JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.189.197.117

103.189.197.117 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 0%: ?

ISP	PT.GRAHA SUMBER TEKNOLOGI
Usage Type	Fixed Line ISP
ASN	AS149912
Hostname(s)	ip-117.197.gst.net.id
Domain Name	grahasumberteknologi.id
Country	🇮🇩 Indonesia
City	Serang, Banten

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.189.197.117

Whois 103.189.197.117

IP Abuse Reports for 103.189.197.117:

This IP address has been reported a total of 137 times from 54 distinct sources. 103.189.197.117 was first reported on August 10th 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NoaQT	2026-04-05 22:01:50 (2 months ago)	103.189.197.117 - - [05/Apr/2026:16:30:51 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo. ... show more 103.189.197.117 - - [05/Apr/2026:16:30:51 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.189.197.117 - - [05/Apr/2026:16:31:26 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.189.197.117 - - [05/Apr/2026:16:31:26 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 14:53:56 (2 months ago)	103.189.197.117 - - [05/Apr/2026:16:42:17 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.facebo ... show more 103.189.197.117 - - [05/Apr/2026:16:42:17 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.facebook.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.189.197.117 - - [05/Apr/2026:16:44:12 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.189.197.117 - - [05/Apr/2026:16:44:12 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.189.197.117 - - [05/Apr/2026:16:51:48 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.189.197.117 - - [05/Apr/2026:16:51:48 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (Windows NT 10.0; Wi ... show less	DDoS Attack
🇮🇹 VHosting	2026-03-31 14:13:16 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous	2026-03-23 06:20:18 (3 months ago)	\| [Dangerous/Indonesia] Aggressive IP 103.189.197.117 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Aggressive IP 103.189.197.117 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇳🇱 ConsulHosting	2026-02-15 16:03:39 (4 months ago)	Part of an HTTP Flood DDoS attack and had sent at least 2 requests.	DDoS Attack Exploited Host
🇨🇦 SuperEvilLuke	2026-01-24 19:58:44 (5 months ago)	Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi t ... show more Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi towards host embotic.xyz (GET HTTP/2) @ 2026-01-24T19:58:44Z (2 occurrences) show less	DDoS Attack Exploited Host
🇨🇭 Modules	2026-01-11 13:01:59 (5 months ago)	Open proxy http://103.189.197.117:3125 (RT:73014ms,Loc:Indonesia,ASN:AS149912)	Open Proxy
🇨🇦 1gz	2025-12-14 21:14:06 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /auth/register UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 SuperEvilLuke	2025-12-13 12:16:07 (6 months ago)	Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi t ... show more Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi towards host panel.embotic.xyz (GET HTTP/2) @ 2025-12-13T12:16:07Z (4 occurrences) show less	DDoS Attack Exploited Host
🇸🇬 Vano Ganzzz	2025-12-10 12:33:26 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLO ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-12-10T12:33:26Z Ray ID: 9abcc54dc8e44092 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇺🇸 1gz	2025-12-01 22:15:18 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/532.8 (KHTML, like Gecko) Chrome/4.0.277.0 Safari/532.8 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇩🇪 Tizian Maxime Weigt	2025-11-25 08:20:03 (7 months ago)	Incoming DDoS to port 443 (L7 HTTPS Flood) Detected	DDoS Attack
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 05:45:23 (7 months ago)	ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi) Botnet Zombie: This IP has ... show more ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-08 14:50:48 (7 months ago)	ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi) Botnet Zombie: This IP has ... show more ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇷🇺 ago.su	2025-11-06 05:13:32 (7 months ago)	F2B blocked nginx activity control ddos v2 [otd]	DDoS Attack

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.184

🇩🇪 69.5.169.223

🇺🇸 64.62.197.74

🇪🇬 196.155.9.30

🇵🇪 190.119.63.98

🇨🇴 181.129.41.162

🇩🇪 94.31.115.128

🇲🇾 49.124.159.187

🇸🇬 47.84.136.25

🇧🇷 205.210.31.241

🇬🇧 185.38.148.2

🇩🇪 164.90.178.220

🇺🇸 162.216.150.131

🇺🇸 146.88.241.111

🇨🇳 120.26.46.187

🇱🇹 62.60.130.219

🇬🇧 193.176.29.7

🇬🇧 193.163.125.251

🇺🇸 162.216.149.172

🇺🇸 148.153.245.161