JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.189.116.131

103.189.116.131 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	PT Lintas Data Prima
Usage Type	Fixed Line ISP
ASN	AS149878
Domain Name	ldp.net.id
Country	🇮🇩 Indonesia
City	Wonosobo, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.189.116.131

Whois 103.189.116.131

IP Abuse Reports for 103.189.116.131:

This IP address has been reported a total of 17 times from 10 distinct sources. 103.189.116.131 was first reported on August 26th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Silly Development	2025-05-02 15:44:16 (1 year ago)	Malicious activity detected from 149878 IDNIC-CTSOLUSINDO-AS-ID PT Callysta Total Solusindo towards ... show more Malicious activity detected from 149878 IDNIC-CTSOLUSINDO-AS-ID PT Callysta Total Solusindo towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-05-02T15:44:16Z (4 occurrences) show less	DDoS Attack Hacking Exploited Host
🇺🇸 basedchad	2025-04-25 05:36:55 (1 year ago)	This IP's subnet was blocked due to suspicious activity.	DDoS Attack Port Scan Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-03-26 13:33:47 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇵🇱 sefinek.net	2025-03-24 10:35:30 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149878 (IDNIC-CTSOLUSINDO-AS-ID ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149878 (IDNIC-CTSOLUSINDO-AS-ID PT Callysta Total Solusindo) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-03-24T09:51:57Z UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-03-23 21:54:05 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-02-08 17:12:45 (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇩🇪 nyuuzyou	2024-11-26 11:11:11 (1 year ago)	Intensive scraping: /web?s=%22SPIP%22%20%22Sarka-SPIP%22%20%22Collectif%20Sarka-SPIP%22%20%22GPL%22% ... show more Intensive scraping: /web?s=%22SPIP%22%20%22Sarka-SPIP%22%20%22Collectif%20Sarka-SPIP%22%20%22GPL%22%20%22Texte%20de%20votre%20message%22&scraper=yep. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0. show less	Bad Web Bot
Anonymous	2024-11-06 01:23:59 (1 year ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH
Anonymous	2024-10-21 04:28:35 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-09-30 11:22:11 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.189.116.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.189.116.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 30 07:22:05.951360 2024] [security2:error] [pid 24303:tid 24303] [client 103.189.116.131:36200] [client 103.189.116.131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.189.116.131 (+1 hits since last alert)\|www.drjasonkolber.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.drjasonkolber.com"] [uri "/xmlrpc.php"] [unique_id "ZvqJ3fFcreN6oQ0WwQBo1gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2024-09-29 12:54:40 (1 year ago)	103.189.116.131 - - [29/Sep/2024:14:54:39 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ... show more 103.189.116.131 - - [29/Sep/2024:14:54:39 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.138 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-09-27 13:02:01 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.189.116.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.189.116.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 27 09:01:57.274771 2024] [security2:error] [pid 3943559:tid 3943559] [client 103.189.116.131:59676] [client 103.189.116.131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.189.116.131 (+1 hits since last alert)\|snowrideadventures.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "snowrideadventures.com"] [uri "/xmlrpc.php"] [unique_id "ZvasxRnPnPq7YnEa0OdpVAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-24 01:34:29 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.189.116.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.189.116.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 23 21:34:24.117115 2024] [security2:error] [pid 7366:tid 7366] [client 103.189.116.131:38976] [client 103.189.116.131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.189.116.131 (+1 hits since last alert)\|qed-consulting.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "qed-consulting.co"] [uri "/xmlrpc.php"] [unique_id "ZvIXIFDUokpdFRdIZKxIygAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2024-09-23 23:20:53 (1 year ago)	103.189.116.131 - - [24/Sep/2024:01:20:53 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ... show more 103.189.116.131 - - [24/Sep/2024:01:20:53 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.138 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
Anonymous	2024-09-23 18:59:37 (1 year ago)	apache-wordpress-login	Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 165.154.51.193

🇺🇸 162.216.149.181

🇺🇸 147.185.132.66

🇳🇱 45.148.10.147

🇬🇧 35.203.210.184

🇳🇱 34.90.206.63

🇧🇷 191.5.154.80

🇮🇶 185.166.25.150

🇺🇸 181.177.86.221

🇺🇸 162.216.150.168

🇦🇪 91.75.85.237

🇺🇸 47.77.225.186

🇱🇹 45.227.254.170

🇺🇸 216.180.246.20

🇮🇩 202.51.214.98

🇹🇭 202.29.232.118

🇷🇴 92.118.39.77

🇩🇪 84.201.25.161

🇺🇸 44.66.44.238

🇺🇸 44.62.174.95