AbuseIPDB » 103.102.12.143
103.102.12.143
This IP was reported 9 times. Confidence of
Abuse
is 22% : ?
ISP
PT Foura Inti Sinergi
Usage Type
Fixed Line ISP
ASN
AS136865
Domain Name
fisnet.id
Country
🇮🇩
Indonesia
City
Rembangan, Central Java
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 103.102.12.143 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
103.102.12.143 was first reported on
March 6th 2026 , and the most recent report was
2 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
2 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
kosada.com
2026-07-08 02:53:57
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
botreporter
2026-06-24 02:31:23
(1 month ago)
botnet ignoring robots.txt
Bad Web Bot
🇩🇪
Vegascosmetics
2026-06-10 02:38:32
(1 month ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
2026-06-09 07:52:11
(1 month ago)
Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ...
show more
Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Aggressive search filter manipulation / web scraper probe on port 443 | URI: Excessive filters used: /communications/telephony/phones/shopby/iptel_type-nastol_nyj-modul-besprovodnoj/manufacturer-polycom.html?___SID=1b8cc2bd9a63e5953378f0a755346198U&rating=5&stock=1 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇮🇩
hermawan
2026-06-04 03:23:43
(1 month ago)
[Thu Jun 04 10:23:38.710021 2026] [authz_core:error] [pid 170924:tid 140067310851776] [client 103.10 ...
show more
[Thu Jun 04 10:23:38.710021 2026] [authz_core:error] [pid 170924:tid 140067310851776] [client 103.102.12.143:42206] AH01630: client denied by server configuration: /var/www/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[170944] [cOr2EWUaBxo] [aiDvum7vPTzM3x441_tOLgAAjRM] keep_alive=[1] [2026-06-04 10:23:38.710025] [R:aiDvum7vPTzM3x441_tOLgAAjRM] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'*/*' Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8
...
show less
Email Spam
Hacking
🇺🇸
mnsf
2026-05-29 14:05:31
(1 month ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇨🇦
polycoda
2026-03-23 11:02:20
(4 months ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇫🇷
Sklurk
2026-03-21 05:18:21
(4 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-03-06 01:17:19
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 103.102.12.143 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 103.102.12.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 20:17:09.373688 2026] [security2:error] [pid 25572:tid 25572] [client 103.102.12.143:50019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.raynernet.com"] [uri "/.env.local"] [unique_id "aaorFVnzRRFGoMPaQwdxYQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: