JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.166.91.61

103.166.91.61 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 11%: ?

11%

ISP	PT Regynet Data Solusindo
Usage Type	Fixed Line ISP
ASN	AS141941
Domain Name	regynet.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.166.91.61

Whois 103.166.91.61

IP Abuse Reports for 103.166.91.61:

This IP address has been reported a total of 21 times from 16 distinct sources. 103.166.91.61 was first reported on October 9th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 filstal.org	2026-04-27 12:34:03 (1 month ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; PPC Mac OS X 10_6_4 rv:4.0; pt-BR) AppleWe ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; PPC Mac OS X 10_6_4 rv:4.0; pt-BR) AppleWebKit/532.22.3 (KHTML; like Gecko) Version/5.0 Safari/532.22.3). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-04-24 05:13:39 (1 month ago)	Fail2Ban: 103.166.91.61 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 103.166.91.61 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.6077.1564 Safari/537.36 show less	Bad Web Bot
🇮🇩 sockominfo	2026-04-08 13:00:48 (1 month ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 7.8/10 (HIGH). Confidence: 60%. CVSS v3.1: ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 7.8/10 (HIGH). Confidence: 60%. CVSS v3.1: 7.3/10 (High). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 93%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-08 12:00:59 (1 month ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.3/10 (MEDIUM). Reported by TangerangKota ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-08 11:01:05 (1 month ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.4/10 (MEDIUM). Reported by TangerangKota ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-08 10:00:57 (1 month ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.5/10 (MEDIUM). Reported by TangerangKota ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 6.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2026-03-29 20:12:19 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-28 20:12:18 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 COMPLEX	2026-03-05 20:16:35 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.142 Safari/537.36 show less	DDoS Attack Bad Web Bot
Anonymous	2026-03-02 15:30:32 (3 months ago)	\| [Dangerous/Indonesia] Agressive IP 103.166.91.61 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Indonesia] Agressive IP 103.166.91.61 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
Anonymous	2026-03-01 04:19:35 (3 months ago)	SQL Injection	SQL Injection
🇵🇱 IROK	2026-02-25 18:07:32 (3 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇫🇷 masterguru	2026-02-24 23:15:06 (3 months ago)	wp-comments-post.php request blocked, no referer. Pattern match "wp-comments-post.php" at REQUEST_UR ... show more wp-comments-post.php request blocked, no referer. Pattern match "wp-comments-post.php" at REQUEST_URI. (88520-193) show less	Hacking
🇮🇹 VHosting	2026-02-24 10:34:16 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇫🇷 dynamix	2026-02-24 09:42:12 (3 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.158

🇵🇰 72.255.3.154

🇨🇴 45.175.20.14

🇳🇱 185.223.235.22

🇺🇸 162.241.192.24

🇦🇺 162.158.164.181

🇺🇸 162.144.35.244

🇭🇰 152.32.252.113

🇨🇳 117.187.180.20

🇱🇹 81.30.98.144

🇺🇸 64.23.142.130

🇨🇳 27.222.219.179

🇩🇪 164.92.161.148

🇸🇬 146.190.105.93

🇺🇸 132.148.142.226

🇹🇼 114.34.106.146

🇦🇺 114.31.74.23

🇺🇸 108.181.2.217

🇺🇸 108.179.220.174

🇺🇸 98.84.169.122