JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.88.169.150

103.88.169.150 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 11%: ?

11%

ISP	PT Mitra Lintas Multimedia
Usage Type	Fixed Line ISP
ASN	AS136093
Domain Name	faznet.co.id
Country	🇮🇩 Indonesia
City	Pekanbaru, Riau

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.88.169.150

Whois 103.88.169.150

IP Abuse Reports for 103.88.169.150:

This IP address has been reported a total of 16 times from 10 distinct sources. 103.88.169.150 was first reported on July 11th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-06 05:38:00 (1 week ago)	Web App Attack	Web App Attack
🇮🇩 hermawan	2026-05-28 03:30:49 (3 weeks ago)	[Thu May 28 10:30:26.734923 2026] [security2:error] [pid 323211:tid 139852231161536] [client 103.88. ... show more [Thu May 28 10:30:26.734923 2026] [security2:error] [pid 323211:tid 139852231161536] [client 103.88.169.150:61054] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /matomo.php?idsite=1&rec=1&cookie=1 HTTP/2.0 Request URI RAW = /matomo.php?idsite=1&rec=1&cookie=1 Request Basename = matomo.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "matomo.staklim-malang.info"] [uri ... show less	Email Spam Hacking
Anonymous	2026-03-03 01:23:24 (3 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇮🇩 hermawan	2026-02-28 18:23:52 (3 months ago)	Suricata (signature 3300246, severity: 1): 🐾 - 🚨 TLS1.0 💔 connection observerd]	Hacking
🇩🇪 SMARTNET	2025-11-26 07:00:13 (6 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-19 04:21:55 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-11-16 21:12:48 (7 months ago)	[Mon Nov 17 04:07:52.866396 2025] [security2:error] [pid 281228:tid 140544123500224] [client 103.88. ... show more [Mon Nov 17 04:07:52.866396 2025] [security2:error] [pid 281228:tid 140544123500224] [client 103.88.169.150:40743] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=481&id=954%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-april-2016&start=80 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=481&id=954%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-april-2016&start=80 Re..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aRo9KKu ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-09 19:27:52 (7 months ago)	[Mon Nov 10 02:27:21.746953 2025] [security2:error] [pid 1626095:tid 140440406759104] [client 103.88 ... show more [Mon Nov 10 02:27:21.746953 2025] [security2:error] [pid 1626095:tid 140440406759104] [client 103.88.169.150:40147] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=478&id=1079%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-juli-1-agustus-2016&start=40 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=478&id=1079%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-juli-1-agustus-2016&st..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aRDrGcfCTct ... show less	Hacking Web App Attack
🇨🇭 backslash	2025-10-05 04:51:13 (8 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
Anonymous	2025-09-21 05:57:47 (8 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2025-09-13 03:55:11 (9 months ago)	Ports: 25,2525,465,587,2525; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇬🇧 adnscom.net	2025-09-09 18:43:45 (9 months ago)	IPS trigger: Brute force WebApp/CMS scanning/attack	Brute-Force Web App Attack
🇮🇩 hermawan	2025-07-13 15:32:35 (11 months ago)	[Sun Jul 13 22:28:10.327867 2025] [security2:error] [pid 147041:tid 140524695520960] [client 103.88. ... show more [Sun Jul 13 22:28:10.327867 2025] [security2:error] [pid 147041:tid 140524695520960] [client 103.88.169.150:61038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "okhttp" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: okhttp found within REQUEST_HEADERS:User-Agent: okhttp/4.12.0 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/1_Apa_Itu_La_Nina-1.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/1_Apa_Itu_La_Nina-1.jpg"] [unique_id "aHPQiv_Ox7qV020cpiBFjwAAgRA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[147058] [hmDRMBGZyMw] [aHPQiv_Ox7qV020cpiBFjwAAgRA] keep_alive=[1] [2025-07-13 22:28:10.327872] [R:aHPQiv_Ox7qV020cpiBFjwAAgRA] UA:'okhttp/4.12.0' Host:'staklim-jatim.bmkg.go.id' ... show less	Hacking Web App Attack
Anonymous	2025-07-13 09:49:58 (11 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇮🇩 hermawan	2025-07-12 12:52:53 (11 months ago)	[Sat Jul 12 19:52:19.978588 2025] [security2:error] [pid 332989:tid 139653110798016] [client 103.88. ... show more [Sat Jul 12 19:52:19.978588 2025] [security2:error] [pid 332989:tid 139653110798016] [client 103.88.169.150:61009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "okhttp" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: okhttp found within REQUEST_HEADERS:User-Agent: okhttp/4.12.0 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/1_Apa_Itu_La_Nina-1.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/1_Apa_Itu_La_Nina-1.jpg"] [unique_id "aHJag6yeaX9GSIaMNZr0sQAAgwY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[332996] [e4Wm5frmWNU] [aHJag6yeaX9GSIaMNZr0sQAAgwY] keep_alive=[1] [2025-07-12 19:52:19.978601] [R:aHJag6yeaX9GSIaMNZr0sQAAgwY] UA:'okhttp/4.12.0' Host:'staklim-jatim.bmkg.go.id' ... show less	Hacking Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.191

🇺🇸 74.125.77.149

🇺🇸 44.118.107.13

🇻🇳 14.177.234.24

🇺🇸 2607:f8b0:400c:c06::12b

🇮🇳 168.144.95.137

🇨🇳 115.199.104.69

🇳🇱 107.189.27.179

🇫🇮 94.183.234.128

🇫🇷 91.231.89.201

🇺🇸 44.28.244.53

🇺🇸 209.46.125.221

🇫🇮 147.185.133.218

🇺🇸 136.56.34.147

🇦🇺 120.147.28.246

🇰🇷 112.161.42.97

🇺🇸 66.132.186.128

🇫🇷 51.68.34.131

🇺🇸 50.46.141.125

🇺🇸 216.25.89.82