JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.194.46.68

103.194.46.68 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 1%: ?

ISP	PT Jujur Amanah Barokah
Usage Type	Fixed Line ISP
ASN	AS149971
Hostname(s)	jab-mtr-ncix-baraya-68-46.jabnet.id
Domain Name	jabnet.id
Country	🇮🇩 Indonesia
City	Banjar, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.194.46.68

Whois 103.194.46.68

IP Abuse Reports for 103.194.46.68:

This IP address has been reported a total of 15 times from 9 distinct sources. 103.194.46.68 was first reported on December 5th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-13 04:27:22 (3 weeks ago)	Attack Signature Blocked: /wishlist/index/add/product/11704/form_key/IcmIyt4lbr0CwqhJ/ (Magento Site ... show more Attack Signature Blocked: /wishlist/index/add/product/11704/form_key/IcmIyt4lbr0CwqhJ/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇳🇱 maxxsense	2026-03-26 17:54:33 (2 months ago)	103.194.46.68 (ID/Indonesia/jab-mtr-ncix-baraya-68-46.jabnet.id), 12 distributed imapd attacks on ac ... show more 103.194.46.68 (ID/Indonesia/jab-mtr-ncix-baraya-68-46.jabnet.id), 12 distributed imapd attacks on account [redacted] show less	Brute-Force
Anonymous	2025-12-04 12:25:31 (6 months ago)	botnet	DDoS Attack
🇮🇩 hermawan	2025-11-17 01:40:33 (6 months ago)	[Mon Nov 17 08:38:39.379002 2025] [security2:error] [pid 487854:tid 140543518557888] [client 103.194 ... show more [Mon Nov 17 08:38:39.379002 2025] [security2:error] [pid 487854:tid 140543518557888] [client 103.194.46.68:51490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36 request_line = GET /index.php/prakiraan-bulanan/4160-prakiraan-potensi-banjir/prakiraan-potensi-banjir-di-propinsi-jawa-timur/prakiraan-bulanan-daerah-potensi-banjir-provinsi-jawa-timur-tahun-2023/555555604-prakiraan-bulanan-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-november-tahun-2023-update-10-november-2023 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-bulanan/4160-prakiraan-potensi- ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-16 01:02:36 (6 months ago)	[Sun Nov 16 08:00:52.745956 2025] [security2:error] [pid 1400296:tid 140213029422784] [client 103.19 ... show more [Sun Nov 16 08:00:52.745956 2025] [security2:error] [pid 1400296:tid 140213029422784] [client 103.194.46.68:43711] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=476&id=684%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-september-2015&start=40 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=684%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-september-2015&start=40 Req..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aRkiROBzWsf5 ... show less	Hacking Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-10-07 12:26:39 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 exxos	2025-09-02 14:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
🇺🇸 BassingsVPN	2025-07-11 22:31:34 (10 months ago)	Suspicious UDP traffic to OpenVPN port 1194	DDoS Attack Exploited Host
🇩🇪 nyuuzyou	2024-12-11 22:40:13 (1 year ago)	Intensive scraping: /web?s=%22title%3DUser%3A%22%20wiki%20online%20shopping%20uae&country=ff-ff&scra ... show more Intensive scraping: /web?s=%22title%3DUser%3A%22%20wiki%20online%20shopping%20uae&country=ff-ff&scraper=wiby. User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0. show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2024-12-11 17:07:40 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2024-12-09 17:20:51 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇷🇴 abuse_IP_reporter	2024-12-09 13:00:37 (1 year ago)	ddosattackagainspublicwebpagewithrandomstrings	DDoS Attack
🇷🇴 abuse_IP_reporter	2024-12-09 13:00:37 (1 year ago)	ddosattackagainspublicwebpagewithrandomstrings	DDoS Attack
🇷🇴 abuse_IP_reporter	2024-12-09 13:00:37 (1 year ago)	ddosattackagainspublicwebpagewithrandomstrings	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2024-12-05 05:20:56 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.253.166.52

🇷🇺 176.120.22.113

🇨🇦 158.69.227.40

🇬🇧 35.203.211.57

🇨🇳 182.92.218.189

🇺🇸 107.150.101.106

🇮🇳 103.228.220.231

🇫🇷 91.231.89.69

🇮🇹 91.80.152.233

🇩🇪 81.199.26.42

🇩🇪 69.5.169.251

🇩🇪 69.5.169.128

🇷🇴 2.57.122.238

🇺🇸 2607:f8b0:4002:c11::123

🇺🇸 2602:fb54:1a00::8f

🇵🇭 202.124.193.221

🇳🇱 195.178.110.30

🇳🇱 185.156.73.197

🇺🇸 162.216.149.165

🇨🇳 119.249.100.244