JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.247.23.107

103.247.23.107 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 20%: ?

20%

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS58485
Hostname(s)	ip-sub-23-107.wifian.id
Domain Name	apnic.net
Country	🇮🇩 Indonesia
City	Banjarnegara, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.247.23.107

Whois 103.247.23.107

IP Abuse Reports for 103.247.23.107:

This IP address has been reported a total of 12 times from 11 distinct sources. 103.247.23.107 was first reported on September 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-07 00:42:24 (2 weeks ago)	[Sun Jun 07 07:42:21.143472 2026] [security2:error] [pid 464917:tid 140593947666112] [client 103.247 ... show more [Sun Jun 07 07:42:21.143472 2026] [security2:error] [pid 464917:tid 140593947666112] [client 103.247.23.107:36913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/e-buletin-untuk-kota-dan-kabupaten-di-provinsi-jawa-timur"] [unique_id "aiS-bSk371PXgJtSFgfyJQACDBA"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[464946] [CkqjKh8iYbs] [aiS-bSk371PXgJtSFgfyJQACDBA] keep_alive=[1] [2026-06-07 07:42:21.143475] [R:aiS-bSk371PXgJtSFgfyJQACDBA] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 17_6 ... show less	Email Spam Hacking
🇺🇸 gu-alvareza	2026-06-04 07:05:47 (3 weeks ago)	JAWS.DVR.CCTV.Shell.Unauthenticated.Command.Execution	Hacking Web App Attack
🇧🇷 chronos	2026-06-04 04:48:31 (3 weeks ago)	Generic malicious activity: ALERT: External attempt to access critical TCP port... \| Port: 8080 \| Pr ... show more Generic malicious activity: ALERT: External attempt to access critical TCP port... \| Port: 8080 \| Proto: TCP \| Location: Indonesia, N/A show less	Port Scan Hacking
🇩🇪 milcraft.nl	2026-05-13 08:01:09 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
Anonymous	2026-02-26 05:39:38 (3 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp show less	Exploited Host Bad Web Bot
🇮🇩 hermawan	2026-02-20 11:19:32 (4 months ago)	[Fri Feb 20 18:19:31.348362 2026] [security2:error] [pid 16578:tid 140417315071680] [client 103.247. ... show more [Fri Feb 20 18:19:31.348362 2026] [security2:error] [pid 16578:tid 140417315071680] [client 103.247.23.107:41811] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/meteorologi/list-all-categories?catid=472&id=853%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-januari-2016 HTTP/2.0 Request URI RAW = /index.php/profil/meteorologi/list-all-categories?catid=472&id=853%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [u ... show less	Web App Attack Hacking
Anonymous	2026-02-18 08:05:05 (4 months ago)	Blocked: Reason='Possible SQL injection activity (7/60 min)'; Requests=7	SQL Injection
🇦🇺 MAGIC	2025-11-21 02:13:42 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-11-21 01:10:59 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-10-18 01:35:08 (8 months ago)	Failed login attempt detected by Fail2Ban in plesk-apache-badbot jail	Web App Attack
🇳🇱 exxos	2025-10-08 23:03:01 (8 months ago)	Attacks with Bad user agents	Hacking
🇷🇴 INTEQ	2025-09-21 22:45:08 (9 months ago)	Web attack from 103.247.23.107	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.56.45.212

🇨🇳 112.86.225.114

🇺🇸 104.243.38.235

🇭🇰 103.229.124.33

🇺🇸 91.230.168.20

🇩🇪 87.106.29.151

🇺🇸 66.146.234.127

🇳🇱 45.148.10.152

🇳🇱 45.148.10.147

🇺🇸 40.90.235.65

🇻🇳 27.79.40.38

🇺🇸 20.64.97.78

🇮🇹 2.239.100.17

🇵🇹 2.57.178.34

🇷🇴 2.57.121.112

🇬🇧 217.154.35.203

🇳🇱 185.93.89.167

🇳🇱 176.65.139.217

🇩🇪 151.243.11.37

🇨🇦 138.197.129.229