JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.39.70.70

103.39.70.70 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 31%: ?

31%

ISP	PT Gateway media Zafira
Usage Type	Fixed Line ISP
ASN	AS150274
Domain Name	zafira.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.39.70.70

Whois 103.39.70.70

IP Abuse Reports for 103.39.70.70:

This IP address has been reported a total of 76 times from 37 distinct sources. 103.39.70.70 was first reported on February 29th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 COMPLEX	2026-07-28 19:42:09 (2 days ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇺🇸 COMPLEX	2026-07-27 20:46:55 (3 days ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇮🇳 liveaspankaj	2026-07-25 15:28:07 (5 days ago)	DDoS attack: 110 requests in 5m (GET / or repair.php).	DDoS Attack
Anonymous	2026-07-19 20:10:18 (1 week ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/?omh=hPxnd0AtXkOU,/actuator/env?lctdp=aHAnTh62E94n,/graphql?afme=BPjO57eSKDx,/index.php?yvvwi=rKM8JK8SJnGSQL,/search?prdak=LqboboDD,/wp-admin/admin-ajax.php?bif=fDov6d9Wp; Country=ID; ASN=150274 PT Gateway media Zafira show less	DDoS Attack
🇩🇪 anycast_ac	2026-07-08 14:26:41 (3 weeks ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 326 requests on port 443	DDoS Attack Web App Attack
🇩🇪 anycast_ac	2026-07-01 15:11:18 (4 weeks ago)	[DDoS Attacker] This IP was attacking website web.xzbvc.xyz and sent 128 requests on port 443	DDoS Attack Web App Attack
🇫🇷 MatStef132	2026-06-30 22:11:38 (4 weeks ago)	MatShield L7: blocked on dev.mathost.eu (ua-quarantined)	Bad Web Bot
🇩🇪 burger	2026-06-21 11:48:03 (1 month ago)	Cloudflare l7ddos, Mozilla/5.0 (Windows NT 10.0; Win64; x64)	DDoS Attack
🇮🇩 hermawan	2026-05-31 01:02:51 (1 month ago)	[Sun May 31 08:02:46.154944 2026] [security2:error] [pid 751924:tid 140573678745280] [client 103.39. ... show more [Sun May 31 08:02:46.154944 2026] [security2:error] [pid 751924:tid 140573678745280] [client 103.39.70.70:60433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561495-infografis-waspada-cuaca-ekstrem-di-masa-pancaroba"] [unique_id "ahuItm6AWT01alfs9jCC4AABSwM"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[751928] [kMLEohJjzPM] [ahuItm6AWT01alfs9jCC4A ... show less	Email Spam Hacking
🇷🇴 Fn4ticHz	2026-05-29 02:45:59 (2 months ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇷🇴 Fn4ticHz	2026-05-09 14:02:32 (2 months ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇮🇹 VHosting	2026-04-26 08:47:32 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous	2026-03-23 06:50:11 (4 months ago)	\| [Dangerous/Indonesia] Aggressive IP 103.39.70.70 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Indonesia] Aggressive IP 103.39.70.70 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇧🇪 cmbplf	2026-02-20 06:21:25 (5 months ago)	617 limiting connections by zone (9m59s)	DDoS Attack
🇮🇳 Bharat Datacenter	2026-01-11 21:26:50 (6 months ago)	1: date=2026-01-12 time=02:55:24 eventtime=1768166724882670729 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-01-12 time=02:55:24 eventtime=1768166724882670729 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=103.39.70.70 srccountry="Indonesia" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=152155 attack="tcp_syn_flood" srcport=54580 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 4116 > threshold 2000, repeats 152155 times since last log, pps 4157 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 190.5.34.168

🇺🇸 173.209.75.2

🇸🇬 165.22.57.22

🇨🇴 143.105.99.1

🇵🇱 138.124.20.112

🇮🇩 103.97.101.25

🇺🇸 87.99.134.198

🇹🇭 43.164.1.211

🇺🇸 34.236.135.14

🇳🇱 203.55.131.4

🇨🇳 202.112.47.54

🇦🇴 193.163.125.111

🇧🇷 191.232.199.39

🇨🇳 122.144.198.22

🇰🇷 112.167.99.220

🇫🇷 92.205.177.212

🇺🇸 172.253.2.29

🇺🇸 172.217.117.4

🇸🇬 118.139.164.171

🇶🇦 78.100.129.165