JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.180.118.99

103.180.118.99 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 24%: ?

24%

ISP	PT Persada Data Multimedia
Usage Type	Fixed Line ISP
ASN	AS149359
Domain Name	pdm.net.id
Country	🇮🇩 Indonesia
City	Surabaya, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.180.118.99

Whois 103.180.118.99

IP Abuse Reports for 103.180.118.99:

This IP address has been reported a total of 73 times from 37 distinct sources. 103.180.118.99 was first reported on June 7th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 leithzz	2026-06-06 13:07:47 (1 week ago)	Report by Cloudflare.Time: 2026-06-06T13:07:14Z	DDoS Attack
🇷🇴 Fn4ticHz	2026-05-30 15:41:18 (2 weeks ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇺🇸 Vano Ganzzz	2026-05-29 06:24:24 (2 weeks ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149359 (PT Persada Data Multimed ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149359 (PT Persada Data Multimedia) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-05-29T06:24:24Z Ray ID: a0336a7aac54820a UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇫🇷 MatStef132	2026-05-22 14:04:50 (3 weeks ago)	MatShield L7: blocked on mathost.eu (ua-concentration-ip-threshold)	Bad Web Bot
🇳🇱 ByeByte API	2026-05-19 06:02:28 (4 weeks ago)	byebyte.space auth: Rate-limit escalation at 2026-05-19T06:02:26Z: 5 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-19T06:02:26Z: 5 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/17.5'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="129", "Chromium";v="129", "Not.A/Brand";v="24"'. Platform: "Windows" (mobile=?0). Referer: 'https://google.com/'. Country (CF): ID. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:12:40 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇩🇪 NoaQT	2026-04-05 22:05:47 (2 months ago)	103.180.118.99 - - [05/Apr/2026:16:32:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.cloud. ... show more 103.180.118.99 - - [05/Apr/2026:16:32:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.cloud.us/blog" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.180.118.99 - - [05/Apr/2026:16:50:04 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.180.118.99 - - [05/Apr/2026:16:52:45 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.180.118.99 - - [05/Apr/2026:16:54:19 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.link13.biz/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.180.118.99 - - [05/Apr/2026:16:54:20 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pro. ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 14:54:25 (2 months ago)	103.180.118.99 - - [05/Apr/2026:16:50:04 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedi ... show more 103.180.118.99 - - [05/Apr/2026:16:50:04 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.180.118.99 - - [05/Apr/2026:16:52:45 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.180.118.99 - - [05/Apr/2026:16:52:45 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.180.118.99 - - [05/Apr/2026:16:54:19 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.link13.biz/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.180.118.99 - - [05/Apr/2026:16:54:19 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.link13. ... show less	DDoS Attack
Anonymous	2026-03-02 15:40:15 (3 months ago)	\| [Dangerous/Indonesia] Agressive IP 103.180.118.99 (~30 hits). Type: DoS Defender- Web server 400 e ... show more \| [Dangerous/Indonesia] Agressive IP 103.180.118.99 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇮🇹 cheatmaster.store	2026-02-25 10:24:10 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Indonesia Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇺🇸 COMPLEX	2026-01-26 01:07:22 (4 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: undefined (undefined) Protocol: ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:146.0) Gecko/146.0 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2025-12-30 13:28:24 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇸🇬 Fn4ticHz	2025-12-19 00:01:37 (5 months ago)	repeated ddos targeted zeroguard.space -- ZeroGuard	DDoS Attack
🇨🇭 Modules	2025-12-16 19:05:11 (6 months ago)	Open proxy http://103.180.118.99:8044 (RT:7215ms,Loc:Indonesia,ASN:AS149359)	Open Proxy
🇸🇬 Vano Ganzzz	2025-12-10 09:17:09 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149359 (IDNIC-PDM-AS-ID PT Persa ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149359 (IDNIC-PDM-AS-ID PT Persada Data Multimedia) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-12-10T09:17:09Z Ray ID: 9abba5c3ab359d2c UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.239.254.10

🇨🇳 117.24.143.149

🇹🇼 101.13.5.34

🇳🇱 89.21.67.171

🇦🇹 68.210.120.110

🇺🇸 45.79.92.218

🇹🇭 202.44.227.69

🇷🇺 195.91.133.139

🇦🇪 165.154.12.108

🇺🇸 146.70.195.99

🇰🇷 121.78.124.7

🇧🇬 79.124.56.254

🇹🇷 46.197.136.2

🇺🇸 198.98.62.211

🇷🇺 185.42.42.136

🇮🇳 152.67.8.205

🇳🇱 77.91.71.11

🇺🇸 66.132.186.141

🇹🇭 49.228.15.47

🇺🇸 47.88.48.113