JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.156.141.55

103.156.141.55 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 0%: ?

ISP	PT Tekling Media Interkoneksi
Usage Type	Fixed Line ISP
ASN	AS149883
Domain Name	tekling.id
Country	🇮🇩 Indonesia
City	Jember, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.156.141.55

Whois 103.156.141.55

IP Abuse Reports for 103.156.141.55:

This IP address has been reported a total of 34 times from 15 distinct sources. 103.156.141.55 was first reported on March 28th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-04-30 23:49:55 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-04-29 13:01:42 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 Mailguard-FRD	2026-03-26 04:10:59 (2 months ago)	1774498259 - 03/26/2026 05:10:59 Host: 103.156.141.55/103.156.141.55 Port: 445 TCP Blocked ...	Port Scan
🇷🇴 abuse_IP_reporter	2026-03-20 11:45:02 (2 months ago)	Mar 20 12:46:32 server UFW BLOCK SRC=103.156.141.55 DF PROTO=TCP SPT=50584	Port Scan
🇷🇴 abuse_IP_reporter	2026-02-27 12:45:02 (3 months ago)	Feb 27 13:54:32 server UFW BLOCK SRC=103.156.141.55 DF PROTO=TCP SPT=62166	Port Scan
🇫🇷 bigorre.org	2025-12-07 13:55:57 (5 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇸🇰 GOVCERT	2025-11-22 15:07:38 (6 months ago)	Sweep Scan	Port Scan
🇮🇩 hermawan	2025-11-06 12:58:01 (6 months ago)	[Thu Nov 06 19:55:17.651889 2025] [security2:error] [pid 773868:tid 140567192258240] [client 103.156 ... show more [Thu Nov 06 19:55:17.651889 2025] [security2:error] [pid 773868:tid 140567192258240] [client 103.156.141.55:56588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "351"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: UTF-8 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/1_Apa_Itu_La_Nina-1.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Info/2024/1_Apa_Itu_La_Nina-1.jpg"] [unique_id "aQyatbj0DCTR6J-gszd3AwADBQI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[773871] [ilGqk2xMnXQ] [aQyatbj0DCTR6J-gszd3AwADBQI] keep_alive=[1] [2025-11-06 19:55:17.651896] [R:aQyatbj0DCTR6J-gszd3AwADBQI] UA:'ChatGPT/1.2025.294 (Android 15; TECNO CM7; build 252941 ... show less	Hacking Web App Attack
🇦🇩 bakunin1848	2025-11-01 12:22:04 (7 months ago)	Firewall IPS Detection on 01-11-2025 at 13:22:04	Port Scan Exploited Host
🇩🇪 Grizzlytools	2025-10-04 05:03:09 (8 months ago)	Kingcopy(AI-IDS)RouterOS: Portscanner detected.	Port Scan
🇩🇪 Packets-Decreaser.NET	2025-09-29 18:46:44 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-09-10 23:42:35 (8 months ago)	(mod_security) mod_security (id:217210) triggered by 103.156.141.55 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 103.156.141.55 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 19:42:28.737860 2025] [security2:error] [pid 16141:tid 16141] [client 103.156.141.55:43276] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.3dworld-wide.com\|F\|4"] [data "GET http://www.3dworld-wide.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.3dworld-wide.com"] [uri "/"] [unique_id "aMIM5BeL5aPqJBugnWpPzgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 Agrohim	2025-09-03 11:43:32 (9 months ago)	Gate B blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇦🇺 MAGIC	2024-12-18 01:00:42 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇲🇾 syokadmin	2024-12-13 09:03:55 (1 year ago)	103.156.141.55 (ID/Indonesia/-), 2 distributed smtpauth attacks on account [[email protected]] in ... show more 103.156.141.55 (ID/Indonesia/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:10ff:7::

🇳🇱 45.148.10.5

🇩🇪 209.38.245.167

🇵🇰 203.101.186.149

🇺🇸 162.216.149.225

🇨🇳 121.18.117.198

🇮🇳 103.203.36.234

🇺🇸 100.29.192.16

🇳🇱 45.156.128.149

🇫🇮 45.128.235.246

🇦🇺 34.40.145.110

🇬🇧 31.14.254.77

🇻🇳 14.228.96.175

🇷🇴 2.57.121.112

🇺🇸 2a03:2880:10ff:71::

🇩🇪 213.95.191.47

🇳🇱 176.65.139.84

🇳🇱 45.148.10.204

🇳🇱 45.148.10.157

🇬🇧 35.203.211.132