JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.156.17.56

103.156.17.56 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS141077
Domain Name	apnic.net
Country	🇮🇩 Indonesia
City	Indramayu, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.156.17.56

Whois 103.156.17.56

IP Abuse Reports for 103.156.17.56:

This IP address has been reported a total of 45 times from 26 distinct sources. 103.156.17.56 was first reported on November 14th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-04-10 05:17:23 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇳 Mcshield.org	2025-12-01 08:21:39 (6 months ago)	UDP flood/amplification attempt srcport 52927 dstport 11211 length 1027	Fraud Orders Bad Web Bot
🇺🇸 1gz	2025-10-15 16:47:44 (7 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/3.0.195.17 Safari/532.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇺🇸 SuperEvilLuke	2025-10-07 23:55:22 (8 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host dash.embotic.xyz (GET HTTP/ ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:22Z (1 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 skycodee	2025-10-05 12:49:06 (8 months ago)	Repeated TLS handshake abuse against Pterodactyl Wings (port 8080)	DDoS Attack
🇩🇪 1gz	2025-10-01 20:30:50 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: //&tlBuMWFBKT&157l2dxWEH UA: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/418.8 (KHTML, like Gecko, Safari) Cheshire/1.0.UNOFFICIAL This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Silly Development	2025-09-20 22:57:20 (8 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.sillydev.co.uk (GET H ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-09-20T22:57:20Z (9 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 shabi	2025-09-15 12:30:03 (8 months ago)	IP: 103.156.17.56 [Country: ID] triggered WAF (l7ddos). Action: managed_challenge ASN: 141077 (RSTNE ... show more IP: 103.156.17.56 [Country: ID] triggered WAF (l7ddos). Action: managed_challenge ASN: 141077 (RSTNET-AS-ID RSTNET) Protocol: HTTP/2 (method GET) Endpoint: / Time: 2025-09-15T10:18:51Z User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 --- Report generated by CFWAF2AbuseIPDB. show less	DDoS Attack Web Spam Web App Attack
🇩🇪 CommanderRoot	2025-08-30 18:33:34 (9 months ago)	HTTP request flood	DDoS Attack Web Spam
🇬🇧 Silly Development	2025-08-26 15:55:32 (9 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.sillydev.co.uk (GET H ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-08-26T15:55:32Z (12 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-08-17 19:46:48 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-08-17 17:50:14 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_APACHE_403	Brute-Force SSH
🇬🇧 Silly Development	2025-08-10 00:59:03 (10 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host sillydev.co.uk (GET HTTP/2) ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host sillydev.co.uk (GET HTTP/2) @ 2025-08-10T00:59:03Z (3 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 SuperEvilLuke	2025-08-05 19:00:39 (10 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.embotic.xyz (GET HTTP ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:00:39Z (1 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 SuperEvilLuke	2025-08-05 19:00:15 (10 months ago)	Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.embotic.xyz (GET HTTP ... show more Malicious activity detected from 141077 RSTNET-AS-ID RSTNET towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:00:15Z (4 occurrences) show less	DDoS Attack Exploited Host

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 159.223.139.97

🇺🇸 91.242.125.86

🇫🇷 91.231.89.192

🇬🇧 81.106.181.248

🇹🇼 34.81.186.42

🇳🇱 20.160.86.7

🇷🇺 212.109.21.192

🇫🇮 194.238.57.104

🇺🇸 135.119.88.100

🇮🇩 124.158.184.101

🇻🇳 113.185.74.72

🇻🇳 113.172.123.80

🇫🇷 109.205.181.77

🇸🇬 101.47.141.193

🇸🇬 101.47.141.103

🇸🇬 101.47.141.12

🇺🇸 95.164.156.157

🇺🇸 94.131.64.223

🇺🇸 91.242.95.18

🇺🇸 74.115.172.118