JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.153.42.56

103.153.42.56 was found in our database!

This IP was reported 1,769 times. Confidence of Abuse is 0%: ?

ISP	Universitas Binawan
Usage Type	University/College/School
ASN	AS140444
Hostname(s)	42.56.datahall.id
Domain Name	binawan.ac.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.153.42.56

Whois 103.153.42.56

IP Abuse Reports for 103.153.42.56:

This IP address has been reported a total of 1,769 times from 302 distinct sources. 103.153.42.56 was first reported on September 18th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-01-12 06:17:26 (5 months ago)	[AUTORAVALT][[12/01/2026 - 03:17:24 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103 ... show more [AUTORAVALT][[12/01/2026 - 03:17:24 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103.153.42.0 - 103.153.43.255] [;; communications error to 127.0.0.53#53: timed out ;; communications error to 127.0.0.53#53: timed out ;; no servers could be reached] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, in] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇺🇸 chronos	2026-01-05 06:18:08 (5 months ago)	[AUTORAVALT][[05/01/2026 - 03:18:07 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103 ... show more [AUTORAVALT][[05/01/2026 - 03:18:07 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103.153.42.0 - 103.153.43.255] [42.56.datahall.id] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sen] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇺🇸 chronos	2025-12-29 20:28:56 (5 months ago)	[AUTORAVALT][[29/12/2025 - 17:28:56 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103 ... show more [AUTORAVALT][[29/12/2025 - 17:28:56 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103.153.42.0 - 103.153.43.255] [42.56.datahall.id] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sen] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇺🇸 chronos	2025-12-29 06:17:40 (5 months ago)	[AUTORAVALT][[29/12/2025 - 03:17:39 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103 ... show more [AUTORAVALT][[29/12/2025 - 03:17:39 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103.153.42.0 - 103.153.43.255] [;; communications error to 127.0.0.53#53: timed out 42.56.datahall.id] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized ] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇺🇸 chronos	2025-12-22 06:17:21 (5 months ago)	[AUTORAVALT][[22/12/2025 - 03:17:21 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103 ... show more [AUTORAVALT][[22/12/2025 - 03:17:21 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103.153.42.0 - 103.153.43.255] [42.56.datahall.id] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sen] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇦🇺 brocococonut	2025-12-20 13:01:06 (6 months ago)	Dec 15 02:43:53 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in ... show more Dec 15 02:43:53 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=103.153.42.56, lip=67.219.110.53, session=<ySZ2XOtFwpNnmSo4> Dec 15 03:16:59 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=103.153.42.56, lip=67.219.110.53, session=<dPbi0utFKJlnmSo4> Dec 15 03:51:49 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=103.153.42.56, lip=67.219.110.53, session=<SZVqT+xFptRnmSo4> Dec 15 04:29:55 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=103.153.42.56, lip=67.219.110.53, session=<dp+t1+xFwKdnmSo4> Dec 15 05:08:31 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs ... show less	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-16 20:10:32 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-15 20:10:28 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 chronos	2025-12-15 06:17:35 (6 months ago)	[AUTORAVALT][[15/12/2025 - 03:17:35 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103 ... show more [AUTORAVALT][[15/12/2025 - 03:17:35 -03:00 UTC] Attack from [Atdy Rosyan] [103.153.42.56]-[RANGE:103.153.42.0 - 103.153.43.255] [42.56.datahall.id] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sen] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇫🇷 ✨	2025-12-15 01:52:16 (6 months ago)	Rule : POP 12/15/25 03:36:36 POPS 1244 103.153.42.56 OK Welcome to MailEnable POP3 Server 39 0 ... show more Rule : POP 12/15/25 03:36:36 POPS 1244 103.153.42.56 OK Welcome to MailEnable POP3 Server 39 0 12/15/25 03:36:36 POPS 1244 103.153.42.56 USER USER [email protected] OK 5 24 12/15/25 03:36:36 POPS 1244 103.153.42.56 PASS PASS * -ERR Unable to log on 23 17 show less	Port Scan Spoofing
🇩🇪 Marc	2025-12-15 01:36:33 (6 months ago)		Brute-Force
🇫🇷 ✨	2025-12-15 01:09:16 (6 months ago)	Rule : POP 12/15/25 00:59:27 POPS 1344 103.153.42.56 OK Welcome to MailEnable POP3 Server 39 0 ... show more Rule : POP 12/15/25 00:59:27 POPS 1344 103.153.42.56 OK Welcome to MailEnable POP3 Server 39 0 12/15/25 00:59:27 POPS 1344 103.153.42.56 USER USER [email protected] OK 5 30 12/15/25 00:59:27 POPS 1344 103.153.42.56 PASS PASS * -ERR Unable to log on 23 26 show less	Port Scan Spoofing
🇫🇷 ✨	2025-12-15 00:35:21 (6 months ago)	Rule : POP 12/15/25 05:58:46 POPS 1584 103.153.42.56 OK Welcome to MailEnable POP3 Server 39 0 ... show more Rule : POP 12/15/25 05:58:46 POPS 1584 103.153.42.56 OK Welcome to MailEnable POP3 Server 39 0 12/15/25 05:58:46 POPS 1584 103.153.42.56 USER USER [email protected] OK 5 32 12/15/25 05:58:46 POPS 1584 103.153.42.56 PASS PASS * -ERR Unable to log on 23 29 show less	Port Scan Spoofing
🇬🇧 [email protected]	2025-12-15 00:32:07 (6 months ago)	...	Brute-Force SSH
🇩🇪 initsol	2025-12-14 23:01:32 (6 months ago)	Dec 14 21:32:46 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user= ... show more Dec 14 21:32:46 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=103.153.42.56, lip=10.10.50.34, session=<MGK6Ze9F2JlnmSo4> Dec 14 22:46:46 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=103.153.42.56, lip=10.10.50.34, session=<xaRbbvBFyIFnmSo4> Dec 15 00:01:32 phoenix dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=103.153.42.56, lip=10.10.50.34, session=<iHnAefFFSphnmSo4> ... show less	Brute-Force

Showing 1 to 15 of 1769 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.196.4.129

🇦🇺 2406:da1c:dd:1702:5aca:c225:800a:f43

🇨🇳 223.100.224.75

🇧🇷 205.210.31.223

🇧🇷 205.210.31.215

🇺🇸 162.216.150.248

🇺🇸 64.225.17.153

🇺🇸 20.168.0.47

🇦🇫 149.54.62.170

🇺🇸 66.132.172.117

🇮🇳 168.144.95.137

🇮🇩 163.7.4.169

🇺🇸 103.153.183.69

🇺🇸 91.230.168.38

🇩🇪 84.55.0.182

🇺🇸 66.132.195.98

🇦🇷 45.173.212.236

🇹🇼 198.235.24.103

🇷🇼 197.243.14.52

🇺🇸 147.185.132.248