JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.25.111.162

103.25.111.162

Neutral Activity

32 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

PT. Indonesia Comnet Plus

Usage Type

Fixed Line ISP

ASN

AS9341

Domain Name

iconpln.net.id

Country

🇮🇩 Indonesia

City

Bandung, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.25.111.162 has been reported 32 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.25.111.162:

This IP address has been reported a total of 32 times from 23 distinct sources. 103.25.111.162 was first reported on February 29th 2024, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-08 12:45:12 (2 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61	DDoS Attack
🇳🇱 EGP Abuse Dept	2026-02-23 04:56:38 (6 months ago)	Scanning for port/service exploits on tpc-003.mach3builders.nl	Port Scan Hacking
🇨🇦 4everEvolving WPM	2025-10-27 15:44:00 (10 months ago)	PT Indonesia Comnets Plus, JL PLN EHV Gandul Cinere, Depok 16512 +62-21-753-2488 abuse@iconpln. ... show more PT Indonesia Comnets Plus, JL PLN EHV Gandul Cinere, Depok 16512 +62-21-753-2488 [email protected] show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-10-16 13:42:22 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 103.25.111.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.25.111.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 09:42:16.901857 2025] [security2:error] [pid 6855:tid 6855] [client 103.25.111.162:53612] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPD2OMSRPdR5AoPffJAp6QAAAAA"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2025-10-08 11:46:14 (10 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-10-07 08:20:38 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 103.25.111.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.25.111.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 07 04:20:31.064624 2025] [security2:error] [pid 343201:tid 343201] [client 103.25.111.162:33688] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOTNT6O3mQrRk8nRIvia1gAAABM"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 antikirra	2025-09-13 07:04:58 (11 months ago)	Proxy Port Scanning	Port Scan
🇮🇹 VHosting	2025-08-27 11:30:14 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇬🇧 Apache	2025-08-23 10:07:58 (1 year ago)	(mod_security) mod_security (id:217200) triggered by 103.25.111.162 (ID/Indonesia/-): 5 in the last ... show more (mod_security) mod_security (id:217200) triggered by 103.25.111.162 (ID/Indonesia/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-08-14 23:59:48 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.25.111.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.25.111.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 14 19:59:45.009406 2025] [security2:error] [pid 22156:tid 22156] [client 103.25.111.162:48072] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|staben.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aJ54cWXY4xosZkGBfgHYfwAAAAM"], referer: https://staben.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-12 05:12:13 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.25.111.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.25.111.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 12 01:12:08.211680 2025] [security2:error] [pid 23176:tid 23176] [client 103.25.111.162:43477] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|method1.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "method1.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aJrNKLPytM716gkokrLZMgAAABE"], referer: https://method1.net/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 KIsmay	2025-06-27 15:53:29 (1 year ago)	Jun 27 08:52:51 ismay WPAudit[2529659]: 103.25.111.162 christinesutherland.com "Mozilla/5.0 (Windows ... show more Jun 27 08:52:51 ismay WPAudit[2529659]: 103.25.111.162 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" admin:Paige FAIL Jun 27 08:53:02 ismay WPAudit[2527671]: 103.25.111.162 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" info:Paige FAIL Jun 27 08:53:11 ismay WPAudit[2527671]: 103.25.111.162 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" [email protected]:Paige FAIL Jun 27 08:53:20 ismay WPAudit[2529658]: 103.25.111.162 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" sutherlandproductions.com:Paige FAIL Jun 27 08:53:29 ismay WPAudit[2529658]: 103.25.111.162 christinesutherland.com "Mozilla/5.0 (Windows ... show less	Brute-Force Web App Attack
🇺🇸 nowyouknow	2025-06-11 02:18:20 (1 year ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-06-10 18:33:53 (1 year ago)	(From [email protected])	Phishing Web Spam

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.73.176

🇩🇪 193.124.20.226

🇺🇸 162.216.150.227

🇸🇬 161.118.232.83

🇭🇰 154.201.66.175

🇸🇮 102.220.160.113

🇧🇪 198.235.24.223

🇧🇪 198.235.24.216

🇸🇬 194.61.40.134

🇺🇸 157.245.85.61

🇭🇰 150.241.237.49

🇳🇱 142.93.143.8

🇸🇬 140.245.102.95

🇺🇸 107.152.44.215

🇺🇸 50.118.240.116

🇪🇸 23.90.188.183

🇸🇬 8.219.165.219

🇺🇸 208.75.123.182

🇧🇪 198.235.24.215

🇿🇦 196.22.142.47