JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.241.206.108

103.241.206.108 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 11%: ?

11%

ISP	Universitas Jember
Usage Type	University/College/School
ASN	AS132678
Domain Name	unej.ac.id
Country	🇮🇩 Indonesia
City	Jember, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.241.206.108

Whois 103.241.206.108

IP Abuse Reports for 103.241.206.108:

This IP address has been reported a total of 26 times from 8 distinct sources. 103.241.206.108 was first reported on March 1st 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 05:52:19 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 01:52:11.522322 2026] [security2:error] [pid 24253:tid 24253] [client 103.241.206.108:56762] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.241.206.108 (+1 hits since last alert)\|premierveterinarysurgery.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "premierveterinarysurgery.com"] [uri "/xmlrpc.php"] [unique_id "ak3liyA7Psd2el_945T6NQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 03:52:45 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 23:52:39.232554 2026] [security2:error] [pid 31722:tid 31722] [client 103.241.206.108:64741] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.241.206.108 (+1 hits since last alert)\|natickvillagerentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "natickvillagerentals.com"] [uri "/xmlrpc.php"] [unique_id "aksmh19fUziK2H6lNYyp8QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-06-11 04:53:08 (1 month ago)	(wordpress) Failed wordpress login from 103.241.206.108 (ID/Indonesia/-/-/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-05-29 07:22:43 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 03:22:39.493743 2026] [security2:error] [pid 8575:tid 8575] [client 103.241.206.108:62203] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.241.206.108 (+1 hits since last alert)\|investorsfundingusa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "investorsfundingusa.com"] [uri "/xmlrpc.php"] [unique_id "ahk-vy1I0hSjlJrQ1kQDZgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Paulo Henrique dos Santos Nichio	2026-05-12 04:29:11 (2 months ago)	(ls_brute) LiteSpeed Brute Force Attack 103.241.206.108 (ID/Indonesia/-): 3 in the last 600 secs; Po ... show more (ls_brute) LiteSpeed Brute Force Attack 103.241.206.108 (ID/Indonesia/-): 3 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-05-12 01:28:44.503015 [WARN] [3663422] [T0] [103.241.206.108:52663-20#APVH_www.teisolucoes.com.br:443] Brute force detected for IP [103.241.206.108], throttle. 2026-05-12 01:28:55.533880 [WARN] [3663422] [T0] [103.241.206.108:52663-21#APVH_www.teisolucoes.com.br:443] Brute force detected for IP [103.241.206.108], throttle. 2026-05-12 01:29:05.529042 [WARN] [3663422] [T0] [103.241.206.108:52663-22#APVH_www.teisolucoes.com.br:443] Brute force detected for IP [103.241.206.108], throttle. show less	Port Scan
🇺🇸 TPI-Abuse	2026-04-07 07:31:00 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 03:30:53.727012 2026] [security2:error] [pid 771525:tid 771525] [client 103.241.206.108:58588] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|abundancecompany.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abundancecompany.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adSyrc9kdSRvg76NCgOvewAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 01:27:38 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.241.206.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 21:27:32.899821 2026] [security2:error] [pid 10086:tid 10086] [client 103.241.206.108:54202] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|adona.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "adona.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acsjBI4BZkHbTSenrcO3MgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-27 07:06:03 (3 months ago)	Trying to access config files	Web App Attack
🇺🇸 octageeks.com	2026-03-11 04:14:39 (4 months ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇩🇪 KPS	2025-05-23 03:59:05 (1 year ago)	PortscanN	Port Scan
🇧🇷 diego	2024-05-08 14:52:15 (2 years ago)	[rede-164-29] 05/08/2024-11:52:14.388812, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound t ... show more [rede-164-29] 05/08/2024-11:52:14.388812, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇧🇷 diego	2024-05-06 04:30:39 (2 years ago)	[rede-164-29] 05/06/2024-01:30:38.779631, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound t ... show more [rede-164-29] 05/06/2024-01:30:38.779631, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇧🇷 diego	2024-05-04 06:55:28 (2 years ago)	[rede-164-29] 05/04/2024-03:55:28.222038, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound t ... show more [rede-164-29] 05/04/2024-03:55:28.222038, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
🇧🇷 diego	2024-05-04 05:24:16 (2 years ago)	[rede-164-29] 05/04/2024-02:24:15.988517, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound t ... show more [rede-164-29] 05/04/2024-02:24:15.988517, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇧🇷 diego	2024-03-26 05:34:41 (2 years ago)	[kvm3859] 03/26/2024-02:34:41.341124, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound to MS ... show more [kvm3859] 03/26/2024-02:34:41.341124, 103.241.206.108, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 177.245.235.166

🇸🇬 43.128.101.247

🇭🇰 199.45.154.185

🇺🇸 192.210.185.94

🇲🇽 187.188.26.188

🇧🇷 186.232.90.241

🇸🇳 154.125.70.252

🇸🇬 103.253.27.144

🇮🇳 103.248.87.56

🇮🇩 69.5.0.120

🇺🇸 65.49.1.152

🇳🇱 45.148.10.244

🇺🇸 44.9.115.116

🇨🇳 36.154.134.146

🇳🇱 20.71.254.235

🇻🇳 14.245.165.245

🇭🇰 8.210.89.241

🇬🇧 2.57.17.182

🇨🇳 221.10.42.66

🇩🇪 213.209.159.223