JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.121.103.56

103.121.103.56 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	PT. Cyberindo Aditama
Usage Type	Fixed Line ISP
ASN	AS135478
Domain Name	cbn.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.121.103.56

Whois 103.121.103.56

IP Abuse Reports for 103.121.103.56:

This IP address has been reported a total of 16 times from 6 distinct sources. 103.121.103.56 was first reported on January 24th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-02-11 16:00:44 (3 months ago)	Access to sensitive configuration files success.. Threat Score: 5.5/10 (MEDIUM). Reported by Tangera ... show more Access to sensitive configuration files success.. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-11 15:00:45 (3 months ago)	Access to sensitive configuration files success.. Threat Score: 5.6/10 (MEDIUM). Reported by Tangera ... show more Access to sensitive configuration files success.. Threat Score: 5.6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-11 08:00:12 (3 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 hermawan	2026-02-11 06:40:02 (3 months ago)	[Wed Feb 11 13:39:16.601050 2026] [security2:error] [pid 460597:tid 140560522278592] [client 103.121 ... show more [Wed Feb 11 13:39:16.601050 2026] [security2:error] [pid 460597:tid 140560522278592] [client 103.121.103.56:28193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "358"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: utf-8 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aYwkFNzs2vUIrFqywTeYtAAAAEQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[460628] [y56KoUYNnvI] [aYwkFNzs2vUIrFqywTeYtAAAAEQ] keep_alive=[0] [2026-02-11 13:39:16.601056] [R:aYwkFNzs2vUIrFqywTeYtAAAAEQ] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-09 08:00:58 (3 months ago)	Access to sensitive configuration files success.. Threat Score: 6.4/10 (MEDIUM). Reported by Tangera ... show more Access to sensitive configuration files success.. Threat Score: 6.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-09 03:24:29 (3 months ago)	[WAZUH] Multiple Access to sensitive files in 60s	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-09 03:00:46 (3 months ago)	Access to sensitive configuration files success.. Threat Score: 6.7/10 (MEDIUM). Reported by Tangera ... show more Access to sensitive configuration files success.. Threat Score: 6.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-09 02:00:45 (3 months ago)	Access to sensitive configuration files success.. Threat Score: 6.9/10 (MEDIUM). Reported by Tangera ... show more Access to sensitive configuration files success.. Threat Score: 6.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-09 00:00:11 (3 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-02-08 18:48:59 (3 months ago)	103.121.103.56 - - [08/Feb/2026:20:48:58 +0200] "GET /.env HTTP/1.1" 404 331 "-" "Mozilla/5.0" 103.1 ... show more 103.121.103.56 - - [08/Feb/2026:20:48:58 +0200] "GET /.env HTTP/1.1" 404 331 "-" "Mozilla/5.0" 103.121.103.56 - - [08/Feb/2026:20:48:59 +0200] "GET /laravel/.env HTTP/1.1" 404 251 "-" "Mozilla/5.0" ... show less	Web App Attack
🇮🇩 sockominfo	2026-02-04 13:00:02 (4 months ago)	Suspicious user agent detected python-requests/2.31.0, Persistent Attack Attempt to CMS OPD Sites.. ... show more Suspicious user agent detected python-requests/2.31.0, Persistent Attack Attempt to CMS OPD Sites.. Threat Score: 8.8/10 (CRITICAL). CVSS: 7/10 (High). Bayesian: 99%. MITRE: T1190. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-04 12:00:16 (4 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-04 11:00:02 (4 months ago)	Suspicious user agent detected python-requests/2.31.0, Persistent Attack Attempt to CMS OPD Sites.. ... show more Suspicious user agent detected python-requests/2.31.0, Persistent Attack Attempt to CMS OPD Sites.. Threat Score: 8.5/10 (CRITICAL). CVSS: 7/10 (High). Bayesian: 98%. MITRE: T1190. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 titis.blitarkab	2026-02-04 02:02:00 (4 months ago)	scanner memeklo.hitam	Hacking Bad Web Bot Exploited Host Web App Attack
🇮🇩 Burayot	2026-01-26 07:05:48 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.121.103.56 (ID/Indonesia/-): 1 i ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.121.103.56 (ID/Indonesia/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.117.227.60

🇧🇷 167.249.81.223

🇨🇳 115.190.227.186

🇮🇳 110.224.175.38

🇮🇹 64.64.108.45

🇺🇸 43.135.148.92

🇺🇸 8.229.27.44

🇷🇴 2.57.122.177

🇳🇱 192.142.24.17

🇺🇸 188.213.202.147

🇬🇧 185.216.145.171

🇺🇸 172.98.33.35

🇯🇵 156.227.235.173

🇮🇩 103.165.139.145

🇧🇩 103.26.136.173

🇳🇱 81.19.216.108

🇹🇿 41.59.197.232

🇺🇸 40.90.234.147

🇺🇸 35.252.241.178

🇧🇪 34.156.61.86