JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.47.133.105

103.47.133.105 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Hostname(s)	host-103-47-133-105.myrepublic.co.id
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.47.133.105

Whois 103.47.133.105

IP Abuse Reports for 103.47.133.105:

This IP address has been reported a total of 14 times from 9 distinct sources. 103.47.133.105 was first reported on October 11th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-01-14 07:38:09 (5 months ago)	103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on ac ... show more 103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 14 01:37:58 14121 sshd[15369]: Invalid user ubuntu from 103.47.133.105 port 52732 Jan 14 01:33:16 14121 sshd[15038]: Invalid user ubuntu from 103.47.133.152 port 38636 Jan 14 01:33:17 14121 sshd[15038]: Failed password for invalid user ubuntu from 103.47.133.152 port 38636 ssh2 Jan 14 01:37:13 14121 sshd[15356]: Invalid user ubuntu from 66.96.225.80 port 58924 Jan 14 01:37:15 14121 sshd[15356]: Failed password for invalid user ubuntu from 66.96.225.80 port 58924 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-01-13 05:21:56 (5 months ago)	103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on ac ... show more 103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 12 23:17:40 17931 sshd[14808]: Invalid user ubuntu from 103.47.133.105 port 42860 Jan 12 23:17:42 17931 sshd[14808]: Failed password for invalid user ubuntu from 103.47.133.105 port 42860 ssh2 Jan 12 23:18:57 17931 sshd[14956]: Invalid user ubuntu from 103.47.133.100 port 42132 Jan 12 23:18:59 17931 sshd[14956]: Failed password for invalid user ubuntu from 103.47.133.100 port 42132 ssh2 Jan 12 23:21:37 17931 sshd[15414]: Invalid user ubuntu from 103.47.133.148 port 60246 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 myagent.site	2025-12-25 05:20:33 (5 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇮🇩 Burayot	2025-11-25 09:49:57 (6 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.47.133.105 (ID/Indonesia/host-1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 titis.blitarkab	2025-10-01 03:45:00 (8 months ago)	dalfox nih ye?	Hacking Web App Attack
🇺🇸 bigscoots.com	2025-09-28 10:47:33 (8 months ago)	103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on ac ... show more 103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 28 05:44:53 13540 sshd[24664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.105 user=root Sep 28 05:44:55 13540 sshd[24664]: Failed password for root from 103.47.133.105 port 60424 ssh2 Sep 28 05:47:26 13540 sshd[24897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.89 user=root Sep 28 05:46:06 13540 sshd[24814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.70 user=root Sep 28 05:46:08 13540 sshd[24814]: Failed password for root from 103.47.133.70 port 34250 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-28 09:51:35 (8 months ago)	103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on ac ... show more 103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 28 04:51:13 14542 sshd[18552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.164 user=root Sep 28 04:45:01 14542 sshd[18012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.105 user=root Sep 28 04:45:02 14542 sshd[18012]: Failed password for root from 103.47.133.105 port 33576 ssh2 Sep 28 04:42:31 14542 sshd[17845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.120 user=root Sep 28 04:42:32 14542 sshd[17845]: Failed password for root from 103.47.133.120 port 36508 ssh2 IP Addresses Blocked: 103.47.133.164 (ID/Indonesia/host-103-47-133-164.myrepublic.co.id) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-28 09:24:11 (8 months ago)	103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on ac ... show more 103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 28 04:17:44 16315 sshd[31467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.105 user=root Sep 28 04:17:46 16315 sshd[31467]: Failed password for root from 103.47.133.105 port 40760 ssh2 Sep 28 04:23:55 16315 sshd[31916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.70 user=root Sep 28 04:23:57 16315 sshd[31916]: Failed password for root from 103.47.133.70 port 44868 ssh2 Sep 28 04:15:25 16315 sshd[31266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.182.145.141 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-28 07:23:49 (8 months ago)	103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on ac ... show more 103.47.133.105 (ID/Indonesia/host-103-47-133-105.myrepublic.co.id), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 28 02:14:09 13817 sshd[29240]: Failed password for root from 103.47.133.105 port 60452 ssh2 Sep 28 02:14:07 13817 sshd[29240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.105 user=root Sep 28 02:23:43 13817 sshd[30265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.147 user=root Sep 28 02:06:54 13817 sshd[28407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.133.81 user=root Sep 28 02:06:56 13817 sshd[28407]: Failed password for root from 103.47.133.81 port 41148 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇵🇱 sefinek.net	2025-08-20 15:45:55 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 securejdprop	2025-08-17 13:07:15 (10 months ago)	This IP was detected by CrowdSec triggering jendela/too-many-probing. Ip 103.47.133.105 performed 'j ... show more This IP was detected by CrowdSec triggering jendela/too-many-probing. Ip 103.47.133.105 performed 'jendela/too-many-probing' (5 events over 602.7957ms) at 2025-08-17 13:07:03.313346991 +0000 UTC show less	Hacking Brute-Force Web App Attack
🇫🇷 ᴀʀᴛ	2025-07-29 06:22:25 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. ASN: 63859 (MYREPUBLIC-AS-ID PT. Eka Mas Republik) Protoc ... show more Triggered Cloudflare WAF (l7ddos) from ID. ASN: 63859 (MYREPUBLIC-AS-ID PT. Eka Mas Republik) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇸🇬 Nookie	2025-04-25 09:13:28 (1 year ago)	Host performing vulnerabilities scanning / script injection / exploit attempts.	Port Scan Brute-Force Web App Attack
🇮🇩 hermawan	2024-10-11 20:07:32 (1 year ago)	[Sat Oct 12 01:49:15.737539 2024] [security2:error] [pid 23995:tid 129198247118528] [client 103.47.1 ... show more [Sat Oct 12 01:49:15.737539 2024] [security2:error] [pid 23995:tid 129198247118528] [client 103.47.133.105:38358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.7.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "42"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: en-US,en;q=0.9,id-ID;q=0.8,id;q=0.7,zh-CN;q=0.6,zh-MO;q=0.5,zh;q=0.4 request_line = GET /index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-hujan/prakiraan-awal-musim-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-musim/prakiraan-musim-hujan/prakiraan-awal-musim-hujan"] [unique_id "ZwlzK_hYuYEasqDhxEJNHAAAxAA"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[23996] [lTad8f9nHlw] [ZwlzK_hYuYEasqDhxEJ ... show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.238

🇨🇴 201.184.50.251

🇬🇧 162.158.74.78

🇲🇲 103.154.241.42

🇺🇸 2602:80d:1008::8e

🇺🇸 158.94.187.222

🇻🇳 103.68.68.121

🇳🇱 91.92.40.176

🇸🇬 47.82.52.155

🇸🇬 47.79.15.60

🇧🇷 45.205.1.247

🇷🇺 93.88.203.98

🇸🇬 47.82.53.211

🇸🇬 43.173.178.145

🇱🇰 220.247.224.226

🇨🇳 218.1.137.224

🇺🇸 62.146.172.126

🇩🇪 47.245.130.32

🇦🇪 2001:8f8:1b3b:958:ae41:6e61:5805:fd59

🇵🇭 222.127.241.21