JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.25.192.202

103.25.192.202 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 2%: ?

ISP	PT. Cahaya Buana Raksa
Usage Type	Fixed Line ISP
ASN	AS132652
Domain Name	cbr.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.25.192.202

Whois 103.25.192.202

IP Abuse Reports for 103.25.192.202:

This IP address has been reported a total of 12 times from 9 distinct sources. 103.25.192.202 was first reported on March 13th 2022, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 penjaga BRIN	2026-10-21 23:09:13 (5 days ago)	SQL injection attempt	SQL Injection
🇩🇪 Vegascosmetics	2026-06-21 21:08:15 (4 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 hermawan	2026-03-20 04:21:03 (7 months ago)	2026-03-20T11:21:03.138716+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ... show more 2026-03-20T11:21:03.138716+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=103.25.192.202 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=6194 DF PROTO=TCP SPT=58918 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Email Spam Hacking
🇺🇸 SiliSoftware	2026-03-19 14:01:22 (7 months ago)	/phpBB3/index.php?sid=b1a1be560139fa2a6d4cdbc9f8e684dd	Web App Attack
🇮🇳 Altis Shield	2025-12-01 07:56:44 (10 months ago)	Connection closed by 103.25.192.202 [preauth] or weird packet	Brute-Force SSH
🇵🇱 MatStef132	2025-05-20 09:53:22 (1 year ago)	Detected malicious connections: 10	DDoS Attack
Anonymous	2022-05-18 15:40:10 (4 years ago)	IP involved in HTTPS DDoS	DDoS Attack VPN IP Exploited Host
🇺🇸 Blue Pumpkin	2022-05-10 00:43:03 (4 years ago)	[Tue May 10 04:42:52.907520 2022] [:error] [pid 2808823] [client 103.25.192.202:0] [client 103.25.19 ... show more [Tue May 10 04:42:52.907520 2022] [:error] [pid 2808823] [client 103.25.192.202:0] [client 103.25.192.202] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluati ... show less	Brute-Force
🇺🇸 Blue Pumpkin	2022-05-07 15:21:57 (4 years ago)	[Sat May 07 19:21:35.980339 2022] [:error] [pid 881323] [client 103.25.192.202:0] [client 103.25.192 ... show more [Sat May 07 19:21:35.980339 2022] [:error] [pid 881323] [client 103.25.192.202:0] [client 103.25.192.202] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com"] [uri "/index.php"] [unique_id "YnbGvwcy_XUl2-pldq5fRwAAAGY"] [Sat May 07 19:21:47.885882 2022] [:error] [pid 881158] [client 103.25.192.202:0] [client 103.25.192.202] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.c ... show less	Brute-Force
🇺🇸 Blue Pumpkin	2022-05-07 03:10:29 (4 years ago)	103.25.192.202 - - [07/May/2022:07:10:28 +0000] "GET / HTTP/1.1" 200 10185 "-" "Mozilla/5.0 (compati ... show more 103.25.192.202 - - [07/May/2022:07:10:28 +0000] "GET / HTTP/1.1" 200 10185 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force
🇺🇸 Blue Pumpkin	2022-05-04 11:12:01 (4 years ago)	[Wed May 04 15:10:35.103435 2022] [:error] [pid 2985062] [client 103.25.192.202:0] [client 103.25.19 ... show more [Wed May 04 15:10:35.103435 2022] [:error] [pid 2985062] [client 103.25.192.202:0] [client 103.25.192.202] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai.com"] [uri "/index.php"] [unique_id "YnKXasYd91SeNn1a1SpRuAAAAHw"] [Wed May 04 15:11:43.966978 2022] [:error] [pid 2986428] [client 103.25.192.202:0] [client 103.25.192.202] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation"] [hostname "www.hey-ai ... show less	Brute-Force
🇺🇸 VSM Networks	2022-03-13 09:24:42 (4 years ago)	Credential Stuffing	Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.217.129.141

🇺🇸 151.240.93.18

🇨🇳 120.224.237.3

🇨🇳 120.198.23.233

🇮🇳 106.219.71.26

🇮🇩 69.5.20.133

🇺🇸 40.74.210.29

🇦🇷 207.191.165.131

🇸🇬 193.37.32.70

🇺🇸 156.225.64.56

🇸🇳 154.125.120.7

🇮🇳 117.195.205.201

🇧🇪 109.136.226.216

🇮🇳 106.219.172.218

🇮🇳 106.202.72.127

🇳🇱 77.67.26.4

🇲🇾 47.254.202.77

🇮🇩 43.133.139.6

🇺🇸 40.124.123.98

🇺🇸 40.119.25.141