JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.94.133.20

103.94.133.20 was found in our database!

This IP was reported 618 times. Confidence of Abuse is 36%: ?

36%

ISP	PT CITRA AKSES INDONUSA
Usage Type	Fixed Line ISP
ASN	AS136128
Domain Name	citraindo.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.94.133.20

Whois 103.94.133.20

IP Abuse Reports for 103.94.133.20:

This IP address has been reported a total of 618 times from 24 distinct sources. 103.94.133.20 was first reported on November 1st 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 edgeshield	2026-10-13 15:37:16 (3 days ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
🇵🇱 MatStef132	2026-10-05 19:26:16 (1 week ago)	MatShield L7: blocked on fivevault.net (sec-fetch-navigate-method)	DDoS Attack
🇩🇪 edgeshield	2026-10-03 14:53:51 (1 week ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
Anonymous	2026-10-03 01:54:47 (1 week ago)	Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shi ... show more Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shield HTTP event export; 230 requests from this client IP between 2026-10-03T01:44:43.393+00:00 and 2026-10-03T01:54:47.823+00:00; peak 56 requests in one UTC calendar second. Methods: POST=230. Top paths (host and payment IDs redacted): /<uuid> (207), /api/v1/integration/ (23). JA4: t13d1515h2_8daaf6152771_e4c2b8c727f2, t13d1615h2_86a278354501_c1eccb039341. CDN actions: Challenged=92, Blocked=138. Counts refer to the supplied log window. show less	DDoS Attack
🇬🇧 compute	2026-10-02 08:19:29 (2 weeks ago)	Participated in a distributed HTTP flood (L7 DDoS) against 10x.gg on 2026-10-02 08:19:25-08:20:09 UT ... show more Participated in a distributed HTTP flood (L7 DDoS) against 10x.gg on 2026-10-02 08:19:25-08:20:09 UTC. 1 requests from this IP to a single API endpoint (GET .../funding), HTTP/2 via Cloudflare (CF-Connecting-IP), spoofed browser UA + rotated referrers. nginx rate-limited (HTTP 429). First seen 2026-10-02T08:19:29+00:00. Part of a 1,572-IP rented-proxy pool; this IP had no other traffic to the site that day. show less	DDoS Attack Bad Web Bot
🇵🇱 MatStef132	2026-10-01 19:51:25 (2 weeks ago)	MatShield L7: blocked on fivevault.net (sec-ch-ua-on-non-chromium)	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2026-09-29 16:27:53 (2 weeks ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 edgeshield	2026-09-25 08:01:25 (3 weeks ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
🇵🇱 MatStef132	2026-09-25 00:43:58 (3 weeks ago)	MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)	Bad Web Bot
🇮🇩 sockominfo	2026-09-13 06:00:09 (1 month ago)	User access to sensitive menu from bad reputation IP 103.94.133.20.. Threat Score: 9.3/10 (CRITICAL) ... show more User access to sensitive menu from bad reputation IP 103.94.133.20.. Threat Score: 9.3/10 (CRITICAL). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-13 05:00:09 (1 month ago)	User access to sensitive menu from bad reputation IP 103.94.133.20.. Threat Score: 8.8/10 (HIGH). Re ... show more User access to sensitive menu from bad reputation IP 103.94.133.20.. Threat Score: 8.8/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-13 03:00:08 (1 month ago)	User access to sensitive menu from bad reputation IP 103.94.133.20.. Threat Score: 9/10 (CRITICAL). ... show more User access to sensitive menu from bad reputation IP 103.94.133.20.. Threat Score: 9/10 (CRITICAL). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇵🇱 MatStef132	2026-09-12 01:09:58 (1 month ago)	MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)	Bad Web Bot
🇮🇩 sockominfo	2026-09-11 22:00:52 (1 month ago)	Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: ... show more Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: 6.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 81%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 edgeshield	2026-09-11 17:32:15 (1 month ago)	Automated web request flooding / proxy abuse (EdgeShield WAF).	Open Proxy DDoS Attack

Showing 1 to 15 of 618 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇪🇸 161.111.164.218

🇸🇬 145.223.149.162

🇮🇳 122.187.226.71

🇮🇳 117.255.28.23

🇨🇳 101.20.236.94

🇳🇱 87.192.41.180

🇺🇸 64.62.156.50

🇭🇰 46.236.242.150

🇳🇱 45.148.10.152

🇬🇧 35.203.210.182

🇨🇿 213.108.162.145

🇹🇷 212.156.70.154

🇰🇷 211.32.21.98

🇧🇷 201.32.84.71

🇪🇹 196.190.50.113

🇲🇽 189.162.203.74

🇧🇷 189.90.211.51

🇲🇽 187.189.87.19

🇦🇷 186.182.90.51