JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.59.160.179

103.59.160.179 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 67%: ?

67%

ISP	PT Gunung Sedayu Sentosa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150493
Hostname(s)	ip-103-59-160-179.indovm.com
Domain Name	gss.biz.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.59.160.179

Whois 103.59.160.179

IP Abuse Reports for 103.59.160.179:

This IP address has been reported a total of 125 times from 79 distinct sources. 103.59.160.179 was first reported on November 18th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-07-12 16:01:18 (2 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Admin-Gito	2026-07-12 12:38:03 (6 hours ago)	103.59.160.179 - - [12/Jul/2026:14:34:22 +0200] "GET /wp-includes/class-walker-nav-menu.php HTTP/1.1 ... show more 103.59.160.179 - - [12/Jul/2026:14:34:22 +0200] "GET /wp-includes/class-walker-nav-menu.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.160.179 - - [12/Jul/2026:14:34:23 +0200] "GET /wp-includes/feed-rss2.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.160.179 - - [12/Jul/2026:14:34:24 +0200] "GET /wp-includes/class-walker-page-dropdown.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.160.179 - - [12/Jul/2026:14:34:24 +0200] "GET /wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.160.179 - - [12/Jul/2026:14:34:26 +0200] "GET /wp-includes/class-feed.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.160.179 - - [12/Jul/2026:14:34:26 +0200] "GET /wp-includes/meta.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.160.179 - - [12/Jul/2026:14:34:28 +0200] "GET /wp-inclu ... show less	Web App Attack
🇪🇸 masterguru	2026-07-11 18:43:09 (23 hours ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇬🇧 consul.to	2026-07-11 12:32:18 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 cmbplf	2026-07-11 10:18:48 (1 day ago)	31.257 requests in 1 hour (4w1d23h)	Brute-Force Bad Web Bot
🇫🇷 Sklurk	2026-07-11 02:23:30 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 jkhorvath.com	2026-07-10 23:37:30 (1 day ago)	Request for URL /login	Phishing Brute-Force Web App Attack
🇺🇸 dtorrer	2026-07-10 13:10:40 (2 days ago)	General vulnerability scan.	Port Scan
🇳🇱 Site.eu	2026-07-10 08:34:22 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇮🇹 ciccio diddo	2026-07-09 13:17:01 (3 days ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-07-07 00:52:58 (5 days ago)	Aggressive web search of vulnerable pages: /wp-content/uploads/wpforms/ /wp-content/uploads/wp-conte ... show more Aggressive web search of vulnerable pages: /wp-content/uploads/wpforms/ /wp-content/uploads/wp-content/ /wp-content/uploads/2020/wp-content/upl ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 10:56:44 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.59.160.179 (ip-103-59-160-179.indovm.com): ... show more (mod_security) mod_security (id:225170) triggered by 103.59.160.179 (ip-103-59-160-179.indovm.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 06:56:39.560058 2026] [security2:error] [pid 27503:tid 27503] [client 103.59.160.179:49455] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.newcastle91.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.newcastle91.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "akjm5xw_qgjS4GsH7zTsHgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 06:06:20 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.59.160.179 (ip-103-59-160-179.indovm.com): ... show more (mod_security) mod_security (id:225170) triggered by 103.59.160.179 (ip-103-59-160-179.indovm.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 02:06:14.193512 2026] [security2:error] [pid 30691:tid 30714] [client 103.59.160.179:52998] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.asetiadi.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.asetiadi.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "akX_1gwI59jBgJ31SHTgXgAAANU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:19:20 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.59.160.179 (ip-103-59-160-179.indovm.com): ... show more (mod_security) mod_security (id:225170) triggered by 103.59.160.179 (ip-103-59-160-179.indovm.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:19:13.404212 2026] [security2:error] [pid 27988:tid 27988] [client 103.59.160.179:51026] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.method1.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.method1.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "akXYsTcONuChBv2TlUvyUwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 01:59:10 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.59.160.179 (ip-103-59-160-179.indovm.com): ... show more (mod_security) mod_security (id:225170) triggered by 103.59.160.179 (ip-103-59-160-179.indovm.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 21:59:01.944655 2026] [security2:error] [pid 29002:tid 29002] [client 103.59.160.179:51286] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rwabutazafoundation.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rwabutazafoundation.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "akXF5QBDs5NKp8zPsNAUkgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 81.30.98.142

🇧🇷 205.210.31.193

🇳🇱 195.178.110.228

🇸🇬 185.200.116.68

🇻🇳 180.93.246.62

🇵🇱 91.226.70.218

🇺🇸 43.173.127.205

🇺🇸 24.151.144.255

🇷🇴 2.57.121.112

🇷🇺 82.202.131.224

🇺🇸 81.30.98.193

🇰🇷 58.229.180.107

🇳🇱 45.148.10.157

🇳🇱 185.242.226.18

🇺🇸 130.51.22.28

🇵🇰 119.73.117.180

🇺🇸 167.172.31.98

🇧🇪 198.235.24.172

🇨🇳 183.147.38.173

🇺🇸 165.22.173.97