JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.59.161.141

103.59.161.141 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 78%: ?

78%

ISP	PT Gunung Sedayu Sentosa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150493
Hostname(s)	ip-103-59-161-141.indovm.com
Domain Name	gss.biz.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.59.161.141

Whois 103.59.161.141

IP Abuse Reports for 103.59.161.141:

This IP address has been reported a total of 19 times from 15 distinct sources. 103.59.161.141 was first reported on May 9th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-09-02 12:58:39 (14 hours ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-09-02 11:29:42 (16 hours ago)	103.59.161.141 - - [02/Sep/2026:13:29:41 +0200] "GET / HTTP/1.1" 403 6964 "-" "Mozilla/5.0 (compatib ... show more 103.59.161.141 - - [02/Sep/2026:13:29:41 +0200] "GET / HTTP/1.1" 403 6964 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" ... show less	Web App Attack
🇩🇪 Admin-Gito	2026-09-02 06:32:14 (21 hours ago)	103.59.161.141 - - [02/Sep/2026:08:27:14 +0200] "GET /wp-includes/feed-rss2.php HTTP/1.1" 500 264 "- ... show more 103.59.161.141 - - [02/Sep/2026:08:27:14 +0200] "GET /wp-includes/feed-rss2.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [02/Sep/2026:08:27:20 +0200] "GET /wp-includes/class-snoopy.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [02/Sep/2026:08:27:21 +0200] "GET /wp-includes/class-wp-styles.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [02/Sep/2026:08:27:22 +0200] "GET /wp-includes/class.wp-dependencies.php HTTP/1.1" 500 4284 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [02/Sep/2026:08:27:26 +0200] "GET /wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [02/Sep/2026:08:27:27 +0200] "GET /wp-includes/ms-default-filters.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [02/Sep/2026:08:27:30 +0200] "GET / ... show less	Web App Attack
🇪🇸 masterguru	2026-09-02 02:59:20 (1 day ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇩🇪 BlueWire Hosting	2026-09-02 00:34:29 (1 day ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 filstal.org	2026-09-01 21:52:44 (1 day ago)	Bad bot activity detected (automated scraping/probing).	Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-09-01 19:29:38 (1 day ago)	(wplogin_block) Blocked WP-Login Access Attempt 103.59.161.141 (ID/Indonesia/East Java/Kediri/-/[AS1 ... show more (wplogin_block) Blocked WP-Login Access Attempt 103.59.161.141 (ID/Indonesia/East Java/Kediri/-/[AS150493 IDNIC-PGSS-AS-ID PT Gunung Sedayu Sentosa]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 103.59.161.141 - - [01/Sep/2026:22:14:46 +0300] "GET /wp-login.php?redirect_to=https%3A%2F%2Fions.gr%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 11678 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" show less	Port Scan
🇸🇪 SkyDancer	2026-09-01 16:50:38 (1 day ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇦🇺 A.i.D.A.N.N	2026-09-01 10:53:16 (1 day ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected	Web App Attack
🇺🇸 kosada.com	2026-09-01 10:30:54 (1 day ago)	Repeated requests for suspicious nonexistent URLs, for example: /wp-includes/ (HTTP port 443)	Web App Attack
🇺🇸 nyt	2026-09-01 09:56:20 (1 day ago)	Scanner UA, WP Includes Dir Listing, Scanner UA	Bad Web Bot Web App Attack
🇩🇪 Admin-Gito	2026-09-01 08:39:46 (1 day ago)	103.59.161.141 - - [01/Sep/2026:10:33:40 +0200] "GET /wp-includes/class-smtp.php HTTP/1.1" 500 264 " ... show more 103.59.161.141 - - [01/Sep/2026:10:33:40 +0200] "GET /wp-includes/class-smtp.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [01/Sep/2026:10:33:43 +0200] "GET /wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [01/Sep/2026:10:33:44 +0200] "GET /wp-includes/class-feed.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [01/Sep/2026:10:33:47 +0200] "GET /wp-includes/meta.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [01/Sep/2026:10:33:48 +0200] "GET /wp-includes/date.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [01/Sep/2026:10:33:50 +0200] "GET /wp-includes/session.php HTTP/1.1" 500 264 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.141 - - [01/Sep/2026:10:33:52 +0200] "GET /wp-includes/spl-autoload-compat.php HTTP/1. ... show less	Web App Attack
🇲🇾 Rizzy	2026-09-01 07:03:18 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 consul.to	2026-09-01 07:02:49 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 etu brutus	2026-09-01 03:45:21 (2 days ago)	103.59.161.141 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 151.240.178.176

🇧🇷 43.157.175.122

🇬🇧 165.154.129.151

🇳🇴 85.165.88.75

🇫🇷 83.202.19.95

🇺🇸 65.49.20.72

🇬🇧 35.203.211.38

🇧🇪 34.156.131.56

🇺🇸 20.115.209.228

🇬🇧 2.57.17.83

🇩🇪 209.50.189.139

🇧🇷 205.210.31.249

🇭🇰 199.45.154.118

🇮🇹 195.231.46.24

🇺🇸 193.202.87.79

🇨🇱 190.20.153.254

🇹🇷 188.132.196.112

🇵🇾 181.94.228.179

🇧🇷 179.208.106.206

🇫🇮 147.185.133.69