JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.195.142.239

103.195.142.239 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 0%: ?

ISP	Universitas Hasanuddin
Usage Type	University/College/School
ASN	AS134614
Domain Name	unhas.ac.id
Country	🇮🇩 Indonesia
City	Makassar, South Sulawesi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.195.142.239

Whois 103.195.142.239

IP Abuse Reports for 103.195.142.239:

This IP address has been reported a total of 29 times from 17 distinct sources. 103.195.142.239 was first reported on April 25th 2023, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 titis.blitarkab	2025-10-22 02:54:00 (7 months ago)	?+config-create+/&lang=../../../../../../../../../../../usr/local/lib/php/pearcmd&/safedog()+JhTv9zo ... show more ?+config-create+/&lang=../../../../../../../../../../../usr/local/lib/php/pearcmd&/safedog()+JhTv9zoDk2.log show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-20 23:53:51 (7 months ago)	[Tue Oct 21 06:52:49.187478 2025] [security2:error] [pid 695105:tid 140228202317504] [client 103.195 ... show more [Tue Oct 21 06:52:49.187478 2025] [security2:error] [pid 695105:tid 140228202317504] [client 103.195.142.239:50987] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=474&id=896%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-16-22-pebruari-2016&start=160 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=474&id=896%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-16-22-pebruari-2016&start=160..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aPbLUaMtAJZ ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-13 03:58:15 (8 months ago)	[Mon Oct 13 10:57:28.750290 2025] [security2:error] [pid 1006588:tid 139978467133120] [client 103.19 ... show more [Mon Oct 13 10:57:28.750290 2025] [security2:error] [pid 1006588:tid 139978467133120] [client 103.195.142.239:54708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "okhttp" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: okhttp found within REQUEST_HEADERS:User-Agent: okhttp/4.12.0 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2023/Mengenal_Fenomena_El_Nino_Yang_Mengancam_Indonesia.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2023/Mengenal_Fenomena_El_Nino_Yang_Mengancam_Indonesia.jpg"] [unique_id "aOx4qO-aNrzWe1kPs7-ANAACWAo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1006599] [tAcYRIJ6z2k] [aOx4qO-aNrzWe1kPs7-ANAACWAo] keep_alive=[1] [2025-10-13 10:57:28.750304] [R ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-08-29 06:08:49 (9 months ago)	[Fri Aug 29 13:08:03.399694 2025] [security2:error] [pid 274554:tid 140522178979520] [client 103.195 ... show more [Fri Aug 29 13:08:03.399694 2025] [security2:error] [pid 274554:tid 140522178979520] [client 103.195.142.239:43362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "okhttp" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: okhttp found within REQUEST_HEADERS:User-Agent: okhttp/4.12.0 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2023/Mengenal_Fenomena_El_Nino_Yang_Mengancam_Indonesia.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2023/Mengenal_Fenomena_El_Nino_Yang_Mengancam_Indonesia.jpg"] [unique_id "aLFDw1UqHLeNZrFXaRQXtgAAEAU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[274560] [g0Q32DpSChk] [aLFDw1UqHLeNZrFXaRQXtgAAEAU] keep_alive=[1] [2025-08-29 13:08:03.399701] [R:a ... show less	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2025-07-18 16:07:44 (11 months ago)	list.rtbh.com.tr report: tcp/1433	Brute-Force
Anonymous	2025-07-09 08:49:22 (11 months ago)	Ports: 20,21,22,25,53,80,110,143,443,465,587,993,995,2083,2087,2095,2096; Direction: 0; Trigger: LF_ ... show more Ports: 20,21,22,25,53,80,110,143,443,465,587,993,995,2083,2087,2095,2096; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-06-22 08:07:16 (11 months ago)	list.rtbh.com.tr report: tcp/1433	Brute-Force
🇹🇷 rtbh.com.tr	2025-06-12 16:07:06 (1 year ago)	list.rtbh.com.tr report: tcp/1433	Brute-Force
🇪🇸 el-brujo	2025-06-12 14:17:46 (1 year ago)	06/12/2025-16:17:46.742955 103.195.142.239 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	Hacking
🇹🇷 rtbh.com.tr	2025-04-24 12:06:16 (1 year ago)	list.rtbh.com.tr report: tcp/1433	Brute-Force
🇩🇪 Mailguard-FRD	2025-04-22 05:09:39 (1 year ago)	1745298578 - 04/22/2025 07:09:38 Host: 103.195.142.239/103.195.142.239 Port: 1088 TCP Blocked ...	Port Scan
Anonymous	2025-03-17 03:02:19 (1 year ago)	Web attack	Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-03-11 08:49:02 (1 year ago)	list.rtbh.com.tr report: tcp/1433	Brute-Force
🇩🇪 iNetWorker	2025-03-05 05:20:18 (1 year ago)	firewall-block, port(s): 1433/tcp	Port Scan
🇧🇷 diego	2025-02-27 07:40:06 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 121.189.198.60

🇩🇪 44.148.195.153

🇳🇱 31.56.209.218

🇨🇳 14.103.111.110

🇨🇳 222.137.145.191

🇧🇷 189.90.26.112

🇨🇴 143.105.99.3

🇩🇪 141.11.45.97

🇨🇳 121.229.156.77

🇫🇷 54.38.241.200

🇳🇱 45.148.10.152

🇺🇸 44.181.164.246

🇭🇰 23.91.97.170

🇺🇸 20.163.39.86

🇮🇳 182.95.181.166

🇧🇷 177.99.193.135

🇩🇪 172.253.1.222

🇨🇳 120.208.39.199

🇩🇰 104.28.166.152

🇵🇱 95.214.53.157