JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.247.15.107

103.247.15.107 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 0%: ?

ISP	PT SELARAS CITRA TERABIT
Usage Type	Fixed Line ISP
ASN	AS131706
Hostname(s)	ip-107-15-247.terabit.net.id
Domain Name	terabit.net.id
Country	🇮🇩 Indonesia
City	Yogyakarta, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.247.15.107

Whois 103.247.15.107

IP Abuse Reports for 103.247.15.107:

This IP address has been reported a total of 65 times from 6 distinct sources. 103.247.15.107 was first reported on January 22nd 2026, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 fazar	2026-02-23 06:36:22 (6 months ago)	crowdsecurity/http-crawl-non_statics on node: bdj03	Web App Attack Bad Web Bot
🇮🇩 sockominfo	2026-02-22 05:01:13 (6 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-21 18:02:16 (6 months ago)	[WAZUH] Access to sensitive files detected w/ specific boundary.	Hacking Web App Attack
🇮🇩 fazar	2026-02-21 06:52:21 (6 months ago)	crowdsecurity/http-sensitive-files on node: bdj03	Web App Attack Hacking
🇮🇩 fazar	2026-02-19 17:30:30 (6 months ago)	crowdsecurity/http-crawl-non_statics on node: bdj03	Web App Attack Bad Web Bot
🇮🇩 raxo	2026-02-19 14:43:00 (6 months ago)	SYN Scan	Port Scan Exploited Host Web App Attack Hacking
🇮🇩 fazar	2026-02-16 15:41:34 (6 months ago)	crowdsecurity/http-crawl-non_statics on node: bdj03	Bad Web Bot Web App Attack
🇮🇩 fazar	2026-02-14 12:30:13 (6 months ago)	crowdsecurity/http-crawl-non_statics on node: bdj03	Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-02-13 14:49:02 (6 months ago)	[Fri Feb 13 21:48:32.180505 2026] [security2:error] [pid 71704:tid 139877974775488] [client 103.247. ... show more [Fri Feb 13 21:48:32.180505 2026] [security2:error] [pid 71704:tid 139877974775488] [client 103.247.15.107:39350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "settings.php" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "88"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: settings.php found within REQUEST_FILENAME: /settings.php.bak request_line = GET /settings.php.bak HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/settings.php.bak"] [unique_id "aY85wLgPo7qOCt_0Kf5mNAAAAJE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[71787] [JA/0srVEETU] [aY85wLgPo7qOCt_0Kf5mNAAAAJE] keep_alive=[0] [2026-02-13 21:48:32.180509] [R:aY85wLgPo7qOCt_0Kf5mNAAAAJE] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.0) Gecko/20100101 Firefox/104.0' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accept-Encoding:'gzip Accept-Language:'en ... show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-13 08:00:10 (6 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Email Spam Hacking
🇮🇩 sockominfo	2026-02-13 07:00:06 (6 months ago)	Webshell discovery success (Response: 200), Potential webshell scan access detected - Suspicious fil ... show more Webshell discovery success (Response: 200), Potential webshell scan access detected - Suspicious filename pattern, Suspicious URL access.. Threat Score: 8.4/10 (CRITICAL). CVSS: 7/10 (High). Bayesian: 98%. MITRE: T1566. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Email Spam Hacking
🇮🇩 sockominfo	2026-02-13 06:09:36 (6 months ago)	[WAZUH] Webshell discovery success (Response: 200)	Hacking Web App Attack
🇮🇩 fazar	2026-02-12 14:15:33 (6 months ago)	crowdsecurity/http-crawl-non_statics on node: bdj03	Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-02-10 15:00:11 (6 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Email Spam Hacking
🇮🇩 hermawan	2026-02-10 08:14:31 (6 months ago)	[Tue Feb 10 15:14:31.177952 2026] [security2:error] [pid 51752:tid 140000893068992] [client 103.247. ... show more [Tue Feb 10 15:14:31.177952 2026] [security2:error] [pid 51752:tid 140000893068992] [client 103.247.15.107:50122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "settings.php" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "88"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: settings.php found within REQUEST_FILENAME: /settings.php.bak request_line = GET /settings.php.bak HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/settings.php.bak"] [unique_id "aYro59AEX3oIvX1LMoWqnwAAAAg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[51814] [7fxQ2LMhwbw] [aYro59AEX3oIvX1LMoWqnwAAAAg] keep_alive=[0] [2026-02-10 15:14:31.177957] [R:aYro59AEX3oIvX1LMoWqnwAAAAg] UA:'Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accept-Encoding:'g ... show less	Hacking Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 78.128.113.22

🇪🇨 38.51.35.179

🇬🇧 217.146.80.123

🇦🇷 200.123.52.174

🇳🇱 193.47.62.69

🇵🇱 176.53.159.197

🇨🇳 171.114.231.40

🇦🇷 138.59.142.185

🇺🇸 103.216.1.129

🇸🇬 47.79.1.129

🇺🇸 45.63.4.69

🇺🇸 20.118.217.181

🇸🇬 8.222.181.172

🇱🇹 213.176.26.194

🇧🇷 205.210.31.152

🇧🇪 198.235.24.251

🇷🇼 196.216.81.126

🇧🇬 193.161.135.76

🇭🇰 156.231.111.50

🇮🇳 122.170.96.105