JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.189.197.47

103.189.197.47 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 14%: ?

14%

ISP	Alokasi Server
Usage Type	Fixed Line ISP
ASN	AS149912
Hostname(s)	ip-47.197.gst.net.id
Domain Name	grahasumberteknologi.id
Country	🇮🇩 Indonesia
City	Serang, Banten

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.189.197.47

Whois 103.189.197.47

IP Abuse Reports for 103.189.197.47:

This IP address has been reported a total of 17 times from 14 distinct sources. 103.189.197.47 was first reported on September 21st 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-05-30 11:37:50 (3 weeks ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇮🇹 A000Z	2026-05-28 03:13:15 (4 weeks ago)	Fail2Ban: 103.189.197.47 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 103.189.197.47 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.5207.1276 Mobile Safari/537.36 show less	Bad Web Bot
🇮🇹 VHosting	2026-05-27 11:33:29 (4 weeks ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇨🇭 Modules	2026-01-09 17:54:24 (5 months ago)	Open proxy http://103.189.197.47:3125 (RT:63533ms,Loc:Indonesia,ASN:AS149912)	Open Proxy
🇮🇩 Ridwan Na'im	2025-10-06 17:30:11 (8 months ago)	[WAZUH] SUPPRESSED: IP 103.189.197.47 blocked - 8 times fired in 6 hour	Hacking Web App Attack
🇳🇱 exxos	2025-09-06 00:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
🇸🇬 Vano Ganzzz	2025-08-24 00:30:38 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLO ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-08-24T00:30:38Z Ray ID: 973ebe003edaa11c UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇬🇧 Silly Development	2025-08-10 00:59:11 (10 months ago)	Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi t ... show more Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi towards host sillydev.co.uk (GET HTTP/2) @ 2025-08-10T00:59:11Z (6 occurrences) show less	DDoS Attack Exploited Host
Anonymous	2025-08-09 00:56:30 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇫🇷 ᴀʀᴛ	2025-07-26 16:07:32 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Su ... show more Triggered Cloudflare WAF (l7ddos) from ID. ASN: 149912 (IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-06-18 10:58:13 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 securejdprop	2025-05-27 07:08:30 (1 year ago)	This IP was detected by CrowdSec triggering jendela/too-many-probing. Ip 103.189.197.47 performed 'j ... show more This IP was detected by CrowdSec triggering jendela/too-many-probing. Ip 103.189.197.47 performed 'jendela/too-many-probing' (4 events over 58.259617ms) at 2025-05-27 07:08:27.280270486 +0000 UTC show less	Hacking Brute-Force Web App Attack
🇺🇸 uira.live	2025-05-17 04:11:20 (1 year ago)	Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi t ... show more Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi towards host uira.live (GET HTTP/2) @ 2025-05-17T04:11:20Z (4 occurrences) show less	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-05-16 21:31:33 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇬🇧 uira.live	2025-05-04 11:25:01 (1 year ago)	Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi t ... show more Malicious activity detected from 149912 IDNIC-GRAHASUMBERTEKNOLOGI-AS-ID PT Graha Sumber Teknologi towards host uira.live (GET HTTP/2) @ 2025-05-04T11:25:01Z (12 occurrences) show less	DDoS Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.126.222.66

🇮🇳 122.187.229.201

🇬🇧 81.19.219.196

🇫🇷 62.210.142.159

🇨🇳 58.220.39.200

🇬🇧 35.203.211.60

🇮🇱 2.55.75.176

🇰🇷 211.223.41.90

🇫🇮 94.156.116.72

🇸🇪 90.230.212.29

🇸🇪 90.230.115.5

🇹🇼 36.230.80.49

🇺🇸 18.217.41.198

🇺🇸 3.142.4.118

🇩🇪 213.209.159.108

🇧🇪 198.235.24.163

🇬🇧 193.176.29.11

🇬🇧 188.240.59.21

🇬🇧 185.216.145.164

🇧🇷 177.125.131.235