JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.4.76.105

103.4.76.105 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 0%: ?

ISP	PT Khazanah Net Indonesia
Usage Type	Fixed Line ISP
ASN	AS150216
Domain Name	wifiairlink.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.4.76.105

Whois 103.4.76.105

IP Abuse Reports for 103.4.76.105:

This IP address has been reported a total of 23 times from 17 distinct sources. 103.4.76.105 was first reported on May 22nd 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-14 23:00:09 (1 month ago)	\| [Dangerous/Indonesia] Aggressive IP 103.4.76.105 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Indonesia] Aggressive IP 103.4.76.105 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇨🇦 SuperEvilLuke	2026-01-24 19:58:45 (4 months ago)	Malicious activity detected from 150216 IDNIC-KHZ-AS-ID PT Khazanah Net Indonesia towards host embot ... show more Malicious activity detected from 150216 IDNIC-KHZ-AS-ID PT Khazanah Net Indonesia towards host embotic.xyz (GET HTTP/2) @ 2026-01-24T19:58:45Z (2 occurrences) show less	DDoS Attack Exploited Host
🇮🇹 VHosting	2025-12-30 13:28:19 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 kosada.com	2025-12-16 22:47:22 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇨🇭 Modules	2025-12-14 17:22:27 (5 months ago)	Open proxy http://103.4.76.105:8585 (RT:5477ms,Loc:Indonesia,ASN:AS150216)	Open Proxy
🇺🇸 SuperEvilLuke	2025-12-14 13:36:46 (5 months ago)	Malicious activity detected from 150216 IDNIC-KHZ-AS-ID PT Khazanah Net Indonesia towards host panel ... show more Malicious activity detected from 150216 IDNIC-KHZ-AS-ID PT Khazanah Net Indonesia towards host panel.embotic.xyz (GET HTTP/2) @ 2025-12-14T13:36:46Z (10 occurrences) show less	DDoS Attack Exploited Host
🇮🇩 hermawan	2025-11-24 17:07:35 (6 months ago)	[Tue Nov 25 00:05:03.975070 2025] [security2:error] [pid 65198:tid 139978285774528] [client 103.4.76 ... show more [Tue Nov 25 00:05:03.975070 2025] [security2:error] [pid 65198:tid 139978285774528] [client 103.4.76.105:57687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "83"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /wp found within REQUEST_FILENAME: /wp-login.php request_line = GET /wp-login.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/wp-login.php"] [unique_id "aSSQP6cOis0WW2iuiOUxRAAAAAI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[65227] [HccTKhqIu2E] [aSSQP6cOis0WW2iuiOUxRAAAAAI] keep_alive=[0] [2025-11-25 00:05:03.975072] [R:aSSQP6cOis0WW2iuiOUxRAAAAAI] UA:'Mozilla/5.0' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accept-Encoding:'gzip,deflate ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-24 07:16:41 (6 months ago)	[Mon Nov 24 14:15:41.064914 2025] [security2:error] [pid 689531:tid 140014113515200] [client 103.4.7 ... show more [Mon Nov 24 14:15:41.064914 2025] [security2:error] [pid 689531:tid 140014113515200] [client 103.4.76.105:49646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "83"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /wp found within REQUEST_FILENAME: /wp-login.php request_line = GET /wp-login.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/wp-login.php"] [unique_id "aSQGHMS4nF64yGXFHuCCxAAAAMo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[689568] [Y3s67hHbveI] [aSQGHMS4nF64yGXFHuCCxAAAAMo] keep_alive=[0] [2025-11-24 14:15:41.064932] [R:aSQGHMS4nF64yGXFHuCCxAAAAMo] UA:'Mozilla/5.0' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accept-Encoding:'gzip,deflate ... show less	Hacking Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-11-24 06:50:31 (6 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 hermawan	2025-11-23 06:35:30 (6 months ago)	[Sun Nov 23 13:31:21.144969 2025] [security2:error] [pid 507997:tid 140347694892736] [client 103.4.7 ... show more [Sun Nov 23 13:31:21.144969 2025] [security2:error] [pid 507997:tid 140347694892736] [client 103.4.76.105:58670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "83"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /wp found within REQUEST_FILENAME: /wp-login.php request_line = GET /wp-login.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/wp-login.php"] [unique_id "aSKqORIXWwqypScmONHxywAAAJc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[508047] [y//jMb3+dbo] [aSKqORIXWwqypScmONHxywAAAJc] keep_alive=[0] [2025-11-23 13:31:21.144971] [R:aSKqORIXWwqypScmONHxywAAAJc] UA:'Mozilla/5.0' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'/' Accept-Encoding:'gzip,deflate ... show less	Hacking Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-11-23 06:07:06 (6 months ago)	WP Login Scan Activities	Web App Attack
🇬🇧 Silly Development	2025-10-24 02:20:05 (7 months ago)	Malicious activity detected from 150216 IDNIC-KHZ-AS-ID PT Khazanah Net Indonesia towards host silly ... show more Malicious activity detected from 150216 IDNIC-KHZ-AS-ID PT Khazanah Net Indonesia towards host sillydev.co.uk (GET HTTP/2) @ 2025-10-24T02:20:05Z (1 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-10-23 21:26:49 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 dynamix	2025-10-23 20:54:10 (7 months ago)	Multiple WAF Violations	Web App Attack
🇸🇬 pusathosting.com	2025-10-23 11:57:06 (7 months ago)	2ds22 bruteforce	Brute-Force Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2607:f8b0:4023:1807::125

🇭🇰 218.102.122.116

🇫🇷 213.246.39.234

🇯🇵 124.155.125.131

🇷🇺 91.185.75.244

🇩🇪 77.91.71.12

🇺🇸 64.94.153.239

🇺🇸 35.243.243.94

🇺🇸 20.12.41.6

🇨🇳 14.103.105.56

🇷🇺 176.109.97.11

🇺🇸 162.216.150.54

🇳🇬 152.32.140.218

🇧🇩 103.65.240.34

🇳🇱 85.121.127.134

🇺🇸 71.6.199.23

🇳🇱 45.142.193.23

🇺🇸 20.64.104.65

🇨🇭 179.43.182.86

🇲🇾 47.250.12.201