JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.20.244.163

157.20.244.163 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 8%: ?

ISP	CV Buana Data Media
Usage Type	Fixed Line ISP
ASN	AS138089
Hostname(s)	IP-163.244.20.157.gmdp.net.id
Domain Name	buanadatamedia.web.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.20.244.163

Whois 157.20.244.163

IP Abuse Reports for 157.20.244.163:

This IP address has been reported a total of 36 times from 14 distinct sources. 157.20.244.163 was first reported on March 12th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-02 00:24:40 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 0d429b3d-f2c8-40a3-9b06-b2e886cf3c14	DDoS Attack
🇫🇷 Sklurk	2026-05-27 01:54:40 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2025-11-25 05:43:52 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-18 18:46:05 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-09-29 15:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
🇮🇩 hermawan	2025-08-12 15:57:45 (10 months ago)	[Tue Aug 12 22:56:28.392180 2025] [security2:error] [pid 269126:tid 140066929223360] [client 157.20. ... show more [Tue Aug 12 22:56:28.392180 2025] [security2:error] [pid 269126:tid 140066929223360] [client 157.20.244.163:38248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/138.0.7204.179 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; CPH238 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-08-06 15:53:07 (10 months ago)	[Wed Aug 06 22:52:16.956540 2025] [security2:error] [pid 667843:tid 139664416515776] [client 157.20. ... show more [Wed Aug 06 22:52:16.956540 2025] [security2:error] [pid 667843:tid 139664416515776] [client 157.20.244.163:3350] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/138.0.7204.168 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; CPH2387 ... show less	Hacking Web App Attack
🇳🇱 exxos	2025-08-02 02:22:22 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇫🇷 ᴀʀᴛ	2025-07-21 20:36:26 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. ASN: 138089 (GMDP-AS-ID PT.Global Media Data Prima) Proto ... show more Triggered Cloudflare WAF (l7ddos) from ID. ASN: 138089 (GMDP-AS-ID PT.Global Media Data Prima) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇩🇪 Tizian Maxime Weigt	2025-07-21 19:14:50 (11 months ago)	Incoming DDoS to port 443 (L7 HTTPS Flood) Detected	DDoS Attack
🇮🇩 hermawan	2025-07-17 12:03:11 (11 months ago)	[Thu Jul 17 19:01:59.410994 2025] [security2:error] [pid 316300:tid 139951952877248] [client 157.20. ... show more [Thu Jul 17 19:01:59.410994 2025] [security2:error] [pid 316300:tid 139951952877248] [client 157.20.244.163:34464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "myactivity.google.com" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "461"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: myactivity.google.com found within REQUEST_HEADERS:Referer: https://myactivity.google.com/ request_line = GET /images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Lampiran/6_Suhu_Permukaan_Laut_di_Wilayah_Perairan_Indonesia.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Lampiran/6_Suhu_Permukaan_Laut_di_Wilayah_Perairan_Indonesia.webp"] [unique_id "aHjmNwqJVJDBnhbY8bYfSQAAiAM"], referer https://myactivity.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[316304] [Gt ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-07-16 16:17:20 (11 months ago)	[Wed Jul 16 23:14:11.338931 2025] [security2:error] [pid 73131:tid 140135166019264] [client 157.20.2 ... show more [Wed Jul 16 23:14:11.338931 2025] [security2:error] [pid 73131:tid 140135166019264] [client 157.20.244.163:43398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "myactivity.google.com" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "461"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: myactivity.google.com found within REQUEST_HEADERS:Referer: https://myactivity.google.com/ request_line = GET /images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Lampiran/6_Suhu_Permukaan_Laut_di_Wilayah_Perairan_Indonesia.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/04_Prakiraan_6_Bulanan/Prakiraan_Musim/Lampiran/6_Suhu_Permukaan_Laut_di_Wilayah_Perairan_Indonesia.webp"] [unique_id "aHfP02o5gmqPLigPGid2BwAAUgA"], referer https://myactivity.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[73132] [YHTm ... show less	Hacking Web App Attack
🇺🇸 COMPLEX	2025-07-14 22:07:27 (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK ASN: 138089 (GMDP-AS-ID PT.Gl ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK ASN: 138089 (GMDP-AS-ID PT.Global Media Data Prima) Protocol: HTTP/1.1 (GET method) Endpoint: / show less	Bad Web Bot
🇬🇧 Silly Development	2025-07-13 01:39:10 (11 months ago)	Malicious activity detected from 138089 GMDP-AS-ID PT.Global Media Data Prima towards host panel.sil ... show more Malicious activity detected from 138089 GMDP-AS-ID PT.Global Media Data Prima towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-07-13T01:39:10Z (1 occurrences) show less	DDoS Attack Exploited Host

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.76.52.146

🇺🇸 151.240.46.250

🇨🇳 117.189.25.95

🇳🇱 45.156.128.179

🇫🇮 45.87.249.147

🇬🇧 35.203.210.93

🇺🇸 216.180.246.157

🇧🇷 201.222.20.20

🇿🇦 192.143.73.61

🇮🇩 180.242.196.75

🇨🇳 115.191.66.84

🇸🇬 101.47.156.170

🇺🇸 64.62.156.91

🇳🇱 52.174.67.71

🇧🇪 34.14.62.9

🇧🇪 158.173.67.193

🇺🇸 135.233.112.94

🇨🇳 111.225.214.171

🇱🇹 62.60.130.219

🇺🇸 45.79.191.178