JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.241.206.110

103.241.206.110 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 21%: ?

21%

ISP	Universitas Jember
Usage Type	University/College/School
ASN	AS132678
Domain Name	unej.ac.id
Country	🇮🇩 Indonesia
City	Jember, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.241.206.110

Whois 103.241.206.110

IP Abuse Reports for 103.241.206.110:

This IP address has been reported a total of 20 times from 8 distinct sources. 103.241.206.110 was first reported on January 30th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-22 07:47:26 (1 hour ago)	(mod_security) mod_security (id:240335) triggered by 103.241.206.110 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.241.206.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 03:47:22.413984 2026] [security2:error] [pid 25012:tid 25012] [client 103.241.206.110:62712] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.241.206.110 (+1 hits since last alert)\|fundingangelinvestors.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fundingangelinvestors.com"] [uri "/xmlrpc.php"] [unique_id "ajjoiumLZzX7xq6B1h2JPQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-22 03:37:42 (5 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 02:15:23 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.241.206.110 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.241.206.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 22:15:16.187357 2026] [security2:error] [pid 1964:tid 1964] [client 103.241.206.110:62850] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.241.206.110 (+1 hits since last alert)\|sharawi-gum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sharawi-gum.com"] [uri "/xmlrpc.php"] [unique_id "aitrtFw7y8I5qUX7JIy28AAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-10 01:24:47 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 abdubhai	2026-05-26 05:36:29 (3 weeks ago)	103.241.206.110 - - [26/May/2026 ...	Brute-Force
🇩🇪 konseptit	2026-04-13 08:02:03 (2 months ago)	(wordpress) Failed wordpress login from 103.241.206.110 (ID/Indonesia/-)	Brute-Force
🇮🇩 hermawan	2026-03-31 11:38:05 (2 months ago)	Captured JA4H: ge20c_1cb42ba1c906 \| Log: 103.241.206.110 - - [31/Mar/2026:18:37:46 +0700] "GET /inde ... show more Captured JA4H: ge20c_1cb42ba1c906 \| Log: 103.241.206.110 - - [31/Mar/2026:18:37:46 +0700] "GET /index.php/profil/meteorologi/list-of-all-tags/gempa-terkini HTTP/2.0" 200 30728 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/146.0.7680.151 Mobile/15E148 Safari/604.1" ge20c_accept,sec-fetch-site,priority,accept-encoding,sec-fetch-mode,accept-language,user-agent,referer,cookie,sec-fetch-dest,host... ... show less	Email Spam Hacking
🇮🇩 hermawan	2025-05-03 06:11:16 (1 year ago)	[Sat May 03 11:42:28.493192 2025] [security2:error] [pid 406732:tid 140328908494528] [client 103.241 ... show more [Sat May 03 11:42:28.493192 2025] [security2:error] [pid 406732:tid 140328908494528] [client 103.241.206.110:65400] ModSecurity: Access denied with code 403 (phase 2). Match of "rx [0-9]\\\\s\\\\'\\\\s[0-9]" against "MATCHED_VAR" required. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "1747"] [id "932240"] [msg "Remote Command Execution: Unix Command Injection evasion attempt detected"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: s1746247348$o1 found within MATCHED_VAR: GS2.1.s1746247348$o1$g0$t1746247348$j60$l0$h0 request_line = GET /apple-icon-167-167.png HTTP/2.0 Request URI RAW = /apple-icon-167-167.png Request Basename = apple-icon-167-167.png"] [severity "CRITICAL"] [ver "OWASP_CRS/4.13.0"] [tag "application-multi"] [tag "language-shell"] [tag "platform-unix"] [tag "attack-rce"] [tag "paranoia-level/2"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-RCE"] [tag "cape ... show less	Hacking Web App Attack
Anonymous	2024-12-12 14:16:25 (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇹🇷 rtbh.com.tr	2024-12-06 20:52:58 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-12-05 20:52:49 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇷 diego	2024-06-14 07:22:09 (2 years ago)	[rede-164-29] 06/14/2024-04:22:09.586445, 103.241.206.110, Protocol: 6, ET SCAN Suspicious inbound t ... show more [rede-164-29] 06/14/2024-04:22:09.586445, 103.241.206.110, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇧🇷 diego	2024-05-08 14:52:17 (2 years ago)	[rede-164-29] 05/08/2024-11:52:14.400050, 103.241.206.110, Protocol: 6, ET SCAN Suspicious inbound t ... show more [rede-164-29] 05/08/2024-11:52:14.400050, 103.241.206.110, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇧🇷 diego	2024-04-05 01:10:22 (2 years ago)	[rede-164-29] 04/04/2024-22:10:22.102715, 103.241.206.110, Protocol: 6, ET SCAN Suspicious inbound t ... show more [rede-164-29] 04/04/2024-22:10:22.102715, 103.241.206.110, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
🇧🇷 diego	2024-04-02 11:22:56 (2 years ago)	[rede-164-29] 04/02/2024-08:22:56.458378, 103.241.206.110, Protocol: 6, ET SCAN Suspicious inbound t ... show more [rede-164-29] 04/02/2024-08:22:56.458378, 103.241.206.110, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 160.119.76.85

🇩🇪 134.122.93.157

🇧🇪 35.187.164.116

🇮🇷 31.7.125.127

🇨🇳 183.184.54.160

🇺🇸 143.42.1.191

🇨🇳 124.223.79.152

🇨🇳 120.48.109.59

🇮🇳 103.196.29.240

🇵🇰 103.25.138.89

🇸🇦 94.97.85.162

🇫🇷 91.231.89.13

🇧🇪 35.195.73.222

🇺🇸 23.94.102.136

🇺🇸 2607:f8b0:4001:c32::124

🇰🇪 217.199.144.115

🇺🇸 209.141.41.175

🇫🇷 194.116.250.216

🇧🇷 190.115.84.25

🇷🇺 176.112.128.143