JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.191.54.11

Neutral Activity

Abuse Confidence Score

0% Low Risk

15 reports

12 reporters · latest 1 year ago

ISP: PT Sarana Kreasi Teknologi Indonusa
Usage Type: Fixed Line ISP
ASN: AS149913
Domain Name: saranalink.net.id
Country: 🇮🇩 Indonesia
City: Blitar, East Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.191.54.11 has been reported 15 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

15 from 12 distinct reporters

First reported

December 7th 2022

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2024-11-24 08:37:00 UTC · (1 year ago)	[rede-184-149] 11/24/2024-05:36:04.229083, 103.191.54.11, Protocol: 17, POSSBL SCAN FRAG (NMAP -f)	Port Scan
Anonymous	2024-04-29 04:43:56 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇮🇩 hermawan	2024-02-10 07:33:55 UTC · (2 years ago)	[Sat Feb 10 14:33:43.600146 2024] [security2:error] [pid 108539:tid 128441022154304] [client 103.191.54.11:9101] [client 103.191.54.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".blogspot" at REQUEST_HEADERS:Referer. [file " ... show more [Sat Feb 10 14:33:43.600146 2024] [security2:error] [pid 108539:tid 128441022154304] [client 103.191.54.11:9101] [client 103.191.54.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".blogspot" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "155"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: .blogspot found within REQUEST_HEADERS:Referer: https://naaamypaterson.blogspot.com/ request_line = GET /images/Meteorologi/Prakiraan/Prakiraan-Harian/02-Besok-Hari/Malang/10-Oktober-2018/23-10-2-Prakiraan_Cuaca_BESOK_HARI_untuk_Pagi-Siang-Malam-Dini_Hari_di_Kota_dan_Kabupaten_Malang_Tiap_3_Jam_Pukul_07.00_10.00_13.00_16.00_19.00_22.00_01.00_04.00_07.00_Berlaku_Mulai_RABU_23_OKTOBER_2018_Jam_07.00_WIB_Hingga_KAMIS_24_OK.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Meteorologi/Prakiraan/Prakiraan-Harian/02-Besok-Hari/Malang/10-Oktober-2018/23-10-2-Prakir ... show less	Hacking Web App Attack
Anonymous	2023-03-17 13:31:19 UTC · (3 years ago)	SPFBL check banned	Email Spam
Anonymous	2023-03-16 12:18:37 UTC · (3 years ago)	SPFBL check banned	Email Spam
Anonymous	2023-03-16 12:18:37 UTC · (3 years ago)	SPFBL check banned	Email Spam
Anonymous	2023-03-16 12:18:37 UTC · (3 years ago)	SPFBL check banned	Email Spam
🇵🇹 rnl	2023-03-16 05:32:49 UTC · (3 years ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force
🇺🇸 djm999	2023-03-11 14:13:58 UTC · (3 years ago)	Sender IP Address: 103.191.54.11 Received date: Sat, 11 Mar 2023 04:08:20 +0100 SPF Alignment: no DKIM Alignment: no DMARC Results: Reject	Email Spam Spoofing
Anonymous	2023-03-04 12:04:20 UTC · (3 years ago)	SPAM EMAIL 103.191.54.11 (RBL_TRIGGER)	Email Spam
🇸🇬 Sean64	2023-03-01 09:24:28 UTC · (3 years ago)	Mar 1 17:24:28 sean postfix/smtpd[2292393]: NOQUEUE: reject: RCPT from unknown[103.191.54.11]: 554 5.7.1 Service unavailable; Client host [103.191.54.11] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.191.54.11 / https://www.s ... show more Mar 1 17:24:28 sean postfix/smtpd[2292393]: NOQUEUE: reject: RCPT from unknown[103.191.54.11]: 554 5.7.1 Service unavailable; Client host [103.191.54.11] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.191.54.11 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ip11-54.oofydi.net> ... show less	Email Spam Brute-Force
🇵🇱 fripers.pl	2023-02-24 16:54:43 UTC · (3 years ago)	2023-02-24 17:53:33 H=(ip11-54.oofydi.net) [103.191.54.11]:35667 I=[193.107.88.166]:25 F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2023-02-24 17:53:59 H=(ip11-54.oofydi.net) [103.191.54.11]:35740 I=[193.107.8 ... show more 2023-02-24 17:53:33 H=(ip11-54.oofydi.net) [103.191.54.11]:35667 I=[193.107.88.166]:25 F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2023-02-24 17:53:59 H=(ip11-54.oofydi.net) [103.191.54.11]:35740 I=[193.107.88.166]:25 F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2023-02-24 17:54:42 H=(ip11-54.oofydi.net) [103.191.54.11]:35801 I=[193.107.88.166]:25 F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed ... show less	Brute-Force
🇩🇪 mapik	2023-01-21 04:26:30 UTC · (3 years ago)	2023-01-21T05:26:28.670840 multi.mapik.cz postfix/smtpd[860750]: NOQUEUE: reject: RCPT from unknown[103.191.54.11]: 554 5.7.1 Service unavailable; Client host [103.191.54.11] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.191.5 ... show more 2023-01-21T05:26:28.670840 multi.mapik.cz postfix/smtpd[860750]: NOQUEUE: reject: RCPT from unknown[103.191.54.11]: 554 5.7.1 Service unavailable; Client host [103.191.54.11] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.191.54.11; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ip11-54.oofydi.net> ... show less	Brute-Force
Anonymous	2022-12-09 21:14:55 UTC · (3 years ago)	Dec 10 03:14:54 ns3104219 postfix/smtpd[1089]: NOQUEUE: reject: RCPT from unknown[103.191.54.11]: 450 4.7.1 <ip11-54.oofydi.net>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ip11-54.oofydi. ... show more Dec 10 03:14:54 ns3104219 postfix/smtpd[1089]: NOQUEUE: reject: RCPT from unknown[103.191.54.11]: 450 4.7.1 <ip11-54.oofydi.net>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<ip11-54.oofydi.net> ... show less	Email Spam Web App Attack
🇩🇪 singertc	2022-12-07 23:54:47 UTC · (3 years ago)	2022-12-08 05:54:01 H=(ip11-54.oofydi.net) [103.191.54.11] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted 2022-12-08 05:54:46 H=(ip11-54.oofydi.net) [103.191.54.11] F=<[email protected]> rejected RCPT <temora ... show more 2022-12-08 05:54:01 H=(ip11-54.oofydi.net) [103.191.54.11] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted 2022-12-08 05:54:46 H=(ip11-54.oofydi.net) [103.191.54.11] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted ... show less	Email Spam Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 223.83.131.241

🇨🇳 218.94.4.146

🇳🇱 45.148.10.157

🇳🇱 45.148.10.152

🇭🇰 43.159.195.91

🇺🇸 34.28.43.91

🇨🇭 179.43.153.10

🇺🇸 167.172.31.143

🇲🇾 124.217.230.149

🇵🇱 95.214.53.157

🇬🇧 87.236.176.227

🇨🇳 59.53.166.99

🇭🇰 49.213.6.30

🇳🇱 195.178.110.30

🇺🇸 184.186.73.86

🇺🇸 162.216.150.150

🇫🇮 147.185.133.7

🇨🇳 144.123.77.161

🇺🇸 104.248.124.140

🇺🇸 104.248.51.221