JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.59.161.106

103.59.161.106 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 38%: ?

38%

ISP	PT Gunung Sedayu Sentosa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150493
Hostname(s)	ip-103-59-161-106.indovm.com
Domain Name	gss.biz.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.59.161.106

Whois 103.59.161.106

IP Abuse Reports for 103.59.161.106:

This IP address has been reported a total of 13 times from 8 distinct sources. 103.59.161.106 was first reported on March 18th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-07-23 04:01:27 (2 days ago)	IM360 WAF: Unauthenticated file upload / RCE in Joomla SP Page Builder asset.uploadCustomIcon (CVE-2 ... show more IM360 WAF: Unauthenticated file upload / RCE in Joomla SP Page Builder asset.uploadCustomIcon (CVE-2026-48908) MV:/index.php show less	Hacking
🇨🇭 zynex	2026-07-21 19:41:27 (3 days ago)	URL Probing: /index.php	Web App Attack
🇩🇪 MStarz	2026-07-21 09:37:00 (3 days ago)	Multiple attacks on Joomla sppagebuilder-uploadicon	Hacking
🇱🇻 garmtech.com	2026-07-20 04:28:43 (5 days ago)	IM360 WAF: Unauthenticated front-end JCE editor-profile import in Joomla Content Editor before 2.9.9 ... show more IM360 WAF: Unauthenticated front-end JCE editor-profile import in Joomla Content Editor before 2.9.99.5 (CVE-2026-48907) MV:/index.php show less	Web App Attack
🇫🇷 mail.avx.gr	2026-07-19 04:44:14 (6 days ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 103.59.161.106 - - [19/Jul/2026:07:44:13 +0300] "G ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 103.59.161.106 - - [19/Jul/2026:07:44:13 +0300] "GET /administrator/components/com_jce/jce.xml HTTP/1.1" 404 80153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 hbrks	2026-07-19 04:14:35 (6 days ago)	8 attack(s) detected, such as these: {"event":"web_block","ip":"103.59.161.106","host":"www.marche-b ... show more 8 attack(s) detected, such as these: {"event":"web_block","ip":"103.59.161.106","host":"www.marche-be.com","request":"GET /administrator/components/com_jce/jce.xml HTTP/1.1","user_agent":"","reason":"Status-404","timestamp":"2026-07-19T04:14:35 00:00","logentry":"www.marche-be.com 103.59.161.106 - - [19/Jul/2026:04:14:35 0000] \"GET /administrator/components/com_jce/jce.xml HTTP/1.1\" 404 555 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\" \"172.25.79.12:80\""} * Report Details : https://p4u.xyz/3A82BLC5PN9/1 IP Details *: https://p4u.xyz/3A82BLC5PN9/2 show less	Web Spam Hacking Bad Web Bot
🇱🇻 garmtech.com	2026-07-19 03:36:24 (6 days ago)	IM360 WAF: Unauthenticated front-end JCE editor-profile import in Joomla Content Editor before 2.9.9 ... show more IM360 WAF: Unauthenticated front-end JCE editor-profile import in Joomla Content Editor before 2.9.99.5 (CVE-2026-48907) MV:/index.php show less	Web App Attack
🇱🇻 garmtech.com	2026-07-18 19:56:47 (6 days ago)	IM360 WAF: Unauthenticated file upload / RCE in Joomla SP Page Builder asset.uploadCustomIcon (CVE-2 ... show more IM360 WAF: Unauthenticated file upload / RCE in Joomla SP Page Builder asset.uploadCustomIcon (CVE-2026-48908) MV:/index.php show less	Hacking
🇳🇱 enpepet	2026-07-18 16:18:08 (6 days ago)	GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc URL:/in ... show more GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Port Scan Hacking Brute-Force Bad Web Bot
🇩🇪 hbrks	2026-07-18 14:17:36 (6 days ago)	8 attack(s) detected, such as these: {"event":"web_block","ip":"103.59.161.106","host":"www.marche-b ... show more 8 attack(s) detected, such as these: {"event":"web_block","ip":"103.59.161.106","host":"www.marche-be.com","request":"GET /administrator/components/com_jce/jce.xml HTTP/1.1","user_agent":"","reason":"Status-404","timestamp":"2026-07-18T14:17:36 00:00","logentry":"www.marche-be.com 103.59.161.106 - - [18/Jul/2026:14:17:36 0000] \"GET /administrator/components/com_jce/jce.xml HTTP/1.1\" 404 555 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36\" \"172.25.79.12:80\""} * Report Details : https://p4u.xyz/A6XARF6QQ6S/1 IP Details *: https://p4u.xyz/A6XARF6QQ6S/2 show less	Web Spam Hacking Bad Web Bot
🇮🇩 penjaga BRIN	2026-04-17 19:33:17 (3 months ago)	Web application attack	Web App Attack
🇸🇪 KIDOS	2026-03-25 19:59:16 (3 months ago)	IIS malicious activity: high_400_error_rate (80% of requests are 400 errors)	Web App Attack
🇸🇪 KIDOS	2026-03-18 00:00:27 (4 months ago)	CrowdSec detected malicious activity	DDoS Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 207.191.168.146

🇧🇷 200.233.133.100

🇹🇼 198.235.24.108

🇧🇷 187.180.160.199

🇩🇪 165.154.138.3

🇺🇸 147.185.132.48

🇩🇪 144.31.17.230

🇫🇷 91.196.152.100

🇮🇷 83.120.197.242

🇧🇷 45.160.89.245

🇺🇸 40.124.173.90

🇨🇳 39.89.135.142

🇺🇸 2604:a880:2:d1:0:1:51e4:a001

🇧🇷 177.23.34.42

🇺🇸 165.154.135.215

🇨🇦 162.219.178.250

🇺🇸 162.217.100.196

🇺🇸 162.216.150.215

🇳🇱 160.119.76.53

🇺🇸 159.65.98.214