JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.80.88.74

103.80.88.74 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 20%: ?

20%

ISP	PT Jala Lintas Media - JTT
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55685
Domain Name	jlm.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.80.88.74

Whois 103.80.88.74

IP Abuse Reports for 103.80.88.74:

This IP address has been reported a total of 71 times from 36 distinct sources. 103.80.88.74 was first reported on August 6th 2021, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 anycast_ac	2026-06-25 17:58:11 (7 hours ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 613 requests on port 443	DDoS Attack Web App Attack
🇩🇪 anycast_ac	2026-06-25 14:29:41 (10 hours ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 692 requests on port 443	DDoS Attack Web App Attack
🇮🇩 hermawan	2026-05-31 02:18:39 (3 weeks ago)	[Sun May 31 09:18:32.571949 2026] [security2:error] [pid 788375:tid 140573636409024] [client 103.80. ... show more [Sun May 31 09:18:32.571949 2026] [security2:error] [pid 788375:tid 140573636409024] [client 103.80.88.74:56586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /disquss-v5.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/disquss-v5.js"] [unique_id "ahuaeIkyeqvy9eqrn_yOlAABCgc"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[788403] [V6XBsZMQ3/A] [ahuaeIkyeqvy9eqrn_yOlAABCgc] keep_alive=[1] [2026-05-31 09:18:32.571954] [R:ahuaeIkyeqvy9eqrn_yOlAABCgc] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 15_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15_6 Mobile/15E148 Safari/604.1' Host:'st ... show less	Email Spam Hacking
🇷🇴 Fn4ticHz	2026-05-30 15:42:09 (3 weeks ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇷🇴 Fn4ticHz	2026-05-09 14:02:41 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇺🇸 Vano Ganzzz	2026-05-03 00:31:01 (1 month ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 55685 (PT Jala Lintas Media) Pro ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 55685 (PT Jala Lintas Media) Protocol: HTTP/2 (POST method) Endpoint: / Timestamp: 2026-05-03T00:31:01Z Ray ID: 9f5b29144efece45 UA: Mozilla/5.0 (Linux; Android 14; Mi 14) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.1684.32 Mobile Safari/537.36 show less	DDoS Attack Bad Web Bot
🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL)	2026-01-16 01:06:13 (5 months ago)	[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 22. DDoS detected	DDoS Attack Brute-Force SSH
🇮🇹 VHosting	2025-12-30 13:28:17 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇸🇬 Vano Ganzzz	2025-12-12 05:52:43 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 55685 (JLM-AS-ID PT Jala Lintas ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 55685 (JLM-AS-ID PT Jala Lintas Media) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-12-12T05:52:43Z Ray ID: 9acaf50fef9e0c16 UA: Empty string show less	DDoS Attack Bad Web Bot
🇸🇬 Vano Ganzzz	2025-12-10 12:33:27 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 55685 (JLM-AS-ID PT Jala Lintas ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 55685 (JLM-AS-ID PT Jala Lintas Media) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-12-10T12:33:27Z Ray ID: 9abcc5538f8b6bed UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇩🇪 Szymekk	2025-12-02 13:57:47 (6 months ago)	Fail2Ban: SSH brute force attempt [srv01]	Brute-Force SSH
🇺🇸 1gz	2025-12-01 21:57:10 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.7 (KHTML, like Gecko) Chrome/7.0.517.24 Safari/534.7 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-08 15:23:02 (7 months ago)	ASN: 55685 (JLM-AS-ID PT Jala Lintas Media) Botnet Zombie: This IP has been detected as a botnet zom ... show more ASN: 55685 (JLM-AS-ID PT Jala Lintas Media) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇺🇸 SuperEvilLuke	2025-11-04 21:44:06 (7 months ago)	Malicious activity detected from 55685 JLM-AS-ID PT Jala Lintas Media towards host dash.embotic.xyz ... show more Malicious activity detected from 55685 JLM-AS-ID PT Jala Lintas Media towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T21:44:06Z (12 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-11-04 00:06:05 (7 months ago)	Malicious activity detected from 55685 JLM-AS-ID PT Jala Lintas Media towards host sillydev.co.uk (G ... show more Malicious activity detected from 55685 JLM-AS-ID PT Jala Lintas Media towards host sillydev.co.uk (GET HTTP/2) @ 2025-11-04T00:06:05Z (2 occurrences) show less	DDoS Attack Exploited Host

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.224.152.12

🇱🇹 141.98.9.40

🇺🇸 138.68.226.156

🇬🇧 82.19.105.110

🇺🇸 64.62.156.195

🇺🇸 50.116.72.11

🇺🇸 47.77.129.241

🇳🇱 45.148.10.151

🇺🇸 37.140.223.242

🇺🇸 37.140.223.223

🇭🇰 35.220.179.84

🇩🇪 34.159.178.254

🇰🇷 34.64.207.129

🇲🇾 14.192.212.171

🇸🇬 2400:8901::f03c:91ff:fef4:58cd

🇨🇳 180.154.33.68

🇸🇬 136.110.41.20

🇺🇸 104.197.112.128

🇧🇩 103.204.209.215

🇮🇳 103.38.182.49