JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.114.52.81

103.114.52.81 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 72%: ?

72%

ISP	PT. GEMILANG SARANA MANDIRI
Usage Type	Fixed Line ISP
ASN	AS45305
Domain Name	gsmnet.id
Country	🇮🇩 Indonesia
City	Surakarta, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.114.52.81

Whois 103.114.52.81

IP Abuse Reports for 103.114.52.81:

This IP address has been reported a total of 38 times from 31 distinct sources. 103.114.52.81 was first reported on November 13th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 brechtr	2026-10-17 00:52:27 (3 hours ago)	[Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login. ... show more [Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login.php show less	Brute-Force
🇬🇧 gigatech	2026-10-15 02:35:05 (2 days ago)	Webserver Probing	Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 18:22:23 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 103.114.52.81 (host-103-114-52-81.ldp.net.id): ... show more (mod_security) mod_security (id:225170) triggered by 103.114.52.81 (host-103-114-52-81.ldp.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:22:16.240648 2026] [security2:error] [pid 4258:tid 4258] [client 103.114.52.81:58552] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|loneoakhoney.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "loneoakhoney.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as_IWPAFGHk7KMt3aklmOwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-10-09 04:15:43 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 Tilellit.PRO	2026-10-09 00:08:21 (1 week ago)	Fail2Ban banned 103.114.52.81 for security violations in jail wp-armour. Log: 2026/10/09 00:08:21 [e ... show more Fail2Ban banned 103.114.52.81 for security violations in jail wp-armour. Log: 2026/10/09 00:08:21 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 103.114.52.81 \| Target: wplogin" , client: 103.114.52.81, server: [REDACTED], request: "POST /wp-login.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇲🇹 Malta	2026-10-08 09:33:22 (1 week ago)	103.114.52.81 - - [08/Oct/2026:11:33:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 103.114.52.81 - - [08/Oct/2026:11:33:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 ger-stg-sifi1	2026-10-08 09:18:54 (1 week ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-10-07 06:34:48 (1 week ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 edgeshield	2026-10-03 20:53:51 (1 week ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
Anonymous	2026-10-03 05:00:12 (1 week ago)	Web probing (2 hits in 24h) on cuypersinvalkenburg.nl,default-vhost: sensitive-path scans and/or 404 ... show more Web probing (2 hits in 24h) on cuypersinvalkenburg.nl,default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON. show less	Web App Attack
🇨🇭 backslash	2026-10-03 02:33:02 (2 weeks ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
Anonymous	2026-10-03 01:53:26 (2 weeks ago)	Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shi ... show more Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shield HTTP event export; 94 requests from this client IP between 2026-10-03T01:48:44.836+00:00 and 2026-10-03T01:53:26.891+00:00; peak 23 requests in one UTC calendar second. Methods: POST=94. Top paths (host and payment IDs redacted): /api/v1/integration/ (94). JA4: t13d1515h2_8daaf6152771_e4c2b8c727f2. CDN actions: Blocked=94. Counts refer to the supplied log window. show less	DDoS Attack
🇬🇧 compute	2026-10-02 08:19:27 (2 weeks ago)	Participated in a distributed HTTP flood (L7 DDoS) against 10x.gg on 2026-10-02 08:19:25-08:20:09 UT ... show more Participated in a distributed HTTP flood (L7 DDoS) against 10x.gg on 2026-10-02 08:19:25-08:20:09 UTC. 135 requests from this IP to a single API endpoint (GET .../funding), HTTP/2 via Cloudflare (CF-Connecting-IP), spoofed browser UA + rotated referrers. nginx rate-limited (HTTP 429). First seen 2026-10-02T08:19:27+00:00. Part of a 1,572-IP rented-proxy pool; this IP had no other traffic to the site that day. show less	DDoS Attack Bad Web Bot
🇩🇪 edgeshield	2026-09-26 06:04:54 (2 weeks ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
🇺🇸 鬼影233	2026-09-22 04:47:09 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 172.68.210.76

🇧🇼 168.167.228.85

🇺🇸 159.65.97.79

🇷🇴 92.118.39.71

🇳🇱 213.126.211.10

🇺🇸 173.244.60.139

🇺🇸 172.236.228.224

🇺🇸 167.160.58.32

🇭🇰 123.58.215.196

🇺🇸 100.54.217.213

🇬🇧 86.38.187.60

🇬🇧 86.38.187.5

🇩🇪 80.91.223.114

🇬🇧 77.67.26.220

🇮🇩 36.94.228.17

🇺🇸 34.68.90.159

🇺🇸 20.42.99.8

🇬🇧 172.68.229.63

🇬🇧 86.38.187.227

🇺🇸 75.127.6.2