JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.156.16.193

103.156.16.193 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 8%: ?

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS141077
Domain Name	apnic.net
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.156.16.193

Whois 103.156.16.193

IP Abuse Reports for 103.156.16.193:

This IP address has been reported a total of 53 times from 18 distinct sources. 103.156.16.193 was first reported on April 5th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ByeByte API	2026-05-16 17:34:29 (1 month ago)	byebyte.space auth: Rate-limit escalation at 2026-05-16T17:34:29Z: 8 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-16T17:34:29Z: 8 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.33 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/17.3'. Accept-Language: 'en,es;q=0.9,zh-CN;q=0.8,zh;q=0.7,pt;q=0.6'. Accept-Encoding: 'gzip, br'. Sec-Ch-Ua: '"Google Chrome";v="125", "Chromium";v="125", "Not.A/Brand";v="24"'. Platform: "Windows" (mobile=?0). Connection: Keep-Alive. Referer: 'https://google.com/'. Country (CF): ID. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:02:03 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
Anonymous	2026-03-24 10:20:07 (2 months ago)	\| [Dangerous/Indonesia] Aggressive IP 103.156.16.193 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Aggressive IP 103.156.16.193 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇧🇬 cheatmaster.store	2026-02-26 05:14:20 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Indonesia Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇺🇸 COMPLEX	2026-01-26 01:07:18 (4 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: undefined (undefined) Protocol: ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:146.0) Gecko/146.0 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇸🇬 Fn4ticHz	2026-01-11 05:53:07 (5 months ago)	repeated ddos targeted archive.dstat.id -- ZeroGuard	DDoS Attack
🇮🇹 VHosting	2025-12-30 13:28:16 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇬🇧 Silly Development	2025-12-25 21:03:45 (5 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host sillydev.co.uk (GET HTTP/2) ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host sillydev.co.uk (GET HTTP/2) @ 2025-12-25T21:03:45Z (3 occurrences) show less	DDoS Attack Exploited Host
🇨🇦 1gz	2025-12-11 21:38:11 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /auth/login UA: JDKwi3juUkLBItE This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2025-12-09 18:19:33 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141077 (RSTNET-AS-ID RSTNET) Pro ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141077 (RSTNET-AS-ID RSTNET) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 01:44:35 (7 months ago)	ASN: 141077 (RSTNET-AS-ID RSTNET) Botnet Zombie: This IP has been detected as a botnet zombie \| Outb ... show more ASN: 141077 (RSTNET-AS-ID RSTNET) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇺🇸 SuperEvilLuke	2025-11-04 21:59:21 (7 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host dash.embotic.xyz (GET HTTP/ ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T21:59:21Z (6 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-11-01 13:11:43 (7 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.sillydev.co.uk (GET H ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-11-01T13:11:43Z (2 occurrences) show less	DDoS Attack Exploited Host
🇸🇬 Vano Ganzzz	2025-10-25 11:27:36 (7 months ago)	Triggered Cloudflare WAF (ratelimit) from ID. Action taken: BLOCK ASN: 141077 (RSTNET-AS-ID RSTNET) ... show more Triggered Cloudflare WAF (ratelimit) from ID. Action taken: BLOCK ASN: 141077 (RSTNET-AS-ID RSTNET) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-10-25T11:27:36Z Ray ID: 99415d9c4af2fd0a UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 SuperEvilLuke	2025-10-07 23:55:05 (8 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host dash.embotic.xyz (GET HTTP/ ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:05Z (2 occurrences) show less	DDoS Attack Exploited Host

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.19.3.34

🇳🇱 176.65.132.24

🇺🇸 161.115.235.19

🇹🇳 102.152.15.101

🇫🇷 45.8.133.184

🇺🇸 185.223.152.54

🇨🇴 148.222.199.208

🇺🇸 107.150.103.210

🇬🇧 79.79.203.13

🇺🇸 68.225.188.80

🇺🇸 54.145.201.186

🇨🇳 39.171.74.87

🇬🇧 2.102.201.12

🇺🇸 172.56.114.252

🇨🇳 115.190.209.194

🇩🇪 104.248.39.188

🇺🇸 98.57.205.32

🇺🇸 73.175.113.246

🇨🇳 60.188.58.133

🇳🇱 45.148.10.152