)	103.176.166.150 - - [24/Jun/2026:10:19:31 +0000] "GET /manager/html HTTP/1.1" 404 146 "-" "Mozilla/5 ... show more 103.176.166.150 - - [24/Jun/2026:10:19:31 +0000] "GET /manager/html HTTP/1.1" 404 146 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "0" ... show less	Web App Attack
🇩🇪 0x44	2026-06-24 10:10:13 (6 days ago)	Abusive host detected - Web probing for vulnerabilities	Web App Attack Hacking
🇺🇸 drewf.ink	2026-06-23 18:45:51 (1 week ago)	[18:45] Port scanning. Port(s) scanned: TCP/8080	Port Scan
🇦🇺 dyln	2026-06-23 18:09:47 (1 week ago)	Dyls honeypot brute-force: proto8 (1 total hits)	Brute-Force
🇬🇧 Interceptor_HQ	2026-06-23 17:57:32 (1 week ago)	request_uri: /manager/html -- automatic report --	Brute-Force Hacking
🇮🇩 PENJAGA.AUM	2026-06-23 17:51:46 (1 week ago)	103.176.166.150 - Attack: Possible XSS attack, js event handler	Web App Attack SQL Injection Spoofing
🇮🇩 hermawan	2026-06-23 16:52:48 (1 week ago)	06/23/2026-23:52:43.681153 [Drop] [] [1:21515:5] Suricata SERVER-APACHE Apache Tomcat Web Applica ... show more 06/23/2026-23:52:43.681153 [Drop] [] [1:21515:5] Suricata SERVER-APACHE Apache Tomcat Web Application Manager access [**] [Classification: Attempted Information Leak] [Priority: 3] {TCP} 103.176.166.150:44660 -> 103.166.156.58:80 ... show less	Email Spam Hacking
🇫🇮 6kilowatti	2026-06-23 16:30:04 (1 week ago)	103.176.166.150 - - [23/Jun/2026:19:30:03 +0300] "GET /manager/html HTTP/1.1" 404 153 "-" "Mozilla/5 ... show more 103.176.166.150 - - [23/Jun/2026:19:30:03 +0300] "GET /manager/html HTTP/1.1" 404 153 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" ... show less	Web App Attack
Anonymous	2026-06-23 16:02:55 (1 week ago)	2026-06-23T18:02:54.217186+02:00 myserver sshd[2213056]: banner exchange: Connection from 103.176.16 ... show more 2026-06-23T18:02:54.217186+02:00 myserver sshd[2213056]: banner exchange: Connection from 103.176.166.150 port 54824: invalid format 2026-06-23T18:02:54.217186+02:00 myserver sshd[2213056]: banner exchange: Connection from 103.176.166.150 port 54824: invalid format ... show less	Brute-Force SSH

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇻 217.60.3.128

🇺🇸 193.19.109.209

🇺🇸 173.255.223.115

🇻🇳 157.10.45.70

🇲🇾 156.59.222.169

🇫🇮 147.185.133.19

🇪🇸 79.117.160.241

🇺🇸 71.6.233.2

🇩🇪 69.5.169.220

🇯🇵 47.91.24.75

🇭🇰 47.86.16.85

🇺🇸 47.77.237.80

🇪🇸 46.24.47.94

🇯🇵 20.89.237.101

🇺🇸 20.15.163.139

🇺🇸 198.199.78.91

🇺🇸 162.216.150.171

🇸🇬 143.198.221.127

🇷🇺 80.80.195.196

🇩🇪 47.254.176.18