JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.228.246.67

103.228.246.67 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 0%: ?

ISP	PT Giga Patra Multimedia
Usage Type	Fixed Line ISP
ASN	AS59282
Domain Name	gpm.net.id
Country	🇮🇩 Indonesia
City	Sukadana, Lampung

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.228.246.67

Whois 103.228.246.67

IP Abuse Reports for 103.228.246.67:

This IP address has been reported a total of 7 times from 4 distinct sources. 103.228.246.67 was first reported on April 1st 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 157cd6d7-1140-4c75-95c6-4a267aae4754	DDoS Attack
🇷🇸 Scan	2026-05-06 02:27:17 (3 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 SMARTNET	2025-11-26 02:37:10 (8 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
🇮🇩 hermawan	2025-08-06 03:33:42 (1 year ago)	[Wed Aug 06 10:32:38.598293 2025] [security2:error] [pid 351725:tid 140318620993216] [client 103.228 ... show more [Wed Aug 06 10:32:38.598293 2025] [security2:error] [pid 351725:tid 140318620993216] [client 103.228.246.67:56786] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/137.0.7151.115 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 9; SM-J701 ... show less	Hacking Web App Attack
🇧🇷 Phillipe Cavalcante	2025-06-18 20:40:19 (1 year ago)	DoS Host Alert using Monitoring_UBB Misuse Types from All Sources: IP Fragmentation, Total Traffic, ... show more DoS Host Alert using Monitoring_UBB Misuse Types from All Sources: IP Fragmentation, Total Traffic, DNS, UDP, DNS Amplification, CLDAP Amplification show less	DNS Compromise DNS Poisoning DDoS Attack
🇮🇩 hermawan	2025-05-12 04:45:52 (1 year ago)	[Mon May 12 11:45:07.003032 2025] [security2:error] [pid 1687112:tid 139769797277376] [client 103.22 ... show more [Mon May 12 11:45:07.003032 2025] [security2:error] [pid 1687112:tid 139769797277376] [client 103.228.246.67:44058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "myactivity.google.com" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "439"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: myactivity.google.com found within REQUEST_HEADERS:Referer: https://myactivity.google.com/ request_line = GET /images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Prakiraan_Musim_Kemarau/Provinsi_Jawa_Timur/2025/Prediksi_Awal_Musim_Kemarau_Tahun_2025_Zona_Musim_di_Provinsi_Jawa_Timur.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Prakiraan_Musim_Kemarau/Provinsi_Jawa_Timur/2025/Prediksi_Awal_Musim_Kemarau_Tahun_2025_Zona_Musim_di_Provinsi_Jawa_Timur.jpg"] [unique_id "aCF80jSs_B5O6FxBPEZ ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-04-01 11:58:37 (1 year ago)	[Tue Apr 01 18:58:06.781806 2025] [security2:error] [pid 370191:tid 139975304595136] [client 103.228 ... show more [Tue Apr 01 18:58:06.781806 2025] [security2:error] [pid 370191:tid 139975304595136] [client 103.228.246.67:48138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2130"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/134.0.6998.135 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 12; CPH212 ... show less	Hacking Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 78.153.140.148

🇲🇽 186.96.158.180

🇺🇸 70.183.235.233

🇩🇪 69.5.169.24

🇿🇲 41.63.63.211

🇵🇪 200.37.103.36

🇧🇷 177.184.227.83

🇵🇰 119.157.76.235

🇳🇱 86.54.31.32

🇺🇸 23.30.11.253

🇧🇷 20.206.73.37

🇬🇧 217.146.80.104

🇧🇷 200.24.65.211

🇦🇷 138.121.83.107

🇺🇸 137.184.177.113

🇺🇸 129.82.138.44

🇸🇮 102.220.161.27

🇺🇸 69.73.187.130

🇬🇧 35.203.210.229

🇩🇪 213.209.159.148