JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.27.229.63

103.27.229.63 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	Wire 2 Wire, LLC
Usage Type	Unknown
ASN	Unknown
Domain Name	wire2wire.net
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.27.229.63

Whois 103.27.229.63

IP Abuse Reports for 103.27.229.63:

This IP address has been reported a total of 45 times from 20 distinct sources. 103.27.229.63 was first reported on September 29th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2025-06-10 11:58:59 (1 year ago)	[Tue Jun 10 18:58:01.007132 2025] [security2:error] [pid 3819:tid 140090851329728] [client 103.27.22 ... show more [Tue Jun 10 18:58:01.007132 2025] [security2:error] [pid 3819:tid 140090851329728] [client 103.27.229.63:52605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "backup" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "52"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: backup found within REQUEST_FILENAME: /backupstaklim-jatim.zip request_line = GET /backupstaklim-jatim.zip HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/backupstaklim-jatim.zip"] [unique_id "aEgdyWUD-zbRO3JWbGJ7IQAAAIQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3856] [PvxuZ65J8dg] [aEgdyWUD-zbRO3JWbGJ7IQAAAIQ] keep_alive=[50] [2025-06-10 18:58:01.007135] [R:aEgdyWUD-zbRO3JWbGJ7IQAAAIQ] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3' Host:'staklim-jatim.bmkg.go.id' Accept-Encodin ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-06-10 11:40:54 (1 year ago)	[Tue Jun 10 18:39:57.893718 2025] [security2:error] [pid 3583:tid 140131285591744] [client 103.27.22 ... show more [Tue Jun 10 18:39:57.893718 2025] [security2:error] [pid 3583:tid 140131285591744] [client 103.27.229.63:58646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "backup" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "52"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: backup found within REQUEST_FILENAME: /backup_staklim-jatim.zip request_line = GET /backup_staklim-jatim.zip HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/backup_staklim-jatim.zip"] [unique_id "aEgZjV_6hNQWeyTAqiuW3gAAAEI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3703] [MqDhJ25cF0Y] [aEgZjV_6hNQWeyTAqiuW3gAAAEI] keep_alive=[1] [2025-06-10 18:39:57.893721] [R:aEgZjV_6hNQWeyTAqiuW3gAAAEI] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_1 like Mac OS X) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.0 Mobile/14E304 Safari/602.1' Host:'staklim-jatim.b ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-06-10 09:40:12 (1 year ago)	[Tue Jun 10 16:39:27.092181 2025] [security2:error] [pid 247389:tid 139651222316736] [client 103.27. ... show more [Tue Jun 10 16:39:27.092181 2025] [security2:error] [pid 247389:tid 139651222316736] [client 103.27.229.63:63554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "backup" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "52"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: backup found within REQUEST_FILENAME: /staklim-jatim_backup.zip request_line = GET /staklim-jatim_backup.zip HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/staklim-jatim_backup.zip"] [unique_id "aEf9TxKs5ar7dXoTUMs-0wAAANo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[247447] [C+OheGwe/Yo] [aEf9TxKs5ar7dXoTUMs-0wAAANo] keep_alive=[15] [2025-06-10 16:39:27.092186] [R:aEf9TxKs5ar7dXoTUMs-0wAAANo] UA:'Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' Accept- ... show less	Hacking Web App Attack
🇮🇩 Burayot	2025-04-26 13:03:36 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.27.229.63 (ID/Indonesia/-): 2 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.27.229.63 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇪🇸 www.rentelwifi.com	2023-02-14 23:11:28 (3 years ago)	VoIP Brute Force Attack	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2023-02-14 23:11:18 (3 years ago)	[2023-02-15 00:01:23] NOTICE[27239] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:878 ... show more [2023-02-15 00:01:23] NOTICE[27239] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:64146' (callid: e5f4a193175495e4f7a878) - Failed to authenticate [2023-02-15 00:01:23] SECURITY[18641] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2023-02-15T00:01:23.224+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="e5f4a193175495e4f7a878",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/103.27.229.63/64146",Challenge="1676415682/065eee78b3e2685ba51cb72f956facd7",Response="2a910748f9b777f51032bb91c63aa776",ExpectedResponse="" [2023-02-15 00:03:16] NOTICE[27239] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:64930' (callid: e5f4a59840941e4f7a878) - Failed to authenticate [2023-02-15 00:03:16] SECURITY[18641] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2023-02-15T00:03:16.181+0100",Severity="Error" show less	Fraud VoIP Brute-Force
🇦🇹 FightAgainstAssholes!	2023-02-14 22:47:34 (3 years ago)	Bruteforce on SIP UDP 5060	Brute-Force
🇺🇸 kuj	2023-02-14 22:47:29 (3 years ago)	VoIP Brute Force Attack	Fraud VoIP Brute-Force
