JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.162.205.122

103.162.205.122 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 28%: ?

28%

ISP	PT Jaringan Inti Exadata
Usage Type	Fixed Line ISP
ASN	AS141664
Hostname(s)	ip-103-162-205-122.jiex.co.id
Domain Name	jiex.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.162.205.122

Whois 103.162.205.122

IP Abuse Reports for 103.162.205.122:

This IP address has been reported a total of 18 times from 12 distinct sources. 103.162.205.122 was first reported on October 23rd 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-09-10 06:20:35 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2026-09-10 06:18:27 (1 week ago)	2026/09/10 08:18:26 [error] 54272#100731: 4389447 access forbidden by rule, client: 103.162.205.122 ... show more 2026/09/10 08:18:26 [error] 54272#100731: 4389447 access forbidden by rule, client: 103.162.205.122, server: hondaforum.hu, request: "GET /robots.txt HTTP/1.1", host: "hondaforum.hu" ... show less	Web Spam
🇺🇸 gui-ying233	2026-08-30 06:33:19 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-27 16:07:57 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 11:33:48 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 David Koswari	2026-08-18 06:11:00 (1 month ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 kosada.com	2026-07-31 11:00:44 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-09 12:15:34 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
🇮🇹 VHosting	2026-04-26 12:23:07 (4 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-04-11 04:06:05 (5 months ago)	Scraping webshop URLs (www.badgehouder.nl), likely botnet drone	Bad Web Bot Exploited Host
Anonymous	2025-11-13 13:14:11 (10 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇮🇩 hermawan	2025-06-23 02:51:33 (1 year ago)	[Mon Jun 23 09:50:36.652129 2025] [security2:error] [pid 442183:tid 140372570248896] [client 103.162 ... show more [Mon Jun 23 09:50:36.652129 2025] [security2:error] [pid 442183:tid 140372570248896] [client 103.162.205.122:63935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "myactivity.google.com" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.15.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "455"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: myactivity.google.com found within REQUEST_HEADERS:Referer: https://myactivity.google.com/ request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2025/01_Januari_2025/03_Prakiraan_Curah_Hujan_Bulan_MEI_2025_di_Provinsi_Jawa_Timur-Update_dari_Analisis_Bulan_Januari_2025.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2025/01_Januari_2025/03_Prakiraa ... show less	Hacking Web App Attack
🇺🇸 octageeks.com	2025-06-12 04:06:16 (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇮🇩 hermawan	2025-05-06 01:21:39 (1 year ago)	[Tue May 06 08:20:30.433860 2025] [security2:error] [pid 1284402:tid 139967103739584] [client 103.16 ... show more [Tue May 06 08:20:30.433860 2025] [security2:error] [pid 1284402:tid 139967103739584] [client 103.162.205.122:54735] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "142"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ?start= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/component/tags/tag/analisis-bulanan?start=500 HTTP/2.0 Request URI RAW = /index.php/component/tags/tag/analisis-bulanan?start=500 Request Basename = analisis-bulanan"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/component/tags/tag/analisis-bulanan"] [unique_id "aBlj3uI1QcIRNI0O3UEN-wAAVjk"], referer https://scholar.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1288939] [+3Hoaz ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-05-03 06:35:40 (1 year ago)	[Sat May 03 12:01:59.211239 2025] [security2:error] [pid 414166:tid 140328881297088] [client 103.162 ... show more [Sat May 03 12:01:59.211239 2025] [security2:error] [pid 414166:tid 140328881297088] [client 103.162.205.122:63300] ModSecurity: Access denied with code 403 (phase 2). Match of "rx [0-9]\\\\s\\\\'\\\\s[0-9]" against "MATCHED_VAR" required. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "1747"] [id "932240"] [msg "Remote Command Execution: Unix Command Injection evasion attempt detected"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: s1746252078$o1 found within MATCHED_VAR: GS2.1.s1746252078$o1$g1$t1746252102$j0$l0$h0 request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/3-bulan-ke-depan/555561702-prakiraan-bulanan-curah-hujan-bulan-april-tahun-2025-update-dari-analisis-bulan-desember-tahun-2024-di-provinsi-jawa-timur HTTP/2.0 Request URI RAW = /index.php/prakiraan-iklim/prakiraan-bulanan/p..."] [severity "CRITICAL"] [ver "OWASP_C ... show less	Hacking Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 142.93.129.24

🇨🇳 117.50.199.249

🇺🇸 67.222.38.64

🇩🇪 47.245.138.141

🇺🇸 209.54.106.219

🇺🇸 199.96.165.25

🇺🇸 195.184.76.103

🇬🇧 193.32.209.239

🇨🇳 183.207.0.126

🇸🇪 172.160.227.37

🇮🇩 163.7.4.169

🇺🇸 162.216.149.248

🇷🇺 95.67.193.24

🇷🇴 92.118.39.93

🇧🇬 78.128.112.30

🇫🇷 62.210.142.177

🇨🇳 59.50.186.220

🇺🇸 47.251.255.46

🇺🇦 46.164.148.190

🇧🇷 45.188.121.202