JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.151.12.125

103.151.12.125 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	GB Network Solutions Sdn. Bhd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132372
Domain Name	gbnetwork.my
Country	🇲🇾 Malaysia
City	Cyberjaya, Selangor

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.151.12.125

Whois 103.151.12.125

IP Abuse Reports for 103.151.12.125:

This IP address has been reported a total of 14 times from 4 distinct sources. 103.151.12.125 was first reported on July 9th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-06-26 06:14:35 (4 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇩 hermawan	2025-07-13 05:06:43 (1 year ago)	[Sun Jul 13 12:04:31.377561 2025] [security2:error] [pid 356470:tid 139831803877056] [client 103.151 ... show more [Sun Jul 13 12:04:31.377561 2025] [security2:error] [pid 356470:tid 139831803877056] [client 103.151.12.125:16015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/bsh.servlet" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /bsh.servlet found within REQUEST_FILENAME: /bsh.servlet.BshServlet request_line = POST /bsh.servlet.BshServlet HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/bsh.servlet.BshServlet"] [unique_id "aHM-X1V0ZlLXKv7CYLzilQAAAJA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[356513] [+tJ6eghq7lo] [aHM-X1V0ZlLXKv7CYLzilQAAAJA] keep_alive=[0] [2025-07-13 12:04:31.377566] [R:aHM-X1V0ZlLXKv7CYLzilQAAAJA] UA:'Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
🇮🇩 penjaga BRIN	2025-07-12 17:13:20 (1 year ago)	Supervisor XML RPC Command Injection Vulnerability(54862)	Web App Attack
🇮🇩 penjaga BRIN	2025-07-12 16:43:20 (1 year ago)	NUUO NVRmini2 Arbitrary PHP Code Execution Vulnerability(57978)	Web App Attack
🇮🇩 penjaga BRIN	2025-07-12 16:28:00 (1 year ago)	Oracle WebLogic wls9-async Remote Code Execution Vulnerability(55570)	Web App Attack
🇮🇩 hermawan	2025-07-12 09:32:16 (1 year ago)	[Sat Jul 12 16:32:11.174683 2025] [security2:error] [pid 226214:tid 139652119910080] [client 103.151 ... show more [Sat Jul 12 16:32:11.174683 2025] [security2:error] [pid 226214:tid 139652119910080] [client 103.151.12.125:11799] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "372"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 103.151.12.125 request_line = POST /GponForm/diag_Form?images/ HTTP/1.1 Request URI RAW = /GponForm/diag_Form?images/ Request Basename = diag_Form"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/GponForm/diag_Form"] [unique_id "aHIrm1ZflKGtKZpbANcx_QAAAFI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[226301] [SIPeGfhZ6NQ] [aHIrm1ZflKGtKZpbANcx_QAAAFI] keep_alive=[0] [2025-07-12 16:32:11.174690] [R:aHIrm1ZflKGtKZpbANcx_QAAAFI] UA:'Mozilla/5.0 (Mac OS X 13_2 ... show less	Hacking Web App Attack
🇮🇩 penjaga BRIN	2025-07-11 22:02:07 (1 year ago)	Common web attack.-111	Web App Attack
🇮🇩 hermawan	2025-07-11 18:19:10 (1 year ago)	[Sat Jul 12 01:17:07.488441 2025] [security2:error] [pid 144141:tid 140300559292096] [client 103.151 ... show more [Sat Jul 12 01:17:07.488441 2025] [security2:error] [pid 144141:tid 140300559292096] [client 103.151.12.125:26793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/debug" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /debug found within REQUEST_FILENAME: /debug.cgi request_line = GET /debug.cgi HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/debug.cgi"] [unique_id "aHFVI-j-Z_Ucuujb9Y7UtgAAAIk"], referer () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[144177] [YvhaUaswKro] [aHFVI-j-Z_Ucuujb9Y7UtgAAAIk] keep_alive=[0] [2025-07-12 01:17:07.488444] [R:aHFVI-j-Z_Ucuujb9Y7UtgAAAIk] UA:'Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36' Host:'staklim-ja ... show less	Hacking Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-07-11 11:56:34 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇮🇩 hermawan	2025-07-10 17:35:45 (1 year ago)	[Fri Jul 11 00:35:44.706122 2025] [security2:error] [pid 72588:tid 140158891349696] [client 103.151. ... show more [Fri Jul 11 00:35:44.706122 2025] [security2:error] [pid 72588:tid 140158891349696] [client 103.151.12.125:8803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Util" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "68"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: Util found within REQUEST_FILENAME: /oputilsServlet request_line = GET /oputilsServlet?action=getAPIKey HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/oputilsServlet"] [unique_id "aG_58NwBEWrke3JYmPedzgAAAAA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[72615] [uhGHn1b0fmA] [aG_58NwBEWrke3JYmPedzgAAAAA] keep_alive=[0] [2025-07-11 00:35:44.706125] [R:aG_58NwBEWrke3JYmPedzgAAAAA] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-09 20:05:58 (1 year ago)	[Thu Jul 10 03:05:11.777472 2025] [security2:error] [pid 52747:tid 140405585614528] [client 103.151. ... show more [Thu Jul 10 03:05:11.777472 2025] [security2:error] [pid 52747:tid 140405585614528] [client 103.151.12.125:18757] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "371"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 103.151.12.125 request_line = GET / HTTP/1.1 Request URI RAW = / Request Basename = "] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aG7Ld1LraM5tWeXNSk06LAAAAMU"], referer http://karangploso.jatim.bmkg.go.id [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[52779] [o08smIShldU] [aG7Ld1LraM5tWeXNSk06LAAAAMU] keep_alive=[0] [2025-07-10 03:05:11.777508] [R:aG7Ld1LraM5tWeXNSk06LAAAAMU] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100 ... show less	Hacking Web App Attack
🇮🇩 penjaga BRIN	2025-07-09 17:43:23 (1 year ago)	Apache Struts2 Redirect/Action Method Remote Code Execution Vulnerability(56944)	Web App Attack
🇮🇩 penjaga BRIN	2025-07-09 17:27:07 (1 year ago)	PHP CGI Query String Parameter Handling Information Disclosure Vulnerability(34804)	Web App Attack
🇮🇩 penjaga BRIN	2025-07-09 16:25:22 (1 year ago)	Bash Remote Code Execution Vulnerability(36729)	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.19.30.50

🇮🇳 173.205.68.180

🇻🇳 152.32.163.183

🇨🇴 69.6.234.27

🇺🇸 45.33.105.76

🇦🇺 189.81.53.243

🇺🇸 157.245.251.34

🇺🇸 107.180.88.176

🇷🇺 77.40.62.78

🇨🇳 58.242.64.246

🇺🇸 50.6.195.83

🇳🇱 45.148.10.141

🇸🇬 43.133.39.225

🇩🇪 31.76.57.198

🇺🇸 209.87.169.116

🇺🇸 173.239.213.12

🇳🇱 160.119.76.136

🇨🇳 111.56.196.49

🇺🇦 46.201.124.84

🇳🇱 45.148.10.121