JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.166.9.249

103.166.9.249

Activity Trending Down

20 reports found in our database

18% ▼ ▼ ▼ Caution

Abuse confidence score ?

ISP

PT Akses Bersama Sedaya

Usage Type

Fixed Line ISP

ASN

AS141978

Domain Name

aksessedaya.com

Country

🇮🇩 Indonesia

City

Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 103.166.9.249:

This IP address has been reported a total of 20 times from 14 distinct sources. 103.166.9.249 was first reported on September 15th 2023, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: United States of America with 3 reports; Germany with 1 report. The most common categories in these recent reports were: Bad Web Bot 3 times; DDoS Attack 2 times; Hacking 1 time; Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-08-30 13:03:33 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 20:31:48 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-20 15:03:23 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-07-19 00:31:04 (1 month ago)	Scanning for port/service exploits on tpc-027.mach3builders.nl	Port Scan Hacking
🇩🇪 botreporter	2026-06-28 12:17:10 (2 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇮🇩 hermawan	2026-05-28 03:31:15 (3 months ago)	[Thu May 28 10:30:48.456974 2026] [security2:error] [pid 323211:tid 139852205983424] [client 103.166 ... show more [Thu May 28 10:30:48.456974 2026] [security2:error] [pid 323211:tid 139852205983424] [client 103.166.9.249:18429] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "815"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /images/Klimatologi/Sertifikasi/BS_EN_ISO_9001_2015/PEFC-150.webp HTTP/2.0 Request URI RAW = /images/Klimatologi/Sertifikasi/BS_EN_ISO_9001_2015/PEFC-150.webp Request Basename = PEFC-150.webp"] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "cap ... show less	Email Spam Hacking
🇮🇹 VHosting	2026-05-27 11:38:28 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇬🇧 PeravixGroup	2026-05-10 09:18:39 (3 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
Anonymous	2026-05-03 01:13:25 (4 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-05-02 13:14:30 (4 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇮🇹 VHosting	2026-04-10 05:17:23 (4 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇩 hermawan	2026-02-22 18:00:48 (6 months ago)	[Mon Feb 23 01:00:47.745719 2026] [security2:error] [pid 3669:tid 139757280474816] [client 103.166.9 ... show more [Mon Feb 23 01:00:47.745719 2026] [security2:error] [pid 3669:tid 139757280474816] [client 103.166.9.249:53679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/var/" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "88"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: /var/ found within REQUEST_FILENAME: /var/www/index.php/profil/meteorologi/prakiraan-cuaca-harian-tiap-3-jam-sekali-per-kecamatan-di-provinsi-jawa-timur request_line = GET /var/www/index.php/profil/meteorologi/prakiraan-cuaca-harian-tiap-3-jam-sekali-per-kecamatan-di-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/var/www/index.php/profil/meteorologi/prakiraan-cuaca-harian-tiap-3-jam-sekali-per-kecamatan-di-provinsi-jawa-timur"] [unique_id "aZtET-L-05E4Wcw0OPeZpQAAgRg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[3694] [mEgYb60PRuo] [a ... show less	Web App Attack Hacking
🇮🇩 hermawan	2026-01-06 19:49:24 (8 months ago)	[Wed Jan 07 02:49:23.763460 2026] [security2:error] [pid 265659:tid 140119502743232] [client 103.166 ... show more [Wed Jan 07 02:49:23.763460 2026] [security2:error] [pid 265659:tid 140119502743232] [client 103.166.9.249:58883] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=623&id=555555659%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-april-02-mei-2017&start=120 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=623&id=555555659%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-april-02-mei-..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aV1nQ3VdQD15z ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-12 06:18:21 (9 months ago)	[Wed Nov 12 13:16:38.858024 2025] [security2:error] [pid 1070762:tid 139672247326400] [client 103.16 ... show more [Wed Nov 12 13:16:38.858024 2025] [security2:error] [pid 1070762:tid 139672247326400] [client 103.166.9.249:61555] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=478&id=837%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-5-11-januari-2016&start=110 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=478&id=837%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-5-11-januari-2016&start=110 Req..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aRQmRoZBDsFt ... show less	Hacking Web App Attack
🇺🇸 skycodee	2025-10-05 12:49:07 (11 months ago)	Repeated TLS handshake abuse against Pterodactyl Wings (port 8080)	DDoS Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇺🇸 161.35.9.47

🇨🇦 50.71.238.210

🇷🇴 2.57.122.209

🇺🇸 195.184.76.113

🇧🇷 179.182.176.102

🇲🇾 124.13.91.0

🇺🇸 57.141.20.66

🇺🇸 35.231.172.211

🇮🇱 34.165.154.12

🇺🇦 194.0.89.139

🇺🇦 176.98.8.165

🇮🇩 163.7.6.114

🇧🇪 80.200.186.58

🇻🇳 58.186.20.143

🇻🇳 42.113.152.200

🇺🇸 31.25.192.144

🇩🇪 195.230.103.244

🇳🇱 188.166.90.30

🇨🇴 186.1.175.194