JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.111.56

103.163.111.56 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 37%: ?

37%

ISP	PT Galunggung Access Solutions
Usage Type	Fixed Line ISP
ASN	AS141930
Domain Name	gas.net.id
Country	🇮🇩 Indonesia
City	Wangunsari, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.111.56

Whois 103.163.111.56

IP Abuse Reports for 103.163.111.56:

This IP address has been reported a total of 27 times from 23 distinct sources. 103.163.111.56 was first reported on November 2nd 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-22 06:58:13 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 pltcldvlpr	2026-06-15 09:10:29 (1 week ago)	Bogus Useragent: 103.163.111.56 - - [14/Jun/2026:15:30:35 +0200] "GET /protocol?id=bb_3_41&paragraph ... show more Bogus Useragent: 103.163.111.56 - - [14/Jun/2026:15:30:35 +0200] "GET /protocol?id=bb_3_41&paragraph=37920&seq=981 HTTP/1.1" 444 0 "-" "Opera/9.61.(Windows NT 5.2; or-IN) Presto/2.9.160 Version/12.00" asn=141930 org="PT Galunggung Access Solutions" country=ID ... show less	Bad Web Bot
🇦🇺 MAGIC	2026-06-02 01:32:38 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇷🇴 Fn4ticHz	2026-05-30 15:41:16 (3 weeks ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇧🇪 cmbplf	2026-05-30 09:11:47 (3 weeks ago)	589 limiting connections by zone (10m59s)	DDoS Attack
🇮🇩 hermawan	2026-05-29 16:12:25 (3 weeks ago)	[Fri May 29 23:12:21.579147 2026] [security2:error] [pid 110532:tid 140230285850304] [client 103.163 ... show more [Fri May 29 23:12:21.579147 2026] [security2:error] [pid 110532:tid 140230285850304] [client 103.163.111.56:35068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "ahm65RJ9ZBb1HyTXaUS9-QABAQA"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[110533] [GBYNHDe3Ae0] [ahm65RJ9ZBb1HyTXaUS9-QABAQA] keep_alive=[1] [2026-05-29 23:12:21.579153] [R:ahm65RJ9ZBb1HyTX ... show less	Email Spam Hacking
🇫🇷 MatStef132	2026-05-22 14:04:50 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-concentration-ip-threshold)	Bad Web Bot
🇷🇴 Fn4ticHz	2026-05-09 14:01:41 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇷🇴 INTEQ	2026-04-27 06:47:07 (1 month ago)	Web attack from 103.163.111.56	Web App Attack
🇮🇹 VHosting	2026-04-26 13:14:15 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:09:38 (2 months ago)	103.163.111.56 - - [05/Apr/2026:16:48:14 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.c ... show more 103.163.111.56 - - [05/Apr/2026:16:48:14 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.163.111.56 - - [05/Apr/2026:16:50:14 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.163.111.56 - - [05/Apr/2026:17:24:43 +0200] "GET /web/login HTTP/1.1" 499 0 "https://shop.linksuper.uk/about" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.163.111.56 - - [05/Apr/2026:17:28:14 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.reddit.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.163.111.56 - - [05/Apr/2026:17:39:07 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Window ... show less	DDoS Attack
Anonymous	2026-03-11 09:45:54 (3 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Exploited Host Bad Web Bot
🇺🇸 COMPLEX	2026-03-05 20:16:36 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.142 Safari/537.36 show less	DDoS Attack Bad Web Bot
Anonymous	2026-03-02 15:00:35 (3 months ago)	\| [Dangerous/Indonesia] Agressive IP 103.163.111.56 (~30 hits). Type: DoS Defender- Web server 400 e ... show more \| [Dangerous/Indonesia] Agressive IP 103.163.111.56 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
Anonymous	2026-02-22 03:40:29 (4 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.205.12.248

🇩🇪 165.154.138.3

🇨🇳 106.12.6.79

🇳🇱 91.92.40.7

🇩🇪 69.5.169.137

🇩🇪 216.26.249.208

🇬🇧 193.176.29.6

🇨🇳 183.252.52.227

🇰🇷 175.201.203.220

🇳🇱 136.144.136.8

🇨🇳 120.229.184.74

🇩🇪 94.26.106.214

🇩🇪 69.5.169.247

🇳🇱 45.142.193.164

🇩🇪 45.3.45.211

🇺🇸 44.91.133.82

🇸🇪 44.5.99.52

🇨🇦 20.63.8.12

🇺🇸 18.207.115.75

🇳🇱 213.152.161.54