JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.235.74.79

Recent Activity

Abuse Confidence Score

100% Critical

64 reports

42 reporters · latest 29 minutes ago

ISP: PT Ikubaru Indonesia
Usage Type: Data Center/Web Hosting/Transit
ASN: AS135444
Domain Name: ikubaru.co.id
Country: 🇮🇩 Indonesia
City: Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

64 from 42 distinct reporters

First reported

October 11th 2026

Most recent report

29 minutes ago

Last 60 days

Top reporter locations 🇫🇷 France 12 🇬🇧 United Kingdom of Great Britain and Northern Ireland 12 🇺🇸 United States of America 8

Most common categories Web App Attack 48 Hacking 17 Brute-Force 15 Bad Web Bot 11 DDoS Attack 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 kie	2026-11-15 02:56:11 UTC · (29 minutes ago)	15-11-2026:02:55:43UTC [Nginx Web Server] Suspicious web request: path:/wp-login (1 request(s)).	Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-11-14 21:23:57 UTC · (6 hours ago)	cloudlinux2 fail2ban: 2026-11-14 22:18:44,863 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 136.144.19.132 - 2026-11-14 22:18:44cloudlinux2 fail2ban: 2026-11-14 22:18:45,266 fail2ban.filter [1443]: INFO [recidive] Found 1 ... show more cloudlinux2 fail2ban: 2026-11-14 22:18:44,863 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 136.144.19.132 - 2026-11-14 22:18:44cloudlinux2 fail2ban: 2026-11-14 22:18:45,266 fail2ban.filter [1443]: INFO [recidive] Found 136.144.19.132 - 2026-11-14 22:18:45cloudlinux2 fail2ban: 2026-11-14 22:18:45,260 fail2ban.actions [1443]: NOTICE [plesk-wordpress] Ban 136.144.19.132cloudlinux2 fail2ban: 2026-11-14 22:18:44,252 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 193.36.224.79 - 2026-11-14 22:18:43cloudlinux2 fail2ban: 2026-11-14 22:18:55,282 fail2ban.actions [1443]: NOTICE [plesk-wordpress] Unban 193.36.224.203cloudlinux2 fail2ban: 2026-11-14 22:19:11,871 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 123.149.86.187 - 2026-11-14 22:19:11cloudlinux2 fail2ban: 2026-11-14 22:19:45,710 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 136.144.19.135 - 2026-11-14 22:19:44cloudlinux2 fail2ban: 2026-11-14 22:19:44,666 fail2ban show less	Web App Attack
🇬🇧 consul.to	2026-11-14 19:22:43 UTC · (8 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇹🇷 Jova	2026-11-14 17:31:43 UTC · (9 hours ago)	Web server path scanning: 15 nonexistent paths requested within a minute.	Web App Attack
🇺🇸 webmaster-bancariosdf	2026-11-14 13:20:02 UTC · (14 hours ago)	Web scanner: 5 requests for sensitive files (/administrator/index.php, /administrator/). Blocked by firewall.	Web App Attack Hacking
🇬🇧 consul.to	2026-11-02 18:21:21 UTC · (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇪🇸 elcruzado.es	2026-11-01 18:15:27 UTC · (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 103.235.74.79 (ID/Indonesia/103-235-74-79.indovm.com)	SQL Injection
🇪🇸 Francisco Vallejo	2026-11-01 16:25:50 UTC · (1 week ago)	[Sun Nov 01 17:25:45.662862 2026] [core:info] [pid 1800976:tid 1800998] [client 103.235.74.79:58495] AH00128: File does not exist: /var/www/menu_barluna/wp-login.php [Sun Nov 01 17:25:46.175531 2026] [core:info] [pid 1800976:tid 1800985] [client 103. ... show more [Sun Nov 01 17:25:45.662862 2026] [core:info] [pid 1800976:tid 1800998] [client 103.235.74.79:58495] AH00128: File does not exist: /var/www/menu_barluna/wp-login.php [Sun Nov 01 17:25:46.175531 2026] [core:info] [pid 1800976:tid 1800985] [client 103.235.74.79:58495] AH00128: File does not exist: /var/www/menu_barluna/administrator/index.php [Sun Nov 01 17:25:47.436069 2026] [core:info] [pid 1800976:tid 1800981] [client 103.235.74.79:58495] AH00128: File does not exist: /var/www/menu_barluna/user/login [Sun Nov 01 17:25:50.015941 2026] [core:info] [pid 1800976:tid 1800996] [client 103.235.74.79:58495] AH00128: File does not exist: /var/www/menu_barluna/index.php/admin/ [Sun Nov 01 17:25:50.635653 2026] [core:info] [pid 1800976:tid 1800991] [client 103.235.74.79:58495] AH00128: File does not exist: /var/www/menu_barluna/admin/index.php ... show less	Brute-Force SSH
🇬🇧 consul.to	2026-11-01 06:08:29 UTC · (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-11-01 04:48:35 UTC · (1 week ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
🇳🇱 Site.eu	2026-10-31 22:40:36 UTC · (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-10-31 21:16:16 UTC · (2 weeks ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .d ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-201) show less	Hacking
🇫🇷 masterguru	2026-10-31 20:07:24 UTC · (2 weeks ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .d ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193) show less	Hacking
🇩🇪 Bedios GmbH	2026-10-31 07:40:23 UTC · (2 weeks ago)	Scanning for WordPress Installations and Vulnerabilities	Web App Attack
🇪🇸 Gem	2026-10-30 23:11:41 UTC · (2 weeks ago)	Unauthorized web scan.	Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 198.23.136.27

🇲🇩 143.246.221.209

🇨🇳 111.61.229.78

🇵🇱 45.138.12.179

🇺🇸 24.1.196.232

🇧🇪 198.235.24.195

🇬🇧 195.140.214.19

🇳🇱 185.226.197.37

🇵🇰 182.189.136.61

🇺🇸 172.234.25.187

🇧🇷 170.0.143.92

🇵🇱 162.158.103.209

🇺🇸 147.185.132.24

🇺🇸 104.164.173.124

🇩🇪 104.28.159.213

🇸🇬 94.231.206.132

🇮🇩 43.133.145.83

🇬🇧 35.203.210.119

🇺🇸 2601:280:4a01:fee0::7ad8

🇧🇷 179.238.21.253