JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.224.124.97

103.224.124.97 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	PT Curug Lintas Indonesia
Usage Type	Fixed Line ISP
ASN	AS150197
Hostname(s)	ip-97.124.curug.id
Domain Name	curug.id
Country	🇮🇩 Indonesia
City	Sawangan, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.224.124.97

Whois 103.224.124.97

IP Abuse Reports for 103.224.124.97:

This IP address has been reported a total of 12 times from 10 distinct sources. 103.224.124.97 was first reported on October 7th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 IP Analyzer	2026-01-31 19:00:20 (4 months ago)	Unauthorized connection attempt from IP address 103.224.124.97 on Port 445(SMB)	Port Scan
🇫🇷 sthoyer.de	2026-01-31 09:12:39 (4 months ago)	Jan 31 10:12:38 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jan 31 10:12:38 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.224.124.97 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=20761 DF PROTO=TCP SPT=51394 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-01-31 08:26:50 (4 months ago)	Jan 31 09:26:49 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jan 31 09:26:49 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.224.124.97 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=24222 DF PROTO=TCP SPT=51002 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 urnilxfgbez	2026-01-18 23:45:00 (4 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-01-17 17:08:05 (4 months ago)	Unauthorized connection to Telnet port 23	Port Scan
🇫🇷 Coco Bongo	2026-01-17 13:08:55 (4 months ago)	1768655334 - 01/17/2026 14:08:54 Host: 103.224.124.97/103.224.124.97 Port: 445 TCP Blocked ...	Port Scan
🇺🇸 RAP	2026-01-17 06:26:02 (4 months ago)	2026-01-17 06:26:02 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-01-13 12:54:11 (4 months ago)	2026-01-13 12:54:11 UTC Unauthorized activity to TCP port 445. SMB	Port Scan
🇫🇷 Kurom	2026-01-07 08:52:06 (4 months ago)	Port scanning detected on company server. Targeted ports: [445]	Port Scan Hacking
🇩🇪 guldkage	2026-01-07 03:10:40 (4 months ago)	Unauthorized connection attempt detected from IP address 103.224.124.97 to port 445 (ger-02) [SMB]	Exploited Host
🇪🇸 el-brujo	2025-12-23 05:10:00 (5 months ago)	DDoS Attack Layer 7	DDoS Attack
🇮🇩 hermawan	2025-10-07 13:29:25 (7 months ago)	[Tue Oct 07 20:28:26.116500 2025] [security2:error] [pid 634106:tid 140224226064064] [client 103.224 ... show more [Tue Oct 07 20:28:26.116500 2025] [security2:error] [pid 634106:tid 140224226064064] [client 103.224.124.97:55358] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Mobile/15E148 OcIdWebView ({\\x22os\\x22:\\x22iOS\\x22,\\x22osVersion\\x22:\\x2217.6.1\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like ... show less	Hacking Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.153

🇨🇴 190.24.58.209

🇮🇩 103.175.225.238

🇺🇸 52.54.249.218

🇺🇸 216.25.89.66

🇩🇪 213.209.159.11

🇬🇧 188.240.59.61

🇺🇸 167.172.133.85

🇨🇦 148.113.221.241

🇩🇪 64.188.56.47

🇺🇸 54.90.29.237

🇨🇳 27.155.120.135

🇺🇸 20.40.218.197

🇷🇴 2a0b:8800:580::6c

🇸🇬 139.99.38.177

🇫🇷 92.222.104.206

🇳🇱 45.148.10.152

🇸🇪 31.13.72.33

🇬🇧 194.50.235.155

🇲🇽 187.179.150.33