JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.203.232.84

103.203.232.84 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 9%: ?

ISP	PT Inti Data Guna
Usage Type	Fixed Line ISP
ASN	AS151600
Domain Name	intidataguna.id
Country	🇮🇩 Indonesia
City	Malang, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.203.232.84

Whois 103.203.232.84

IP Abuse Reports for 103.203.232.84:

This IP address has been reported a total of 27 times from 18 distinct sources. 103.203.232.84 was first reported on April 29th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61	DDoS Attack
🇮🇩 sockominfo	2026-05-07 22:00:40 (1 month ago)	Zimbra: Login failures from malicious IP: 103.203.232.84. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 103.203.232.84. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 71%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 matt	2026-03-02 21:21:41 (3 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇮🇹 VHosting	2026-02-24 10:34:17 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇳 liveaspankaj	2026-02-15 12:36:37 (4 months ago)	DDoS attack: 269 requests in 5m (GET / or repair.php).	DDoS Attack
🇺🇸 TPI-Abuse	2025-12-31 07:07:00 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 103.203.232.84 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.203.232.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 02:06:46.569929 2025] [security2:error] [pid 21335:tid 21335] [client 103.203.232.84:59700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.suntanner.net"] [uri "/wp-config.php."] [unique_id "aVTLhnKKlw41v6fYRAKsYgAAAAQ"], referer: https://www.suntanner.net/wp-config.php. show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Szymekk	2025-12-02 13:57:09 (6 months ago)	Fail2Ban: SSH brute force attempt [srv01]	Brute-Force SSH
🇧🇪 cmbplf	2025-11-26 06:10:14 (6 months ago)	883 limiting connections by zone (2h23m59s)	DDoS Attack
🇺🇸 SuperEvilLuke	2025-11-04 17:42:21 (7 months ago)	Malicious activity detected from 151600 IDNIC-INDANA-AS-ID PT Inti Data Guna towards host dash.embot ... show more Malicious activity detected from 151600 IDNIC-INDANA-AS-ID PT Inti Data Guna towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T17:42:21Z (1 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-11-02 12:52:09 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 RyoKN	2025-10-18 00:55:26 (7 months ago)	Blocked by UFW on s474 [46672/tcp] Source port: 8080 TTL: 56 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on s474 [46672/tcp] Source port: 8080 TTL: 56 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 RyoKN	2025-10-17 11:58:26 (7 months ago)	Blocked by UFW on s474 [60814/tcp] Source port: 8080 TTL: 56 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on s474 [60814/tcp] Source port: 8080 TTL: 56 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Tizian Maxime Weigt	2025-07-25 04:55:05 (10 months ago)	Incoming DDoS to port 443 (L7 HTTPS Flood) Detected	DDoS Attack
🇫🇷 ᴀʀᴛ	2025-07-21 20:35:27 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. ASN: 151600 (IDNIC-INDANA-AS-ID PT Inti Data Guna) Protoc ... show more Triggered Cloudflare WAF (l7ddos) from ID. ASN: 151600 (IDNIC-INDANA-AS-ID PT Inti Data Guna) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇩🇪 Tizian Maxime Weigt	2025-07-21 19:17:23 (10 months ago)	Incoming DDoS to port 443 (L7 HTTPS Flood) Detected	DDoS Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 2620:0:877:5100::42

🇳🇱 213.249.70.35

🇩🇪 142.93.98.202

🇨🇦 138.197.139.159

🇺🇸 113.192.60.8

🇫🇷 51.68.34.131

🇺🇸 205.169.39.137

🇺🇸 143.42.164.34

🇮🇳 139.59.59.165

🇨🇳 123.163.114.12

🇮🇳 115.124.124.163

🇩🇪 64.227.119.36

🇨🇳 36.139.173.163

🇬🇧 35.203.211.81

🇺🇸 34.193.119.44

🇵🇰 14.1.104.56

🇺🇸 195.184.76.176

🇿🇦 102.64.42.166

🇷🇺 83.220.248.206

🇷🇴 80.94.92.165