JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.162.221.132

Activity Trending Down

Abuse Confidence Score

26% Elevated

27 reports

15 reporters · latest 1 week ago

ISP: PT Madiun Multimedia
Usage Type: Fixed Line ISP
ASN: AS139952
Domain Name: madiunmultimedia.co.id
Country: 🇮🇩 Indonesia
City: Madiun, East Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

27 from 15 distinct reporters

First reported

May 30th 2024

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 1 🇮🇩 Indonesia 1 🇸🇪 Sweden 1

Most common categories Hacking 2 DDoS Attack 2 Bad Web Bot 1 Brute-Force 1 Email Spam 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 SkyDancer	2026-11-04 23:38:36 UTC · (1 week ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx	Hacking Brute-Force SSH
🇨🇭 ALPHANET	2026-11-04 05:50:13 UTC · (1 week ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇮🇩 hermawan	2026-11-04 03:45:37 UTC · (1 week ago)	[Wed Nov 04 10:45:36.871490 2026] [security2:error] [pid 336125:tid 139767136110272] [client 103.162.221.132:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/ ... show more [Wed Nov 04 10:45:36.871490 2026] [security2:error] [pid 336125:tid 139767136110272] [client 103.162.221.132:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=489&id=1037%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-21-27-juni-2016&start=50 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=489&id=1037%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-21-27-juni-2016&start=50 Req..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "auqqYEuAt5 ... show less	Email Spam Hacking
🇺🇸 kosada.com	2026-10-29 21:47:20 UTC · (2 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[43]=28&topics[44]=41&topics[45]=42&topics[46]=34 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[43]=28&topics[44]=41&topics[45]=42&topics[46]=34 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-26 06:31:10 UTC · (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-23 14:41:22 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-05-26 11:36:17 UTC · (5 months ago)	[Tue May 26 18:36:16.364043 2026] [security2:error] [pid 1304476:tid 140290749818560] [client 103.162.221.132:55778] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/et ... show more [Tue May 26 18:36:16.364043 2026] [security2:error] [pid 1304476:tid 140290749818560] [client 103.162.221.132:55778] ModSecurity: Access denied with code 403 (phase 1). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "857"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: GET found within REQUEST_HEADERS: 1 request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0 Request URI RAW = /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan..."] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi" ... show less	Email Spam Hacking
🇬🇧 PeravixGroup	2026-05-24 11:57:14 UTC · (5 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud	Hacking Exploited Host
Anonymous	2025-11-20 06:38:38 UTC · (11 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-11-06 22:36:16 UTC · (1 year ago)	[Fri Nov 07 03:16:22.022535 2025] [security2:error] [pid 1140092:tid 140567099987648] [client 103.162.221.132:37256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "okhttp" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/co ... show more [Fri Nov 07 03:16:22.022535 2025] [security2:error] [pid 1140092:tid 140567099987648] [client 103.162.221.132:37256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "okhttp" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "246"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: okhttp found within REQUEST_HEADERS:User-Agent: okhttp/4.12.0 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/1_Apa_Itu_La_Nina-1.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/1_Apa_Itu_La_Nina-1.jpg"] [unique_id "aQ0CFlfNN4xNZK0ECswv4wAC0gE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1140094] [IYcTvXJob2o] [aQ0CFlfNN4xNZK0ECswv4wAC0gE] keep_alive=[1] [2025-11-07 03:16:22.022550] [R:aQ0CFlfNN4xNZK0ECswv4wAC0gE] UA:'okhttp/4.12.0' Host:'staklim-jatim.bmkg.go.i ... show less	Hacking Web App Attack
🇮🇩 Incidents Response Neptus Team	2025-11-01 22:58:00 UTC · (1 year ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
Anonymous	2025-07-30 22:24:23 UTC · (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 RAP	2025-07-23 12:14:27 UTC · (1 year ago)	2025-07-23 12:14:27 UTC Unauthorized activity to TCP port 445. SMB	Port Scan
🇳🇱 AutoBlockIP	2025-06-05 08:39:49 UTC · (1 year ago)	Exploited Host. Botnet attack detected (tcp/25)	Phishing Email Spam Brute-Force Exploited Host
🇦🇺 MAGIC	2025-05-27 15:00:49 UTC · (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.20

🇺🇸 129.82.138.44

🇨🇳 113.24.225.168

🇸🇪 83.191.181.23

🇺🇸 45.140.206.190

🇬🇧 35.203.210.229

🇺🇸 216.25.89.94

🇦🇷 190.183.134.53

🇧🇷 179.48.84.230

🇫🇮 147.185.133.210

🇬🇧 87.106.65.126

🇧🇬 78.128.113.74

🇩🇪 69.5.169.161

🇺🇸 64.16.133.60

🇧🇪 35.206.132.190

🇩🇪 34.40.43.1

🇸🇪 31.208.21.85

🇰🇷 13.125.216.206

🇧🇷 190.111.129.158

🇭🇳 181.115.118.158