JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.242.78.199

Activity Trending Down

Abuse Confidence Score

90% Critical

199 reports

102 reporters · latest 1 week ago

ISP: Universitas Muhammadiyah Jember
Usage Type: University/College/School
ASN: AS151541
Domain Name: unmuhjember.ac.id
Country: 🇮🇩 Indonesia
City: Jember, East Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

199 from 102 distinct reporters

First reported

November 17th 2024

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 9 🇺🇸 United States of America 6 🇫🇷 France 5

Most common categories Web App Attack 27 Port Scan 13 Hacking 11 Bad Web Bot 7 Brute-Force 6

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Jochen Pretli	2026-11-04 06:10:43 UTC · (1 week ago)	connection to honeypot	Email Spam Port Scan
🇧🇪 sid3windr	2026-11-04 05:30:56 UTC · (1 week ago)	GET /shopdb/index.php?lang=en (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
🇩🇪 EGP Abuse Dept	2026-11-04 02:16:12 UTC · (1 week ago)	Scanning for web/db/file exploits on tpc-002.mach3builders.nl	SQL Injection Bad Web Bot Web App Attack
🇧🇪 sid3windr	2026-11-02 13:36:48 UTC · (1 week ago)	GET /shopdb/index.php?lang=en (Tarpitted for 2m8s, wasted 7.62kB)	Web App Attack
🇩🇪 updown.io	2026-11-02 07:40:32 UTC · (1 week ago)	{"level":"info","ts":1793605174.068872,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"103.242.78.199","remote_port":"37558","client_ip":"103.242.78.199","proto":"HTTP/1.1","method":"GET","host":"159.89.98.98:80","uri" ... show more {"level":"info","ts":1793605174.068872,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"103.242.78.199","remote_port":"37558","client_ip":"103.242.78.199","proto":"HTTP/1.1","method":"GET","host":"159.89.98.98:80","uri":"/mysql/index.php?lang=en","headers":{"Connection":["keep-alive"],"User-Agent":["Go Web Pentest Tool"],"Accept":["/"]}},"bytes_read":0,"user_id":"","duration":0.000082989,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://159.89.98.98/mysql/index.php?lang=en"],"Content-Type":[]}} {"level":"info","ts":1793605174.6637466,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"103.242.78.199","remote_port":"37574","client_ip":"103.242.78.199","proto":"HTTP/1.1","method":"GET","host":"159.89.98.98:80","uri":"/phpMyAdmin-5.2.1-all-languages/index.php?lang=en","headers":{"User-Agent":["Go Web Pentest Tool"],"Accept":["/"],"Connection":["keep-alive"]}},"bytes_read":0,"u ... show less	DDoS Attack Web App Attack
🇷🇸 Scan	2026-10-31 02:55:52 UTC · (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 micropedro	2026-10-30 14:52:44 UTC · (1 week ago)	3 incidents: malicious activity. First: 2026-10-28 06:39, Last: 2026-10-30 10:52 UTC. Triggers: unknown.	Port Scan
🇧🇾 lns.bz	2026-10-30 10:25:42 UTC · (1 week ago)	Too many 404 requests [BY]	Web App Attack
🇧🇾 lns.bz	2026-10-28 10:31:18 UTC · (2 weeks ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-10-26 22:30:03 UTC · (2 weeks ago)	CrowdSec decision: crowdsecurity/http-probing (origin: crowdsec)	Web App Attack
Anonymous	2026-10-26 15:27:02 UTC · (2 weeks ago)	Vulnerability scan	Web App Attack
🇧🇾 lns.bz	2026-10-24 22:09:47 UTC · (2 weeks ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 ACE-INFORMATIQUE.NC	2026-10-24 19:00:09 UTC · (2 weeks ago)	Web App Attack blocked by Fail2ban	Web App Attack
🇮🇹 CoreTech srl	2026-10-24 14:08:01 UTC · (2 weeks ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇺🇸 micropedro	2026-10-23 12:11:03 UTC · (2 weeks ago)	3 incidents: malicious activity. First: 2026-10-16 11:54, Last: 2026-10-23 08:11 UTC. Triggers: unknown.	Port Scan

Showing 1 to 15 of 199 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇱🇧 185.164.107.212

🇮🇳 59.179.31.238

🇮🇳 45.251.69.11

🇧🇪 35.210.140.20

🇧🇷 2804:31dc:4164:700:817c:83a7:2139:905

🇳🇱 195.178.110.106

🇫🇷 185.177.72.70

🇧🇩 103.159.172.78

🇷🇴 92.118.39.71

🇫🇷 91.231.89.105

🇬🇧 86.24.114.115

🇳🇱 200.138.46.120

🇮🇳 171.61.168.184

🇺🇸 98.175.42.110

🇬🇧 83.104.86.199

🇸🇬 45.78.194.242

🇫🇮 147.185.133.228

🇧🇩 103.159.2.113

🇮🇳 103.148.20.20

🇩🇪 88.99.146.149