AbuseIPDB » 59.103.108.248
59.103.108.248
This IP was reported 5 times. Confidence of
Abuse
is 3% : ?
ISP
Cyber Internet Services Pvt Ltd
Usage Type
Fixed Line ISP
ASN
AS9541
Domain Name
cyber.net.pk
Country
🇵🇰
Pakistan
City
Multan, Punjab
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 59.103.108.248 :
This IP address has been reported a total of
5
times from
5 distinct
sources.
59.103.108.248 was first reported on
January 5th 2025 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇰🇷
zlhIcd
2026-06-15 09:24:32
(2 days ago)
59.103.108.248 - - [15/Jun/2026:17:15:04 +0900] "GET /pcwiki/index.php?days=30&from=20251217133848&h ...
show more
59.103.108.248 - - [15/Jun/2026:17:15:04 +0900] "GET /pcwiki/index.php?days=30&from=20251217133848&hideliu=1&hidemyself=1&limit=500&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:134.0) Gecko/20100101 Firefox/134.0"
...
show less
Web Spam
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-01 10:40:41
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 59.103.108.248 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 59.103.108.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 05:40:34.451645 2026] [security2:error] [pid 29928:tid 29928] [client 59.103.108.248:17586] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cometoorderva.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cometoorderva.com"] [uri "/[email protected] "] [unique_id "aaQXohUf38ZDvg59pKHTEQAAAAY"], referer: http://cometoorderva.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2025-12-25 07:18:39
(5 months ago)
[Thu Dec 25 14:18:39.071420 2025] [security2:error] [pid 209882:tid 139636835874496] [client 59.103. ...
show more
[Thu Dec 25 14:18:39.071420 2025] [security2:error] [pid 209882:tid 139636835874496] [client 59.103.108.248:17742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "253"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Brave found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/77.0.3865.90 Safari/537.36 request_line = GET /index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/4125-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2022/555559888-analisis-dan-prediksi-dasarian-dinamika-atmosfer-laut-dan-prediksi-curah-hujan-pemutakhiran-dasarian-iii-desember-2022 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/4125-analisis-kondisi-dinam
...
show less
Hacking
Web App Attack
🇺🇸
Zandro
2025-08-19 07:29:35
(9 months ago)
alicloud harvester
Bad Web Bot
2025-01-05 09:29:43
(1 year ago)
Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: