JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.166.107.2

103.166.107.2 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 7%: ?

ISP	PT Berlian Media Teknologi
Usage Type	Fixed Line ISP
ASN	AS141943
Domain Name	berlianteknologi.net
Country	🇮🇩 Indonesia
City	Samarinda, East Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.166.107.2

Whois 103.166.107.2

IP Abuse Reports for 103.166.107.2:

This IP address has been reported a total of 37 times from 20 distinct sources. 103.166.107.2 was first reported on May 10th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-04-26 00:09:25 (1 month ago)	Scanning for port/service exploits on tpc-004.mach3builders.nl	Port Scan Hacking
🇫🇷 Sklurk	2026-04-24 05:28:42 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-03-19 10:42:22 (2 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp show less	Exploited Host Bad Web Bot
🇮🇩 Burayot	2026-03-03 16:21:49 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 103.166.107.2 (ID/Indonesia/-): 2 ... show more LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 103.166.107.2 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2026-01-26 11:22:50 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 1gz	2025-10-15 16:56:12 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/4.0.219.3 Safari/532.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 SuperEvilLuke	2025-10-07 23:55:14 (7 months ago)	Malicious activity detected from 141943 IDNIC-BERLIANNET-AS-ID PT Berlian Media Teknologi towards ho ... show more Malicious activity detected from 141943 IDNIC-BERLIANNET-AS-ID PT Berlian Media Teknologi towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:14Z (1 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 skycodee	2025-10-05 12:49:06 (8 months ago)	Repeated TLS handshake abuse against Pterodactyl Wings (port 8080)	DDoS Attack
🇬🇧 Silly Development	2025-09-29 20:52:21 (8 months ago)	Malicious activity detected from 141943 IDNIC-BERLIANNET-AS-ID PT Berlian Media Teknologi towards ho ... show more Malicious activity detected from 141943 IDNIC-BERLIANNET-AS-ID PT Berlian Media Teknologi towards host sillydev.co.uk (GET HTTP/2) @ 2025-09-29T20:52:21Z (1 occurrences) show less	DDoS Attack Exploited Host
🇳🇱 exxos	2025-09-13 03:03:01 (8 months ago)	url-dynamic attacks	Brute-Force
🇪🇸 cuscusero (FlexBacks, FlexChar, FlexAve, FlexCDNM, FlexTudy, ColdHosting SL)	2025-09-10 12:47:20 (8 months ago)	[CPD ESP-BCN02-FW11-394] Suspicious connection detected on port 8080. DDoS detected	DDoS Attack Port Scan Brute-Force
🇮🇩 hermawan	2025-09-04 14:18:17 (9 months ago)	[Thu Sep 04 21:09:10.080674 2025] [security2:error] [pid 401347:tid 139836229842624] [client 103.166 ... show more [Thu Sep 04 21:09:10.080674 2025] [security2:error] [pid 401347:tid 139836229842624] [client 103.166.107.2:48412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "okhttp" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: okhttp found within REQUEST_HEADERS:User-Agent: okhttp/4.12.0 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Himbauan_Waspada_Suhu_Panas_Ekstrem-v2.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Himbauan_Waspada_Suhu_Panas_Ekstrem-v2.jpg"] [unique_id "aLmdhs2vzMH7rw0bDKlGmQAByRg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[401372] [ndvbQzqM80o] [aLmdhs2vzMH7rw0bDKlGmQAByRg] keep_alive=[1] [2025-09-04 21:09:10.080679] [R:aLmdh ... show less	Hacking Web App Attack
🇩🇪 CommanderRoot	2025-08-26 18:55:09 (9 months ago)	HTTP request flood	DDoS Attack Web Spam
🇩🇪 1gz	2025-08-23 05:00:13 (9 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.1 SUSE/6.0.428.0 (KHTML, like Gecko) Chrome/6.0.428.0 Safari/534.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-08-16 23:09:00 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2405:201:d026:494c:9547:b190:43c8:a1ce

🇬🇧 193.32.209.240

🇨🇳 183.147.206.41

🇺🇸 172.253.86.118

🇩🇪 164.90.166.179

🇯🇵 104.234.140.43

🇩🇪 92.42.96.57

🇺🇸 69.49.246.176

🇧🇷 45.183.92.232

🇬🇧 5.183.102.11

🇺🇸 162.216.149.139

🇨🇳 153.0.85.44

🇺🇸 134.122.125.153

🇮🇳 66.116.224.143

🇷🇺 45.147.202.53

🇬🇧 35.203.210.153

🇷🇴 2.57.122.238

🇺🇸 157.55.39.50

🇷🇺 94.103.87.20

🇺🇸 43.162.95.192