🇨🇭 Inaxas AG	2023-02-14 22:46:53 (3 years ago)	Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Unauthor ... show more Inaxas Security for Asterisk banned IP after port scan/brute force register on Port 5060. Unauthorized dial attempt: 2 times between: 07/02/2023 - 16:27 and 14/02/2023 - 23:46. Ilegitimate register attempt: 2 times between: 14/02/2023 - 23:45 and 14/02/2023 - 23:46. show less	Fraud VoIP Port Scan Brute-Force
🇷🇺 webserfer	2023-02-14 22:44:36 (3 years ago)	[f2b] asterisk scan/brute [W1:2:90d]	Fraud VoIP Brute-Force
🇺🇸 Teknikal_Domain	2023-02-14 22:42:29 (3 years ago)	[Feb 14 17:42:27] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:875@7 ... show more [Feb 14 17:42:27] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:56351' (callid: e5f4a603573328e4f7a875) - No matching endpoint found [Feb 14 17:42:27] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:56351' (callid: e5f4a603573328e4f7a875) - No matching endpoint found [Feb 14 17:42:27] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:56351' (callid: e5f4a603573328e4f7a875) - Failed to authenticate [Feb 14 17:42:28] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:56351' (callid: e5f4a603573328e4f7a875) - No matching endpoint found [Feb 14 17:42:28] NOTICE[1655104] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:56351' (callid: e5f4a6035733 ... show less	Fraud VoIP Brute-Force
🇫🇷 0xNath	2023-02-14 22:42:16 (3 years ago)	[Feb 14 23:40:16] SECURITY[4457] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023- ... show more [Feb 14 23:40:16] SECURITY[4457] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-02-14T23:40:16.578+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="875",SessionID="e5f4a881307186e4f7a875",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/103.27.229.63/56442" [Feb 14 23:42:15] SECURITY[4457] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-02-14T23:42:15.030+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="875",SessionID="e5f4a890575499e4f7a875",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/103.27.229.63/62392" [Feb 14 23:42:15] SECURITY[4457] res_security_log.c: SecurityEvent="InvalidAccountID",EventTV="2023-02-14T23:42:15.738+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="875",SessionID="e5f4a890575499e4f7a875",LocalAddress="IPV4/UDP/192.168.1.253/5060",RemoteAddress="IPV4/UDP/103.27.229.63/62392" ... show less	Fraud VoIP Brute-Force
🇫🇮 MindSolve	2023-02-14 22:41:25 (3 years ago)	2023-02-14 23:41:25.168804 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile ... show more 2023-02-14 23:41:25.168804 [WARNING] sofia_reg.c:1798 SIP auth challenge (REGISTER) on sofia profile 'internal' for [[email protected]] from ip 103.27.229.63 show less	Fraud VoIP Hacking Brute-Force
🇺🇸 Teknikal_Domain	2023-02-07 15:25:09 (3 years ago)	[Feb 7 10:25:07] NOTICE[13638] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:101@72. ... show more [Feb 7 10:25:07] NOTICE[13638] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:50323' (callid: e5f4a447233521e4f7a0) - No matching endpoint found [Feb 7 10:25:08] NOTICE[2298177] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:50323' (callid: e5f4a447233521e4f7a0) - No matching endpoint found [Feb 7 10:25:08] NOTICE[2298177] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:50323' (callid: e5f4a447233521e4f7a0) - Failed to authenticate [Feb 7 10:25:09] NOTICE[13638] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:50323' (callid: e5f4a447233521e4f7a0) - No matching endpoint found [Feb 7 10:25:09] NOTICE[13638] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:50323' (callid: e5f4a447233521e4f7a0) - Fa ... show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2022-11-19 03:39:30 (3 years ago)	[2022-11-19 04:34:48] NOTICE[9378] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:605@ ... show more [2022-11-19 04:34:48] NOTICE[9378] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:54304' (callid: e5f4a168945826e4f7a605) - Failed to authenticate [2022-11-19 04:34:48] SECURITY[1528] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2022-11-19T04:34:48.942+0100",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="<unknown>",SessionID="e5f4a168945826e4f7a605",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/103.27.229.63/54304",Challenge="1668828888/53f757ec8326f482ecfff8439334d9be",Response="27b66e315d881e691481c32064fb213c",ExpectedResponse="" [2022-11-19 04:34:49] NOTICE[27858] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '103.27.229.63:54304' (callid: e5f4a168945826e4f7a605) - Failed to authenticate [2022-11-19 04:34:49] SECURITY[1528] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2022-11-19T04:34:49.460+0100",Severity="Error",S show less	Fraud VoIP Brute-Force

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 195.189.234.68

🇺🇸 172.208.8.54

🇩🇪 172.69.151.166

🇩🇪 172.69.151.165

🇦🇷 168.196.33.164

🇺🇸 137.184.79.140

🇨🇳 113.117.150.241

🇨🇳 101.205.122.213

🇺🇦 46.172.197.183

🇬🇧 35.203.211.236

🇬🇧 35.203.211.167

🇧🇪 34.52.229.253

🇧🇷 177.71.104.107

🇷🇴 92.118.39.49

🇸🇪 83.233.149.38

🇩🇪 46.235.11.26

🇺🇸 34.133.153.167

🇮🇱 20.217.80.108

🇺🇸 16.216.88.234

🇷🇴 193.32.162.84