JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.93.93.145

Neutral Activity

Abuse Confidence Score

0% Low Risk

24 reports

13 reporters · latest 11 months ago

ISP: PT Jinde Grup Indonesia
Usage Type: Fixed Line ISP
ASN: AS141140
Domain Name: agistnet.my.id
Country: 🇮🇩 Indonesia
City: Gresik, East Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.93.93.145 has been reported 24 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

24 from 13 distinct reporters

First reported

March 28th 2024

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 D3monite	2025-11-24 11:03:29 UTC · (11 months ago)	Attempted Brute Force (cpaneld)	Brute-Force
🇫🇷 Altai	2025-11-16 13:28:48 UTC · (11 months ago)	Blocked by UFW on Jellyfin [1433/tcp] Source port: 64886 TTL: 49 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2025-11-16 03:46:33 UTC · (11 months ago)	scanning http requests from known botnet	Web App Attack
🇨🇭 backslash	2025-11-13 14:36:31 UTC · (11 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇩🇪 LRob	2025-11-06 04:03:38 UTC · (1 year ago)	Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2025-10-11 13:10:06 UTC · (1 year ago)	WAF: Block IP which is in the web-spammers RBL 2- srv1acc	Email Spam Brute-Force
🇨🇭 backslash	2025-09-07 05:27:36 UTC · (1 year ago)		Bad Web Bot
🇮🇹 VHosting	2025-09-04 01:35:58 UTC · (1 year ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇹 VHosting	2025-09-04 01:30:58 UTC · (1 year ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇳🇱 exxos	2025-08-26 16:03:01 UTC · (1 year ago)	Attacks with Bad user agents	Hacking
🇪🇸 10dencehispahard SL	2024-10-03 09:49:42 UTC · (2 years ago)	DDOS attack	DDoS Attack Brute-Force
🇮🇩 hermawan	2024-08-23 04:33:08 UTC · (2 years ago)	[Fri Aug 23 10:40:41.886581 2024] [security2:error] [pid 118258:tid 137842661525056] [client 103.93.93.145:46342] [client 103.93.93.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[ ... show more [Fri Aug 23 10:40:41.886581 2024] [security2:error] [pid 118258:tid 137842661525056] [client 103.93.93.145:46342] [client 103.93.93.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2147"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data "Matched Data: , like Gecko) Version/4.0 Chrome/127.0.6533.103 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; SM-A057F Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Ve ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-08-23 01:27:05 UTC · (2 years ago)	[Fri Aug 23 08:26:03.275172 2024] [security2:error] [pid 7488:tid 129624610702912] [client 103.93.93.145:34998] [client 103.93.93.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\ ... show more [Fri Aug 23 08:26:03.275172 2024] [security2:error] [pid 7488:tid 129624610702912] [client 103.93.93.145:34998] [client 103.93.93.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2147"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data "Matched Data: , like Gecko) Version/4.0 Chrome/127.0.6533.103 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; SM-A057F Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Vers ... show less	Hacking Web App Attack
🇧🇷 diego	2024-06-20 15:15:06 UTC · (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇦🇺 MAGIC	2024-05-14 08:12:10 UTC · (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 152.39.248.212

🇳🇱 144.225.43.82

🇧🇩 103.77.253.146

🇺🇸 99.69.17.69

🇨🇭 209.99.185.195

🇧🇩 103.122.44.54

🇧🇩 103.41.244.208

🇳🇱 91.148.245.81

🇳🇱 64.205.72.228

🇺🇸 57.141.20.29

🇳🇱 45.148.10.151

🇳🇱 38.180.160.186

🇩🇪 5.231.242.242

🇬🇧 5.226.140.103

🇺🇸 2001:19f0:ac01:1ad7:5400:6ff:fe72:b8f2

🇳🇱 204.76.203.38

🇫🇷 185.101.21.114

🇩🇪 167.94.146.49

🇺🇸 129.158.226.176

🇮🇳 103.181.174.163