JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.122.1.26

103.122.1.26 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 31%: ?

31%

ISP	CV Buana
Usage Type	Fixed Line ISP
ASN	AS135477
Domain Name	buanadatamedia.web.id
Country	🇮🇩 Indonesia
City	Cempaka, South Sumatra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.122.1.26

Whois 103.122.1.26

IP Abuse Reports for 103.122.1.26:

This IP address has been reported a total of 73 times from 35 distinct sources. 103.122.1.26 was first reported on October 31st 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 leithzz	2026-05-31 19:19:23 (6 days ago)	Report by Cloudflare.Time: 2026-05-31T19:18:52Z	DDoS Attack
🇷🇴 Fn4ticHz	2026-05-29 02:48:09 (1 week ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇨🇦 leithzz	2026-05-25 14:11:03 (1 week ago)	Report by Cloudflare.Time: 2026-05-25T14:10:05Z	DDoS Attack
🇫🇷 MatStef132	2026-05-22 14:04:41 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 ByeByte API	2026-05-19 06:03:51 (2 weeks ago)	byebyte.space auth: Rate-limit escalation at 2026-05-19T06:03:50Z: 5 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-19T06:03:50Z: 5 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.33 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/18.1'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="133", "Chromium";v="133", "Not.A/Brand";v="24"'. Platform: "Windows" (mobile=?0). Referer: 'https://google.com/'. Country (CF): ID. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇸🇬 volcaryx	2026-05-17 04:30:18 (2 weeks ago)	Cloudflare detected an L7 DDoS attack (l7ddos) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 ... show more Cloudflare detected an L7 DDoS attack (l7ddos) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇷🇴 Fn4ticHz	2026-05-09 14:02:45 (4 weeks ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇪🇸 el-brujo	2026-05-04 02:39:22 (1 month ago)	Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh ... show more Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: PT. Java Digital Nusantara Country: ID Method: GET Timestamp: 2026-05-04T02:39:22Z ruleId: 9bc0d8e988e545dea9bd4843c4bef55c. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇮🇹 VHosting	2026-04-26 08:29:52 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇹 VHosting	2026-04-10 05:17:24 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:03:20 (2 months ago)	103.122.1.26 - - [05/Apr/2026:16:30:49 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp. ... show more 103.122.1.26 - - [05/Apr/2026:16:30:49 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.122.1.26 - - [05/Apr/2026:16:33:04 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.122.1.26 - - [05/Apr/2026:16:33:04 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.122.1.26 - - [05/Apr/2026:16:42:37 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.techglobal.us/products" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.122.1.26 - - [05/Apr/2026:16:53:50 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 15:01:40 (2 months ago)	103.122.1.26 - - [05/Apr/2026:16:53:50 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram ... show more 103.122.1.26 - - [05/Apr/2026:16:53:50 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.122.1.26 - - [05/Apr/2026:16:57:24 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.122.1.26 - - [05/Apr/2026:16:57:24 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.122.1.26 - - [05/Apr/2026:16:57:24 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.news69.info/blog" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.122.1.26 - - [05/Apr/2026:16:57:24 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.news69.info/blog" "Mozilla/5. ... show less	DDoS Attack
🇫🇷 MatStef132	2026-01-01 03:42:02 (5 months ago)	Malicious activity detected (2 incidents). IP has been blacklisted.	DDoS Attack Port Scan
🇨🇭 Modules	2025-12-24 01:46:35 (5 months ago)	Open proxy http://103.122.1.26:8080 (RT:71824ms,Loc:Indonesia,ASN:AS135477)	Open Proxy
🇧🇪 cmbplf	2025-12-16 15:50:38 (5 months ago)	536 limiting connections by zone (2h23m59s)	DDoS Attack

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 121.229.191.90

🇰🇷 116.41.163.87

🇭🇰 45.142.154.91

🇨🇳 222.189.99.228

🇨🇳 106.75.26.244

🇩🇪 102.220.160.99

🇳🇱 85.121.127.142

🇩🇪 83.236.176.109

🇫🇷 51.159.111.44

🇭🇰 45.142.154.88

🇭🇰 45.142.154.66

🇭🇰 45.142.154.60

🇨🇳 27.18.162.63

🇲🇽 207.248.109.245

🇳🇱 173.194.170.16

🇺🇸 162.216.149.41

🇭🇰 154.221.28.214

🇫🇮 150.241.89.255

🇺🇸 104.28.213.40

🇲🇾 49.124.151.67