JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.27.229.42

Neutral Activity

Abuse confidence score ?

0% Low Risk

51 reports

20 reporters · latest 1 year ago

ISP	Wire 2 Wire, LLC
Usage Type	Unknown
ASN	Unknown
Domain Name	wire2wire.net
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.27.229.42 has been reported 51 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.27.229.42

This IP address has been reported a total of 51 times from 20 distinct sources. 103.27.229.42 was first reported on November 8th 2022, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2024-10-25 08:55:06 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇮🇩 BPS-StatisticsIndonesia	2024-10-19 19:48:58 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇮🇩 Burayot	2024-10-19 18:41:57 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.27.229.42 (ID/Indonesia/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.27.229.42 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2024-10-18 12:06:45 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2024-10-16 12:37:40 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇮🇩 Burayot	2024-10-16 06:56:06 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.27.229.42 (ID/Indonesia/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.27.229.42 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2024-10-16 01:32:25 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.27.229.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 103.27.229.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 21:32:19.975259 2024] [security2:error] [pid 2186:tid 2209] [client 103.27.229.42:61234] [client 103.27.229.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dcsindo.dcs.co.id"] [uri "/wp-config.php"] [unique_id "Zw8Xoy2PyHYDv1rm4sDQRgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2024-10-15 22:35:06 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.27.229.42 (ID/Indonesia/-): 1 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.27.229.42 (ID/Indonesia/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 _ArminS_	2024-09-22 01:35:24 (2 years ago)	WEB-Scan 45489:80 detected 2024.09.22 03:35:24 blocked until 2024.11.10 19:38:11	Port Scan
🇩🇪 Sandro	2023-01-22 03:57:00 (3 years ago)	[2023-01-22 03:56:59] NOTICE[1967978] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:2 ... show more [2023-01-22 03:56:59] NOTICE[1967978] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.42:50919' (callid: e5f4a342555835e4f7a200) - No matching endpoint found [2023-01-22 03:56:59] SECURITY[1075298] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-01-22T03:56:59.736+0000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="2100",SessionID="e5f4a342555835e4f7a200",LocalAddress="IPV4/UDP/94.130.148.43/5060",RemoteAddress="IPV4/UDP/103.27.229.42/50919" [2023-01-22 03:56:59] SECURITY[1075298] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-01-22T03:56:59.736+0000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="2100",SessionID="e5f4a342555835e4f7a200",LocalAddress="IPV4/UDP/94.130.148.43/5060",RemoteAddress="IPV4/UDP/103.27.229.42/50919" [2023-01-22 03:57:00] NOTICE[1961266] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.22 ... show less	Brute-Force
