JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 160.22.22.123

160.22.22.123 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 1%: ?

ISP	PT Sarana Digital Network
Usage Type	Fixed Line ISP
ASN	AS152802
Domain Name	sdnet.id
Country	🇮🇩 Indonesia
City	Ciampea, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 160.22.22.123

Whois 160.22.22.123

IP Abuse Reports for 160.22.22.123:

This IP address has been reported a total of 17 times from 8 distinct sources. 160.22.22.123 was first reported on February 22nd 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-05-27 06:12:44 (4 weeks ago)	684 limiting connections by zone (9m59s)	DDoS Attack
🇵🇹 PTnet	2025-12-07 06:22:17 (6 months ago)	DDoS Attack (jail:haproxy-https-flood)	DDoS Attack Exploited Host
🇵🇹 PTnet	2025-12-06 12:00:35 (6 months ago)	DDoS Attack (jail:haproxy-https-flood)	DDoS Attack Exploited Host
🇵🇹 PTnet	2025-12-04 20:02:56 (6 months ago)	DDoS Attack (jail:haproxy-https-flood)	DDoS Attack Exploited Host
🇺🇸 COMPLEX	2025-11-30 03:29:27 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 152802 (IDNIC-SDNET-AS-ID PT Sar ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 152802 (IDNIC-SDNET-AS-ID PT Sarana Digital Network) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇬🇧 Silly Development	2025-10-24 02:20:08 (8 months ago)	Malicious activity detected from 152802 IDNIC-SDNET-AS-ID PT Sarana Digital Network towards host sil ... show more Malicious activity detected from 152802 IDNIC-SDNET-AS-ID PT Sarana Digital Network towards host sillydev.co.uk (GET HTTP/2) @ 2025-10-24T02:20:08Z (8 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-08-30 11:03:13 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-08-22 23:24:16 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 ᴀʀᴛ	2025-07-22 10:47:28 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. ASN: 152802 (IDNIC-SDNET-AS-ID PT Sarana Digital Network) ... show more Triggered Cloudflare WAF (l7ddos) from ID. ASN: 152802 (IDNIC-SDNET-AS-ID PT Sarana Digital Network) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇺🇸 uira.live	2025-06-07 04:58:13 (1 year ago)	Malicious activity detected from 152802 IDNIC-SDNET-AS-ID PT Sarana Digital Network towards host pro ... show more Malicious activity detected from 152802 IDNIC-SDNET-AS-ID PT Sarana Digital Network towards host proxy5.uira.live (GET HTTP/2) @ 2025-06-07T04:58:13Z (7 occurrences) show less	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-05-25 16:22:54 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-05-22 17:05:06 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-05-18 12:17:39 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-05-10 17:56:10 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 hermawan	2025-05-06 18:01:26 (1 year ago)	[Wed May 07 00:58:28.622932 2025] [security2:error] [pid 214309:tid 140028464293568] [client 160.22. ... show more [Wed May 07 00:58:28.622932 2025] [security2:error] [pid 214309:tid 140028464293568] [client 160.22.22.123:45536] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2139"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data "Matched Data: , like Gecko) Version/4.0 Chrome/135.0.7049.111 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; V2249 Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/135.0.70 ... show less	Hacking Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 203.2.112.241

🇨🇳 118.145.238.60

🇺🇸 95.164.232.225

🇺🇸 95.164.232.97

🇺🇸 95.164.232.93

🇺🇸 95.164.232.59

🇺🇸 66.132.195.31

🇺🇸 65.49.20.93

🇺🇸 20.221.71.226

🇮🇹 217.112.105.43

🇵🇪 190.117.96.174

🇺🇸 95.164.232.165

🇺🇸 95.164.232.112

🇺🇸 95.164.232.10

🇪🇸 83.41.234.10

🇬🇧 68.183.42.235

🇺🇸 50.46.141.125

🇺🇸 45.207.180.254

🇹🇼 198.235.24.65

🇺🇸 195.184.76.129