AbuseIPDB » 103.189.233.69
103.189.233.69
This IP was reported 7 times. Confidence of
Abuse
is 18% : ?
ISP
XTREME NET (PVT.) LIMITED
Usage Type
Fixed Line ISP
ASN
AS149870
Domain Name
xtreme.net.pk
Country
🇵🇰
Pakistan
City
Faisalabad, Punjab
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 103.189.233.69 :
This IP address has been reported a total of
7
times from
6 distinct
sources.
103.189.233.69 was first reported on
August 27th 2025 , and the most recent report was
1 hour ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-08-22 09:49:32
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 103.189.233.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 103.189.233.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 05:49:24.593798 2026] [security2:error] [pid 31450:tid 31472] [client 103.189.233.69:57734] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.certifiedebusinessconsultant.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.certifiedebusinessconsultant.com"] [uri "/php-20250118110852.ini"] [unique_id "aolwpHreuRvbScIPyUikkwAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-07-29 11:07:55
(3 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-07-05 14:30:17
(1 month ago)
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ...
show more
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /brands/rcf/shopby/manufacturer-rcf-axis-lsi-haivision-xyz-huawei.html | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
kosada.com
2026-06-29 08:34:48
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-05-11 07:03:51
(3 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
🇨🇭
backslash
2026-01-17 05:05:15
(7 months ago)
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
🇳🇱
exxos
2025-08-27 13:03:01
(11 months ago)
Attacks with Bad user agents
Hacking
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: