JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.203.232.110

103.203.232.110 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	PT Inti Data Guna
Usage Type	Fixed Line ISP
ASN	AS151600
Domain Name	intidataguna.id
Country	🇮🇩 Indonesia
City	Batu, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.203.232.110

Whois 103.203.232.110

IP Abuse Reports for 103.203.232.110:

This IP address has been reported a total of 10 times from 9 distinct sources. 103.203.232.110 was first reported on June 16th 2024, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2025-11-04 07:03:23 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-10-26 00:02:24 (7 months ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2025-10-17 03:55:29 (7 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit AI training data scraping to by ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit AI training data scraping to bypass robots.txt in thread-skip.asp show less	Bad Web Bot Exploited Host
🇮🇩 hermawan	2025-10-05 09:01:43 (8 months ago)	[Sun Oct 05 16:01:27.641370 2025] [security2:error] [pid 2002806:tid 140074462168768] [client 103.20 ... show more [Sun Oct 05 16:01:27.641370 2025] [security2:error] [pid 2002806:tid 140074462168768] [client 103.203.232.110:51578] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/140.0.7339.207 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 15; SM-A ... show less	Hacking Web App Attack
🇲🇾 syokadmin	2025-09-30 11:07:02 (8 months ago)	103.203.232.110 (ID/Indonesia/-), 2 distributed imapd attacks on account [azhar@insan-global-venture ... show more 103.203.232.110 (ID/Indonesia/-), 2 distributed imapd attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇳🇱 exxos	2025-09-03 01:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
Anonymous	2025-07-07 01:28:32 (10 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇮🇩 BPS-StatisticsIndonesia	2025-05-22 03:49:53 (1 year ago)	WP Login Scan Activities	Web App Attack
🇩🇪 botreporter	2025-05-17 02:37:37 (1 year ago)	botnet ignoring robots.txt	Bad Web Bot
🇮🇩 hermawan	2024-06-16 07:03:48 (1 year ago)	[Sun Jun 16 14:03:41.574746 2024] [security2:error] [pid 816329:tid 138688407275072] [client 103.203 ... show more [Sun Jun 16 14:03:41.574746 2024] [security2:error] [pid 816329:tid 138688407275072] [client 103.203.232.110:42206] [client 103.203.232.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "41"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: en-GB,en;q=0.9,id-ID;q=0.8,id;q=0.7,en-US;q=0.6,zh-CN;q=0.5,zh;q=0.4,ko;q=0.3 request_line = GET /TableFilter/system-v167.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/system-v167.css"] [unique_id "Zm6OTf2s7ggmcl6NFspdhwABSBg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[816354] [RybdcpSBjNQ] [Zm6OTf2s7ggmcl6NFspdhwABSBg] keep_alive=[1] [2024-06-16 14:03:41.574753] [R:Zm6OTf2s7ggmcl6NFspdhwABSBg] UA:'Mozilla/5.0 (Linux; Android 10; ... show less	Hacking Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 91.230.168.212

🇷🇺 171.22.133.48

🇨🇳 115.191.29.211

🇩🇪 81.199.26.22

🇭🇰 45.78.26.55

🇹🇷 37.221.79.155

🇺🇸 34.202.237.47

🇮🇩 2402:8780:1073:cfd8:b82e:dfd2:f301:150e

🇸🇬 188.166.215.16

🇺🇸 162.216.149.116

🇨🇳 120.84.212.60

🇸🇬 103.250.11.176

🇱🇹 81.30.98.142

🇺🇸 66.132.172.226

🇱🇹 62.60.130.234

🇺🇸 47.253.205.161

🇲🇾 47.250.43.101

🇱🇹 45.227.254.170

🇨🇳 27.37.227.254

🇨🇳 1.94.17.74