JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.122.64.202

103.122.64.202 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 87%: ?

87%

ISP	PT. Jinom Network Indonesia
Usage Type	Fixed Line ISP
ASN	AS138064
Domain Name	jinom.net
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.122.64.202

Whois 103.122.64.202

IP Abuse Reports for 103.122.64.202:

This IP address has been reported a total of 40 times from 23 distinct sources. 103.122.64.202 was first reported on August 30th 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 screwlooseit.com.au	2026-06-23 10:03:02 (20 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/-	Web App Attack
🇧🇪 cmbplf	2026-06-23 08:02:56 (22 hours ago)	2.032 requests from abuseipdb.com blacklisted IP (1yr8mos1w)	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-06-18 11:03:26 (5 days ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
Anonymous	2026-06-18 11:03:10 (5 days ago)	Fail2ban filtered ...	Web App Attack
🇺🇸 integrantservices.com	2026-06-18 10:03:50 (5 days ago)	(wordpress) Failed wordpress login from 103.122.64.202 (ID/Indonesia/-)	Brute-Force
🇩🇪 pscriptos	2026-06-18 10:01:56 (5 days ago)	{"ClientAddr":"103.122.64.202:65396","ClientHost":"103.122.64.202","ClientPort":"65396","ClientUsern ... show more {"ClientAddr":"103.122.64.202:65396","ClientHost":"103.122.64.202","ClientPort":"65396","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":595355565,"OriginContentSize":418,"OriginDuration":591959793,"OriginStatus":403,"Overhead":3395772,"RequestAddr":"www.cleveradmin.de","RequestContentSize":718,"RequestCount":558418,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-18T12:01:37.667099777+02:00","StartUTC":"2026-06-18T10:01:37.667099777Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-18T12:01:38+02:00"} {"ClientAddr":"103.122.64.202:65396","ClientHost":"103.122.64.202","ClientPort": ... show less	Brute-Force Web App Attack
🇺🇸 WeekendWeb	2026-06-18 09:31:21 (5 days ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 08:31:55 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 103.122.64.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.122.64.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 04:31:41.928993 2026] [security2:error] [pid 2314:tid 2314] [client 103.122.64.202:64022] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.122.64.202 (+1 hits since last alert)\|mytapt.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mytapt.com"] [uri "/xmlrpc.php"] [unique_id "ajOs7ZAojAxvyQfo9Y12DgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-17 09:47:26 (6 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/-	Web App Attack
🇫🇷 SpaceHost-Server	2026-06-15 22:25:12 (1 week ago)		Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-15 10:28:11 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇳🇱 Site.eu	2026-06-11 12:08:45 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-11 12:07:46 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.122.64.202 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.122.64.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 08:07:39.501967 2026] [security2:error] [pid 612:tid 612] [client 103.122.64.202:55949] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.122.64.202 (+1 hits since last alert)\|shannonraevocalstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "shannonraevocalstudio.com"] [uri "/xmlrpc.php"] [unique_id "aiqlC_nmkXqtwEzUpXM9cgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-06-11 11:03:36 (1 week ago)	(xmlrpc) Failed xmlrpc access from 103.122.64.202 (ID/Indonesia/-): 5 in the last 3600 secs (0-122)	Hacking
Anonymous	2026-06-11 10:34:13 (1 week ago)	Attac	Brute-Force

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.185.129.177

🇦🇷 190.105.220.104

🇺🇦 178.216.2.225

🇻🇳 171.225.193.32

🇸🇬 128.199.158.135

🇺🇸 66.132.172.155

🇻🇳 1.52.83.26

🇺🇸 207.90.244.21

🇧🇷 205.210.31.209

🇩🇪 193.124.20.250

🇸🇬 185.200.116.42

🇦🇷 179.37.153.11

🇩🇪 81.169.225.251

🇧🇬 79.124.58.142

🇺🇸 52.205.222.214

🇺🇸 45.41.178.140

🇺🇸 34.11.215.88

🇺🇸 2607:f8b0:4001:c17::129

🇮🇳 223.178.54.234

🇨🇱 181.42.131.193