JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.247.229.42

103.247.229.42 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 27%: ?

27%

ISP	HGC Global Communications - International Network Internet Service Provider
Usage Type	Fixed Line ISP
ASN	AS137996
Hostname(s)	42-229-247-103-on-nets.com
Domain Name	hgc.com.hk
Country	🇵🇭 Philippines
City	Manila, National Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.247.229.42

Whois 103.247.229.42

IP Abuse Reports for 103.247.229.42:

This IP address has been reported a total of 41 times from 24 distinct sources. 103.247.229.42 was first reported on September 18th 2023, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-31 05:04:14 (16 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-28 15:05:29 (3 days ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇺🇸 kosada.com	2026-07-06 23:32:29 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-07-01 00:11:03 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇩 hermawan	2026-06-28 17:29:20 (1 month ago)	[Mon Jun 29 00:29:15.486114 2026] [security2:error] [pid 595633:tid 140331984082624] [client 103.247 ... show more [Mon Jun 29 00:29:15.486114 2026] [security2:error] [pid 595633:tid 140331984082624] [client 103.247.229.42:55252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "akFZ67MrzeJ6vfzATCozBgAAQQE"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[595635] [dfdHrpOF2KY] [akFZ67MrzeJ6vfzATCozBgAAQQE] keep_alive=[1] [2026-06-29 00:29:15.486119] [R:akFZ67MrzeJ6vfzATCozBgAAQQE] UA:'Mozilla/5.0 ( ... show less	Email Spam Hacking
🇩🇪 botreporter	2026-06-28 04:45:21 (1 month ago)	botnet ignoring robots.txt	Bad Web Bot
🇮🇩 hermawan	2026-06-27 20:37:42 (1 month ago)	[Sun Jun 28 03:37:41.212777 2026] [security2:error] [pid 316346:tid 139761787315904] [client 103.247 ... show more [Sun Jun 28 03:37:41.212777 2026] [security2:error] [pid 316346:tid 139761787315904] [client 103.247.229.42:52523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "akA0lRklfNq89VaYkWg20QAAiAQ"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[316351] [hbZSMsJcwuI] [akA0lRklfNq89VaYkWg20QAAiAQ] keep_alive=[1] ... show less	Email Spam Hacking
🇫🇷 Sklurk	2026-05-22 06:32:38 (2 months ago)	Web App Attack	Web App Attack
Anonymous	2026-04-29 12:19:16 (3 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇩🇪 london2038.com	2026-04-27 04:21:52 (3 months ago)	Malformed or malicious web request 103.247.229.42 - - [27/Apr/2026:06:21:50 +0200] "POST /signup/xml ... show more Malformed or malicious web request 103.247.229.42 - - [27/Apr/2026:06:21:50 +0200] "POST /signup/xmlrpc.php HTTP/1.1" 404 4187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 EGP Abuse Dept	2026-03-31 02:51:10 (4 months ago)	Scraping webshop URLs (www.badgehouder.nl), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 masterguru	2025-12-04 23:38:55 (7 months ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-169)	Hacking
🇺🇸 mind5t0rm	2025-12-02 06:23:06 (7 months ago)	(WPLOGIN) WP Login Attack 103.247.229.42 (PH/Philippines/-): 3 in the last 3600 secs; Ports: ; Dire ... show more (WPLOGIN) WP Login Attack 103.247.229.42 (PH/Philippines/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 103.247.229.42 - - [02/Dec/2025:13:21:46 +0700] "POST /wp-login.php HTTP/2.0" 200 2720 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 103.247.229.42 - - [02/Dec/2025:13:23:00 +0700] "POST /wp-login.php HTTP/2.0" 200 2707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 103.247.229.42 - - [02/Dec/2025:13:23:03 +0700] "POST /wp-login.php HTTP/2.0" 200 2770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Port Scan
🇩🇪 stinpriza	2025-12-01 04:18:16 (7 months ago)	Web App Attack	Web App Attack
Anonymous	2025-11-27 09:44:49 (8 months ago)	Ports: 20,21,25,2525,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095, ... show more Ports: 20,21,25,2525,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.196.152.187

🇰🇷 218.149.156.160

🇲🇾 183.171.7.171

🇮🇹 151.42.73.218

🇺🇸 71.6.134.230

🇺🇦 78.154.176.169

🇵🇾 45.235.123.11

🇨🇳 8.138.131.26

🇨🇴 181.49.8.57

🇰🇿 178.90.225.67

🇨🇴 176.57.207.99

🇨🇳 115.191.19.238

🇻🇳 103.176.20.115

🇫🇷 91.196.152.97

🇹🇷 88.229.220.77

🇲🇾 47.250.190.125

🇩🇪 2a01:4f8:121:4072::2

🇺🇸 216.25.89.91

🇺🇸 216.16.101.175

🇺🇸 109.105.210.62