JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.203.232.104

103.203.232.104 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 0%: ?

ISP	PT Inti Data Guna
Usage Type	Fixed Line ISP
ASN	AS151600
Domain Name	intidataguna.id
Country	🇮🇩 Indonesia
City	Batu, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.203.232.104

Whois 103.203.232.104

IP Abuse Reports for 103.203.232.104:

This IP address has been reported a total of 5 times from 4 distinct sources. 103.203.232.104 was first reported on June 15th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2025-10-11 08:28:25 (8 months ago)	[Sat Oct 11 15:28:08.603163 2025] [security2:error] [pid 2171282:tid 139973400438464] [client 103.20 ... show more [Sat Oct 11 15:28:08.603163 2025] [security2:error] [pid 2171282:tid 139973400438464] [client 103.203.232.104:44225] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=475&id=988%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-10-16-mei-2016&start=10 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=475&id=988%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-10-16-mei-2016&start=10 Request Bas..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOoVGAdsF4 ... show less	Hacking Web App Attack
🇨🇭 backslash	2025-08-10 05:03:04 (10 months ago)		Bad Web Bot
🇬🇧 SuperEvilLuke	2025-08-05 18:57:04 (10 months ago)	Malicious activity detected from 151600 IDNIC-INDANA-AS-ID PT Inti Data Guna towards host panel.embo ... show more Malicious activity detected from 151600 IDNIC-INDANA-AS-ID PT Inti Data Guna towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T18:57:04Z (2 occurrences) show less	DDoS Attack Exploited Host
🇮🇩 hermawan	2025-07-01 00:34:44 (11 months ago)	[Tue Jul 01 07:34:12.450921 2025] [security2:error] [pid 187790:tid 139943419528896] [client 103.203 ... show more [Tue Jul 01 07:34:12.450921 2025] [security2:error] [pid 187790:tid 139943419528896] [client 103.203.232.104:49924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "themes" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "68"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: themes found within REQUEST_FILENAME: /TableFilter/TF_Themes/Default/TF_Default.css request_line = GET /TableFilter/TF_Themes/Default/TF_Default.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/TF_Themes/Default/TF_Default.css"] [unique_id "aGMtBNODMXby1cBlktHbAgABAgs"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[187802] [EVmfTZPRD2c] [aGMtBNODMXby1cBlktHbAgABAgs] keep_alive=[1] [2025-07-01 07:34:12.450924] [R:aGMtBNODMXby1cBlktHbAgABAgs] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Mob ... show less	Hacking Web App Attack
🇺🇸 uira.live	2025-06-15 16:45:52 (1 year ago)	Malicious activity detected from 151600 IDNIC-INDANA-AS-ID PT Inti Data Guna towards host uira.live ... show more Malicious activity detected from 151600 IDNIC-INDANA-AS-ID PT Inti Data Guna towards host uira.live (GET HTTP/2) @ 2025-06-15T16:45:52Z (5 occurrences) show less	DDoS Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 212.102.40.218

🇫🇮 185.148.3.161

🇨🇦 178.93.201.239

🇭🇰 172.81.104.72

🇻🇳 125.212.244.35

🇨🇳 111.26.95.254

🇺🇸 66.132.172.228

🇸🇬 43.128.113.103

🇻🇳 14.225.206.187

🇺🇸 2607:f8b0:4001:c00::124

🇩🇪 167.94.146.32

🇫🇷 141.94.170.164

🇨🇳 118.178.187.12

🇺🇿 87.192.224.131

🇷🇴 80.94.92.177

🇺🇸 45.55.94.179

🇬🇧 35.203.211.50

🇺🇸 20.106.32.192

🇺🇸 3.21.126.89

🇨🇳 220.189.196.134