JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.156.16.120

103.156.16.120 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 45%: ?

45%

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS141077
Domain Name	apnic.net
Country	🇮🇩 Indonesia
City	Maribaya, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.156.16.120

Whois 103.156.16.120

IP Abuse Reports for 103.156.16.120:

This IP address has been reported a total of 14 times from 12 distinct sources. 103.156.16.120 was first reported on October 12th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-04 16:30:23 (2 hours ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
Anonymous	2026-06-04 09:30:17 (9 hours ago)	\| [Dangerous/Indonesia] Aggressive IP 103.156.16.120 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Aggressive IP 103.156.16.120 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 FreeMyIP	2026-06-02 20:19:22 (1 day ago)	Jun 2 16:19:21 dns-1 postfix/smtpd[3325398]: warning: unknown[103.156.16.120]: SASL PLAIN authentic ... show more Jun 2 16:19:21 dns-1 postfix/smtpd[3325398]: warning: unknown[103.156.16.120]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇫🇷 Sklurk	2026-05-30 01:35:34 (5 days ago)	Web App Attack	Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 week ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇦🇹 urnilxfgbez	2026-05-17 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-05-10 08:20:14 (3 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇦🇹 urnilxfgbez	2026-05-04 22:45:00 (4 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇯🇵 Kinsei Engineering Inc.	2026-04-24 10:43:33 (1 month ago)	UFW:High-frequency access to unused ports	Port Scan
Anonymous	2026-03-10 14:28:39 (2 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp show less	Exploited Host Bad Web Bot
🇺🇸 SiliSoftware	2026-02-16 13:04:34 (3 months ago)	/phpBB3/app.php/help/faq?sid=90b89294637d1a2447670a9f380de870	Web App Attack
🇪🇸 el-brujo	2025-12-23 05:10:00 (5 months ago)	DDoS Attack Layer 7	DDoS Attack
🇮🇩 hermawan	2025-11-11 20:44:00 (6 months ago)	[Wed Nov 12 03:41:26.355412 2025] [security2:error] [pid 494625:tid 139672331171520] [client 103.156 ... show more [Wed Nov 12 03:41:26.355412 2025] [security2:error] [pid 494625:tid 139672331171520] [client 103.156.16.120:5840] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "199"] [id "40236"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: /index.php?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php?id=2197 HTTP/2.0 Request URI RAW = /index.php?id=2197 Request Basename = index.php"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aROfdqLvcHnYgS-W-euoigAARgs"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[494637] [qB7yqxcRp0E] [aROfdqLvcHnYgS-W-euoigAARgs] keep_alive=[1] [2025-11-12 03:41:26.355415] [R:aROfdqLvcHnYgS-W-euoigAARgs ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-12 23:45:26 (7 months ago)	[Mon Oct 13 06:44:25.410379 2025] [security2:error] [pid 717988:tid 139978481788608] [client 103.156 ... show more [Mon Oct 13 06:44:25.410379 2025] [security2:error] [pid 717988:tid 139978481788608] [client 103.156.16.120:53084] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=620&id=2398%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-24-30-januari-2017&start=120 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=620&id=2398%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-24-30-januari-2017&start=120..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOw9WfYY_FIV ... show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:2:d1:0:1:51da:6001

🇮🇹 149.22.91.85

🇺🇸 205.210.31.55

🇪🇬 197.49.31.129

🇪🇬 196.218.240.133

🇺🇸 147.185.132.49

🇫🇷 144.91.91.231

🇮🇳 103.160.197.242

🇵🇰 103.125.177.231

🇷🇺 185.16.214.226

🇦🇷 181.117.161.71

🇺🇸 162.216.150.104

🇳🇱 158.94.210.75

🇮🇳 154.61.69.74

🇩🇪 141.11.250.239

🇺🇸 74.7.242.137

🇺🇸 66.132.186.129

🇬🇧 35.203.211.254

🇬🇧 35.203.210.182

🇫🇷 34.155.121.179