🇵🇱 6GNet.pl	2023-01-22 03:51:52 (3 years ago)	[2023-01-22 04:12:43] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2023-01-22 04:12:43] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-01-22T04:12:43.414+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="1107",SessionID="0x7fb49d8081d0",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/103.27.229.42/50970",Challenge="3f2eaef9",ReceivedChallenge="3f2eaef9",ReceivedHash="0b32606a598394f1a70c7d9c15979241" [2023-01-22 04:27:53] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-01-22T04:27:53.149+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="1108",SessionID="0x7fb49c338e40",LocalAddress="IPV4/UDP/64.18.129.55/5060",RemoteAddress="IPV4/UDP/103.27.229.42/52672",Challenge="0adfa0c1",ReceivedChallenge="0adfa0c1",ReceivedHash="269ed9e865ff2f8c02775b4697cf17cf" [2023-01-22 04:39:48] SECURITY[6702] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2023-01-22T04:39:48.299+0100",Severity="Error",Service="SIP",EventVersion="2",AccountID="110 ... show less	Fraud VoIP Brute-Force
🇩🇪 Sandro	2023-01-22 03:33:05 (3 years ago)	[2023-01-22 03:21:06] NOTICE[1967978] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:1 ... show more [2023-01-22 03:21:06] NOTICE[1967978] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.42:49703' (callid: e5f4a800105208e4f7a07) - No matching endpoint found [2023-01-22 03:21:06] SECURITY[1075298] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-01-22T03:21:06.693+0000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="1107",SessionID="e5f4a800105208e4f7a07",LocalAddress="IPV4/UDP/94.130.148.43/5060",RemoteAddress="IPV4/UDP/103.27.229.42/49703" [2023-01-22 03:32:58] NOTICE[1961266] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.42:57647' (callid: e5f4a128936368e4f7a08) - No matching endpoint found [2023-01-22 03:32:58] SECURITY[1075298] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-01-22T03:32:58.876+0000",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="1108",SessionID="e5f4a128936368e4f7a08",LocalAddress="IPV4 ... show less	Brute-Force
🇺🇸 Aidar Kamalov	2023-01-22 03:32:21 (3 years ago)	Jan 22 03:11:58 sanjose-sip-ulap-net /usr/sbin/kamailio[1014920]: NOTICE: {REGISTER 1 1 REGISTER e5f ... show more Jan 22 03:11:58 sanjose-sip-ulap-net /usr/sbin/kamailio[1014920]: NOTICE: {REGISTER 1 1 REGISTER e5f4a621751581e4f7a06} <script>: AUTH: REGISTER FAILED from 103.27.229.42 (code: -5) fd=155.248.209.56, adu=<null>, aa=<null>, ar=<null>, au=<null>, ad=<null>, aU=<null>, [email protected] Jan 22 03:11:59 sanjose-sip-ulap-net /usr/sbin/kamailio[1014925]: NOTICE: {REGISTER 1 2 REGISTER e5f4a621751581e4f7a06} <script>: AUTH: REGISTER FAILED from 103.27.229.42 (code: -3) fd=155.248.209.56, adu=sip:155.248.209.56:5060, aa=MD5, ar=155.248.209.56, au=1106, ad=, aU=1106, [email protected] Jan 22 03:11:59 sanjose-sip-ulap-net /usr/sbin/kamailio[1014919]: NOTICE: {REGISTER 1 3 REGISTER e5f4a621751581e4f7a06} <script>: AUTH: REGISTER FAILED from 103.27.229.42 (code: -3) fd=155.248.209.56, adu=sip:155.248.209.56:5060, aa=MD5, ar=155.248.209.56, au=1106, ad=, aU=1106, [email protected] Jan 22 03:20:10 sanjose-sip-ulap-net /usr/sbin/kamailio[1014925]: NOTICE: {REGISTER 1 1 REGISTER e5f4a7 ... show less	Fraud VoIP
🇺🇸 kuj	2023-01-22 03:25:47 (3 years ago)	VoIP Brute Force Attack	Fraud VoIP Brute-Force
🇨🇭 Inaxas AG	2023-01-22 03:24:18 (3 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitim ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Ilegitimate register attempt: 2 times between: 22/01/2023 - 04:12 and 22/01/2023 - 04:24. Unauthorized dial attempt: 1 times between: 22/01/2023 - 04:13 and 22/01/2023 - 04:13. show less	Fraud VoIP Port Scan Brute-Force

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.50.63.158

🇧🇷 168.205.190.245

🇨🇳 222.88.208.168

🇰🇷 220.80.223.144

🇸🇬 128.199.117.212

🇨🇳 122.224.164.194

🇸🇬 104.28.163.28

🇭🇰 101.36.108.175

🇨🇦 85.217.149.52

🇧🇪 34.140.3.155

🇹🇭 203.154.158.195

🇻🇳 171.244.141.86

🇩🇪 108.61.190.5

🇮🇩 103.31.250.251

🇺🇸 74.208.58.23

🇺🇸 51.8.82.82

🇺🇸 47.251.117.187

🇺🇸 35.225.33.58

🇺🇸 3.208.156.9

🇺🇸 195.184.76.213