JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.156.164.5

103.156.164.5 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 48%: ?

48%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Padalarang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.156.164.5

Whois 103.156.164.5

IP Abuse Reports for 103.156.164.5:

This IP address has been reported a total of 98 times from 47 distinct sources. 103.156.164.5 was first reported on May 27th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-17 01:15:18 (1 day ago)	Blocked by UFW (TCP on 9101) Source port: 20103 TTL: 116 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 20103 TTL: 116 Packet length: 52 TOS: 0x00 This report (for 103.156.164.5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-16 07:25:37 (1 day ago)	Blocked by UFW (TCP on 9101) Source port: 26775 TTL: 115 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 26775 TTL: 115 Packet length: 52 TOS: 0x00 This report (for 103.156.164.5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Tilellit.PRO	2026-07-13 11:34:10 (4 days ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇪🇸 librebit	2026-07-11 03:22:08 (1 week ago)	Brute force	Brute-Force
Anonymous	2026-07-07 15:33:28 (1 week ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=20&p=2&q=AC+USB+212+EU&rating=6&stock=1 \| UA: Mozilla/5.0 (compatible; MSIE 5.0; Windows NT 10.0; Trident/5.1) \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-07-07 15:13:02 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-07-06 07:20:45 (1 week ago)	Web App Attack	Web App Attack
🇩🇪 Vegascosmetics	2026-06-26 18:33:46 (3 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-07 18:54:51 (1 month ago)	2026-06-07 18:54:51 warning[2555638]: host [103.156.164.5]: unauthorized access attempted: ... show more 2026-06-07 18:54:51 warning[2555638]: host [103.156.164.5]: unauthorized access attempted: / show less	Port Scan Brute-Force
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 4acf41a8-b801-4675-a9cd-4cf95dcec3e7	DDoS Attack
🇺🇸 RAP	2026-05-23 03:55:03 (1 month ago)	2026-05-23 03:55:03 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇦🇺 MAGIC	2026-05-01 01:30:57 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-19 07:50:09 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 103.156.164.5 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 103.156.164.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 03:50:03.657243 2026] [security2:error] [pid 2922497:tid 2922497] [client 103.156.164.5:12630] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|plazahacienda.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "plazahacienda.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeSJK3vs10BlNDjT9k1PBwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-14 12:35:54 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 103.156.164.5 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 103.156.164.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 08:35:47.136105 2026] [security2:error] [pid 1604579:tid 1604579] [client 103.156.164.5:50774] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|riser-astrology.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "riser-astrology.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad40o-2zyUPNFJ1OUX3AhgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-04-14 12:25:47 (3 months ago)	Unauthorized access to webpage admin	Web App Attack

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.101

🇨🇳 180.76.202.69

🇺🇸 173.211.30.242

🇺🇸 65.49.20.74

🇳🇱 45.94.31.73

🇨🇴 206.62.136.109

🇺🇸 200.10.46.131

🇹🇼 198.235.24.71

🇬🇧 194.50.235.151

🇲🇴 182.93.50.90

🇳🇱 176.65.148.2

🇺🇸 172.56.91.1

🇵🇭 165.101.254.164

🇭🇰 156.225.1.99

🇹🇭 147.50.103.212

🇨🇳 114.220.238.21

🇻🇳 103.167.89.222

🇺🇸 91.230.168.130

🇺🇸 74.249.128.189

🇺🇸 45.79.211.97