JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.105.76.10

103.105.76.10 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 26%: ?

26%

ISP	PT. Garuda Media Telematika
Usage Type	Fixed Line ISP
ASN	AS136874
Hostname(s)	host-103-105-76-10.garuda.net.id
Domain Name	garuda.net.id
Country	🇮🇩 Indonesia
City	Jombang, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.105.76.10

Whois 103.105.76.10

IP Abuse Reports for 103.105.76.10:

This IP address has been reported a total of 76 times from 40 distinct sources. 103.105.76.10 was first reported on September 16th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 TTT	2026-07-31 04:55:19 (2 weeks ago)	HTTP flood/DDoS botnet. WAF blocked 6 windows/24h.	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2026-07-28 19:41:39 (2 weeks ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇩🇪 4server	2026-07-28 15:04:09 (2 weeks ago)	[TueJul2817:04:07.2205852026][security2:error][pid308688:tid308760][client103.105.76.10:0]ModSecurit ... show more [TueJul2817:04:07.2205852026][security2:error][pid308688:tid308760][client103.105.76.10:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"prstartup.ch\"][uri\"/xmlrpc.php\"][unique_id\"amjE588H2ADYcGDYoO89jQAAAIY\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 COMPLEX	2026-07-27 22:40:46 (2 weeks ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
Anonymous	2026-07-20 04:01:18 (3 weeks ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/.well-known/security.txt,/?lkxqqmgk=I51z2Nm,/?qwr=GwwRDrza,/?yopbcvml=aIc1SEza,/actuator/health,/static/js/main.js; Country=ID; ASN=136874 PT. Garuda Media Telematika show less	DDoS Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 18:36:16 (3 weeks ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇮🇹 VHosting	2026-07-06 21:40:51 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 Vano Ganzzz	2026-06-10 12:49:59 (2 months ago)	Triggered Cloudflare WAF (ratelimit) from ID. Action taken: BLOCK ASN: 136874 (PT. Garuda Media Tele ... show more Triggered Cloudflare WAF (ratelimit) from ID. Action taken: BLOCK ASN: 136874 (PT. Garuda Media Telematika) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-06-10T12:49:59Z Ray ID: a0987fcd0d5f3413 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇦 leithzz	2026-06-01 11:58:46 (2 months ago)	Report by Cloudflare.Time: 2026-06-01T11:58:13Z	DDoS Attack
🇷🇴 Fn4ticHz	2026-05-29 02:45:28 (2 months ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇫🇷 MatStef132	2026-05-22 14:04:08 (2 months ago)	MatShield L7: blocked on mathost.eu (path-flood-burst)	DDoS Attack
🇨🇦 leithzz	2026-05-21 10:43:56 (2 months ago)	Report by Cloudflare.Time: 2026-05-21T10:43:17Z	DDoS Attack
🇳🇱 ByeByte API	2026-05-19 08:12:17 (2 months ago)	byebyte.space auth: Rate-limit escalation at 2026-05-19T08:12:17Z: 5 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-19T08:12:17Z: 5 rejections in 300s. Firewall auto-banned IP for 21600s. UA: 'Mozilla/5.0 (Linux; Android 12; SM-S911B) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/132.0.0.0 Mobile Safari/18.2'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="132", "Chromium";v="132", "Not.A/Brand";v="24"'. Platform: "Android" (mobile=?1). Referer: 'https://google.com/'. Country (CF): ID. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇳🇱 ByeByte API	2026-05-18 17:51:02 (2 months ago)	byebyte.space auth: Rate-limit escalation at 2026-05-18T17:51:02Z: 5 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-18T17:51:02Z: 5 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.33 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/18.1'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="130", "Chromium";v="130", "Not.A/Brand";v="24"'. Platform: "Windows" (mobile=?0). Referer: 'https://google.com/'. Country (CF): ID. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:15:48 (3 months ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.41

🇮🇳 202.53.94.246

🇳🇱 192.253.248.223

🇲🇽 187.190.167.231

🇧🇷 187.120.19.162

🇺🇦 176.98.8.165

🇨🇳 110.179.80.93

🇮🇹 95.247.208.51

🇨🇦 85.217.149.71

🇳🇱 77.239.124.248

🇨🇳 61.53.91.0

🇺🇸 150.136.214.177

🇯🇵 124.156.228.190

🇩🇪 3.79.134.69

🇹🇭 2403:6200:8000:66:9893:8255:eaf8:7093

🇳🇱 195.178.110.232

🇻🇪 190.120.248.131

🇨🇳 171.217.70.151

🇵🇭 103.149.100.161

🇪🇸 79.72.60.87