JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.47.134.102

103.47.134.102 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 17%: ?

17%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Hostname(s)	host-103-47-134-102.myrepublic.co.id
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.47.134.102

Whois 103.47.134.102

IP Abuse Reports for 103.47.134.102:

This IP address has been reported a total of 17 times from 15 distinct sources. 103.47.134.102 was first reported on October 17th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-10 17:25:30 (6 days ago)	[Thu Jun 11 00:25:28.060976 2026] [security2:error] [pid 700940:tid 139786332337856] [client 103.47. ... show more [Thu Jun 11 00:25:28.060976 2026] [security2:error] [pid 700940:tid 139786332337856] [client 103.47.134.102:46809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026 HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/551-klimatologi/prakiraan-klimatologi/peringatan-dini/555562843-press-release-kewaspadaan-cuaca-ekstrim-di-jawa-timur-11-20-maret-2026"] [unique_id "aimeCOEXBxdYwL5ji8JDUAAABg8"], referer https://www.bmkg.go.id ... show less	Email Spam Hacking
Anonymous	2026-05-25 02:30:42 (3 weeks ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
Anonymous	2026-05-18 03:23:49 (4 weeks ago)	Attack Signature Blocked: /wishlist/index/add/product/12280/form_key/OeoexZygkRGw07EA/ (Magento Site ... show more Attack Signature Blocked: /wishlist/index/add/product/12280/form_key/OeoexZygkRGw07EA/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-04 02:01:45 (2 months ago)	(mod_security) mod_security (id:218580) triggered by 103.47.134.102 (host-103-47-134-102.myrepublic. ... show more (mod_security) mod_security (id:218580) triggered by 103.47.134.102 (host-103-47-134-102.myrepublic.co.id): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 22:01:39.327485 2026] [security2:error] [pid 4297:tid 4297] [client 103.47.134.102:34077] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:type. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|www.panmaneecnc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.panmaneecnc.com"] [uri "/index.php/en/forum-home/topics/mode-topics"] [unique_id "adBxAy8vAkxovk4wOb94DAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 melroy89	2026-04-02 00:28:43 (2 months ago)	103.47.134.102 - - [02/Apr/2026:02:11:43 +0200] "GET /login HTTP/1.1" 200 1971 "-" "Mozilla/5.0 (Wi ... show more 103.47.134.102 - - [02/Apr/2026:02:11:43 +0200] "GET /login HTTP/1.1" 200 1971 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" "kbin.melroy.org" 0.033 ... show less	DDoS Attack
🇸🇰 GOVCERT	2026-03-30 22:03:36 (2 months ago)	SMB Port Scan	Port Scan
🇹🇭 Sawasdee	2026-03-30 05:04:19 (2 months ago)	Port Scan ...	Port Scan
🇩🇪 guldkage	2026-03-30 04:30:28 (2 months ago)	Unauthorized connection attempt detected from IP address 103.47.134.102 to port 445 (ger-02) [SMB]	Exploited Host
🇩🇪 check-the-sum.fr	2026-03-30 04:17:09 (2 months ago)	Port Scanning	Port Scan
🇩🇪 centurion	2026-02-20 13:08:27 (3 months ago)	Blocked by UFW on ns02 [135/tcp] Source port: 26374 TTL: 115 Packet length: 52 TOS: 0x00 This repor ... show more Blocked by UFW on ns02 [135/tcp] Source port: 26374 TTL: 115 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇷🇴 INTEQ	2026-01-16 07:55:18 (5 months ago)	Web attack from 103.47.134.102	Web App Attack
🇮🇩 hermawan	2025-12-09 12:48:45 (6 months ago)	[Tue Dec 09 19:47:52.890694 2025] [security2:error] [pid 391785:tid 140625945466560] [client 103.47. ... show more [Tue Dec 09 19:47:52.890694 2025] [security2:error] [pid 391785:tid 140625945466560] [client 103.47.134.102:33805] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "188"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 27% found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=475&id=827%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-desember-2015&start=190 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=475&id=827%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-desember-2015&start=190..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aTgaeP54ls1J ... show less	Hacking Web App Attack
🇮🇹 VHosting	2025-11-30 11:57:18 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇩 hermawan	2025-11-26 16:22:41 (6 months ago)	[Wed Nov 26 23:03:46.492646 2025] [security2:error] [pid 43058:tid 139901064439488] [client 103.47.1 ... show more [Wed Nov 26 23:03:46.492646 2025] [security2:error] [pid 43058:tid 139901064439488] [client 103.47.134.102:40421] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "188"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=476&id=896%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-16-22-pebruari-2016&start=20 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=896%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-16-22-pebruari-2016&start..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aSck4kkA ... show less	Hacking Web App Attack
Anonymous	2025-11-06 00:17:18 (7 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c70::127

🇳🇱 185.136.15.11

🇻🇳 180.93.245.203

🇺🇸 165.154.162.237

🇨🇳 111.26.67.36

🇮🇳 103.85.9.65

🇻🇳 103.74.116.219

🇺🇸 89.117.120.200

🇨🇦 85.217.149.38

🇨🇦 85.217.149.20

🇺🇸 66.132.224.89

🇺🇸 45.156.129.95

🇰🇷 43.203.174.127

🇷🇺 37.204.2.122

🇧🇷 20.226.2.115

🇨🇳 139.170.72.147

🇺🇸 104.194.10.16

🇵🇱 95.214.53.157

🇫🇷 89.117.57.182

🇸🇬 85.203.21.115