JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.156.57.85

103.156.57.85 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 3%: ?

ISP	PT Filltech Antar Nusa
Usage Type	Fixed Line ISP
ASN	AS141083
Domain Name	filltech.net.id
Country	🇮🇩 Indonesia
City	Batam, Riau

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.156.57.85

Whois 103.156.57.85

IP Abuse Reports for 103.156.57.85:

This IP address has been reported a total of 21 times from 17 distinct sources. 103.156.57.85 was first reported on November 24th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 week ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 157cd6d7-1140-4c75-95c6-4a267aae4754	DDoS Attack
🇨🇭 Modules	2025-12-15 00:28:47 (5 months ago)	Open proxy http://103.156.57.85:1111 (RT:18674ms,Loc:Indonesia,ASN:AS141083)	Open Proxy
🇺🇸 SuperEvilLuke	2025-11-04 22:21:41 (7 months ago)	Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host das ... show more Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T22:21:41Z (4 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 SuperEvilLuke	2025-11-04 16:57:01 (7 months ago)	Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host das ... show more Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T16:57:01Z (35 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-11-01 13:11:42 (7 months ago)	Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host pan ... show more Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-11-01T13:11:42Z (4 occurrences) show less	DDoS Attack Exploited Host
Anonymous	2025-10-23 21:52:44 (7 months ago)	botnet	DDoS Attack
🇺🇸 SuperEvilLuke	2025-10-07 23:55:35 (8 months ago)	Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host das ... show more Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:35Z (6 occurrences) show less	DDoS Attack Exploited Host
🇷🇺 ago.su	2025-10-06 09:41:31 (8 months ago)	F2B blocked nginx activity control ddos v2 [otd]	DDoS Attack
🇺🇸 Audir8 \| RRHosting	2025-10-05 20:50:45 (8 months ago)	2025-10-05T20:48:01.556208rrhostingusa wings[2058776]: 2025/10/05 20:48:01 http: TLS handshake error ... show more 2025-10-05T20:48:01.556208rrhostingusa wings[2058776]: 2025/10/05 20:48:01 http: TLS handshake error from 103.156.57.85:38880: write tcp 10.0.0.206:8443->103.156.57.85:38880: write: broken pipe 2025-10-05T20:48:27.744271rrhostingusa wings[2058776]: 2025/10/05 20:48:27 http: TLS handshake error from 103.156.57.85:39189: write tcp 10.0.0.206:8443->103.156.57.85:39189: write: broken pipe 2025-10-05T20:49:07.448558rrhostingusa wings[2058776]: 2025/10/05 20:48:54 http: TLS handshake error from 103.156.57.85:39246: write tcp 10.0.0.206:8443->103.156.57.85:39246: write: broken pipe ... show less	Web App Attack
🇺🇸 skycodee	2025-10-05 12:49:06 (8 months ago)	Repeated TLS handshake abuse against Pterodactyl Wings (port 8080)	DDoS Attack
🇷🇺 ago.su	2025-10-03 17:59:25 (8 months ago)	F2B blocked nginx activity control ddos v2 [otd]	DDoS Attack
🇩🇪 1gz	2025-09-29 21:52:30 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/4.0 (compatible; MSIE 5.14; Mac_PowerPC) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Silly Development	2025-09-29 20:52:20 (8 months ago)	Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host sil ... show more Malicious activity detected from 141083 IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa towards host sillydev.co.uk (GET HTTP/2) @ 2025-09-29T20:52:20Z (1 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 yangfan	2025-09-15 12:30:36 (8 months ago)	IP: 103.156.57.85 [Country: ID] triggered WAF (l7ddos). Action: managed_challenge ASN: 141083 (IDNIC ... show more IP: 103.156.57.85 [Country: ID] triggered WAF (l7ddos). Action: managed_challenge ASN: 141083 (IDNIC-FILLTECH-AS-ID PT Filltech Antar Nusa) Protocol: HTTP/2 (method GET) Endpoint: / Time: 2025-09-15T10:18:48Z User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 --- Report generated by CFWAF2AbuseIPDB. show less	DDoS Attack Web Spam Web App Attack
🇧🇪 cmbplf	2025-09-14 16:20:06 (8 months ago)	859 limiting connections by zone (13m59sfromnow)	DDoS Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.241.129.184

🇺🇸 172.253.210.17

🇺🇸 157.245.161.179

🇭🇰 152.32.172.177

🇮🇳 147.93.168.136

🇺🇸 137.184.20.36

🇬🇧 134.209.191.184

🇨🇳 113.137.40.250

🇺🇸 107.150.105.116

🇮🇳 103.199.191.218

🇺🇸 64.62.156.77

🇨🇳 43.138.39.63

🇧🇷 201.62.61.157

🇲🇦 196.127.56.26

🇩🇪 185.137.164.17

🇳🇱 176.65.139.130

🇮🇳 144.16.144.93

🇨🇳 139.170.72.14

🇨🇳 101.96.225.252

🇬🇧 74.114.29.145