JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.178.13.67

103.178.13.67 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	PT Amerta Asa Media
Usage Type	Fixed Line ISP
ASN	AS147165
Domain Name	amertaasamedia.co.id
Country	🇮🇩 Indonesia
City	Kediri, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.178.13.67

Whois 103.178.13.67

IP Abuse Reports for 103.178.13.67:

This IP address has been reported a total of 9 times from 5 distinct sources. 103.178.13.67 was first reported on May 5th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Packets-Decreaser.NET	2025-02-18 09:30:36 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Florian Kolb	2024-09-12 20:11:44 (2 years ago)	Layer 7 Flood with 1000 requests	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2024-09-12 03:49:56 (2 years ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 hermawan	2024-06-25 09:07:13 (2 years ago)	[Tue Jun 25 16:05:11.520619 2024] [security2:error] [pid 311006:tid 130508331681344] [client 103.178 ... show more [Tue Jun 25 16:05:11.520619 2024] [security2:error] [pid 311006:tid 130508331681344] [client 103.178.13.67:59064] [client 103.178.13.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "41"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: id-ID,id;q=0.9,en-US;q=0.8,en;q=0.7,vi;q=0.6,jv;q=0.5,zh-CN;q=0.4,zh;q=0.3 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/system-v167.css"] [unique_id "ZnqIR0-EW4IxyXzdImU0UQABRgA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[311007] [fDzzMUP92cA] [ZnqIR0-EW4IxyXzdImU0UQABRgA] keep_alive=[1] [2024-06-25 16:05:11.520623] [R:ZnqIR0-EW4IxyXzdImU0UQABRgA] UA:'Mozilla/5.0 (Linux; Android 10; K) Appl ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-06-14 11:13:04 (2 years ago)	[Fri Jun 14 18:11:02.386817 2024] [security2:error] [pid 483006:tid 125527167862336] [client 103.178 ... show more [Fri Jun 14 18:11:02.386817 2024] [security2:error] [pid 483006:tid 125527167862336] [client 103.178.13.67:58036] [client 103.178.13.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "41"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: id-ID,id;q=0.9,en-US;q=0.8,en;q=0.7,vi;q=0.6,jv;q=0.5,zh-CN;q=0.4,zh;q=0.3 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/system-v167.css"] [unique_id "ZmwlRgxLZuNcnY5q5slGSAABWAM"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[483010] [ZUivq6fpNb0] [ZmwlRgxLZuNcnY5q5slGSAABWAM] keep_alive=[1] [2024-06-14 18:11:02.386823] [R:ZmwlRgxLZuNcnY5q5slGSAABWAM] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-06-13 12:40:43 (2 years ago)	[Thu Jun 13 19:39:56.581087 2024] [security2:error] [pid 672474:tid 138316024383040] [client 103.178 ... show more [Thu Jun 13 19:39:56.581087 2024] [security2:error] [pid 672474:tid 138316024383040] [client 103.178.13.67:46104] [client 103.178.13.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "41"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: id-ID,id;q=0.9,en-US;q=0.8,en;q=0.7,vi;q=0.6,jv;q=0.5,zh-CN;q=0.4,zh;q=0.3 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/system-v167.css"] [unique_id "ZmronPFvksNitcMqnUZdpgAAVxw"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[672503] [BO3Yy2yxEJk] [ZmronPFvksNitcMqnUZdpgAAVxw] keep_alive=[1] [2024-06-13 19:39:56.581091] [R:ZmronPFvksNitcMqnUZdpgAAVxw] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-06-09 02:02:03 (2 years ago)	[Sun Jun 09 09:00:01.326335 2024] [security2:error] [pid 9387:tid 137664130975296] [client 103.178.1 ... show more [Sun Jun 09 09:00:01.326335 2024] [security2:error] [pid 9387:tid 137664130975296] [client 103.178.13.67:33906] [client 103.178.13.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "41"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: id-ID,id;q=0.9,en-US;q=0.8,en;q=0.7,vi;q=0.6,jv;q=0.5,zh-CN;q=0.4,zh;q=0.3 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/system-v167.css"] [unique_id "ZmUMoQ2S167Wrjl-XDyWhQACHAU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[9393] [XYz0Y9t/zJc] [ZmUMoQ2S167Wrjl-XDyWhQACHAU] keep_alive=[1] [2024-06-09 09:00:01.326344] [R:ZmUMoQ2S167Wrjl-XDyWhQACHAU] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWeb ... show less	Hacking Web App Attack
Anonymous	2024-05-15 06:22:50 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2024-05-05 06:54:28 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.195

🇧🇷 205.210.31.193

🇳🇱 103.214.5.133

🇺🇸 66.132.195.43

🇱🇹 62.60.130.242

🇺🇸 47.189.248.85

🇯🇵 45.43.60.98

🇧🇷 205.210.31.192

🇧🇷 205.210.31.184

🇺🇸 205.210.31.44

🇧🇷 201.86.115.162

🇲🇦 196.119.227.196

🇦🇷 186.56.11.2

🇺🇸 143.110.233.117

🇨🇳 121.31.210.125

🇮🇳 103.176.16.39

🇮🇩 103.111.249.99

🇷🇴 80.94.92.55

🇨🇭 79.127.184.23

🇩🇪 69.5.169.197