JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.22.99.1

103.22.99.1 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 11%: ?

11%

ISP	PT Lintas Data Prima
Usage Type	Fixed Line ISP
ASN	AS45305
Hostname(s)	host-103-22-99-1.ldp-net-id
Domain Name	ldp.net.id
Country	🇮🇩 Indonesia
City	Ponorogo, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.22.99.1

Whois 103.22.99.1

IP Abuse Reports for 103.22.99.1:

This IP address has been reported a total of 13 times from 9 distinct sources. 103.22.99.1 was first reported on August 4th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 stechusa	2026-07-15 13:09:34 (1 month ago)	ELEVATED_THREAT \| 598 IPs targeting /brand.html \| URL template shared by 256 IPs: /brand.html?bulb_s ... show more ELEVATED_THREAT \| 598 IPs targeting /brand.html \| URL template shared by 256 IPs: /brand.html?bulb_shape=&bulb_shape_type=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.97, unique_ips=844) show less	Bad Web Bot DDoS Attack
🇺🇸 kosada.com	2026-07-06 15:55:30 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-07-01 16:37:41 (1 month ago)	07/01/2026-23:37:36.902712 [Drop] [] [1:3100024081:0] Suricata match TLS ja3 scan Uniq Zeek no 24 ... show more 07/01/2026-23:37:36.902712 [Drop] [] [1:3100024081:0] Suricata match TLS ja3 scan Uniq Zeek no 24081 with hash_7094b0d5b83dec3f4072bbf49e4b480a [**] [Classification: (null)] [Priority: 3] {TCP} 103.22.99.1:35192 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇩🇪 Vegascosmetics	2026-06-15 13:14:50 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 hermawan	2026-06-03 09:57:58 (2 months ago)	[Wed Jun 03 16:57:54.423577 2026] [security2:error] [pid 249998:tid 140183165933248] [client 103.22. ... show more [Wed Jun 03 16:57:54.423577 2026] [security2:error] [pid 249998:tid 140183165933248] [client 103.22.99.1:50184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim"] [unique_id "ah_6ouGLrkxoiSj-rScJ6AAADw8"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[250014] [JVn5dRbY4hM] [ah_6ouGLrkxoiSj-rScJ6AAADw8] keep_alive=[1] [2026-06-03 16:57:54.423581] [R:ah_6ouGLrkxoiSj-rScJ6AAADw8] UA:' ... show less	Email Spam Hacking
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (8 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇮🇩 hermawan	2025-12-10 03:38:41 (8 months ago)	[Wed Dec 10 10:37:56.466359 2025] [security2:error] [pid 376930:tid 140235759851200] [client 103.22. ... show more [Wed Dec 10 10:37:56.466359 2025] [security2:error] [pid 376930:tid 140235759851200] [client 103.22.99.1:40539] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=474&id=517%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-april-4-mei-2015&start=130 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=474&id=517%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-april-4-mei-2015&start=130 ..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aTjrFM6A_mAXU3r ... show less	Hacking Web App Attack
Anonymous	2025-11-24 19:16:17 (8 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-18 09:50:46 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇨🇭 backslash	2025-08-15 04:25:06 (1 year ago)		Bad Web Bot
🇮🇪 psifas.co.il	2023-11-23 23:47:43 (2 years ago)	A recent login attempt failed. Details of the attempt are below. Date/Time: 24/11/2023 01:47:34 Use ... show more A recent login attempt failed. Details of the attempt are below. Date/Time: 24/11/2023 01:47:34 Username: ' or 1=1 limit 1 -- -+ IP Address: 103.22.99.1 Hostname: host-103-22-99-1.ldp-net-id show less	SQL Injection
🇮🇪 psifas.co.il	2023-09-03 17:11:33 (2 years ago)	A recent login attempt failed. Details of the attempt are below. Date/Time: 03/09/2023 20:11:26 Use ... show more A recent login attempt failed. Details of the attempt are below. Date/Time: 03/09/2023 20:11:26 Username: '=''or'@gmail.com IP Address: 103.22.99.1 Hostname: host-103-22-99-1.ldp-net-id show less	SQL Injection
🇩🇪 niceshops.com	2023-08-04 00:00:10 (3 years ago)	Web Attack (Aug 23 23:37:39 ScriptKiddie: request for /xmlrpc.php )	SQL Injection Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.151

🇭🇰 2406:da1e:4b7:e602:8e4b:5c72:37be:6d1e

🇦🇲 212.73.75.82

🇨🇳 182.96.86.139

🇫🇷 141.94.19.216

🇳🇵 103.182.174.48

🇺🇸 103.143.10.140

🇬🇧 88.97.196.79

🇷🇴 2.57.121.112

🇨🇳 182.107.125.99

🇷🇺 176.118.0.135

🇨🇳 117.62.59.59

🇮🇳 103.207.9.246

🇨🇳 60.210.124.201

🇳🇱 45.153.34.165

🇺🇿 202.79.187.243

🇨🇳 182.125.21.177

🇮🇩 182.10.130.91

🇨🇴 177.93.37.82

🇺🇿 144.124.196.15