JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.59.161.151

103.59.161.151 was found in our database!

This IP was reported 174 times. Confidence of Abuse is 100%: ?

100%

ISP	PT Gunung Sedayu Sentosa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150493
Hostname(s)	ip-103-59-161-151.indovm.com
Domain Name	gss.biz.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.59.161.151

Whois 103.59.161.151

IP Abuse Reports for 103.59.161.151:

This IP address has been reported a total of 174 times from 69 distinct sources. 103.59.161.151 was first reported on April 6th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 Cloudkul Cloudkul	2026-06-07 16:21:58 (12 hours ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇺🇸 WeekendWeb	2026-06-06 00:30:35 (2 days ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 wordpresshosting.solutions	2026-06-04 15:27:52 (3 days ago)	WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 103.59.161.151 - - [04/Jun/2026 ... show more WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 103.59.161.151 - - [04/Jun/2026:15:27:52 +0000] "GET /wp-login.php HTTP/1.1" 404 9745 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" show less	Brute-Force Web App Attack
🇪🇸 alferez	2026-06-04 11:29:34 (3 days ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
Anonymous	2026-06-04 07:59:20 (3 days ago)	103.59.161.151 - - [04/Jun/2026:09:59:14 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 16 ... show more 103.59.161.151 - - [04/Jun/2026:09:59:14 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 16571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" 103.59.161.151 - - [04/Jun/2026:09:59:12 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 82843 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" 103.59.161.151 - - [04/Jun/2026:09:59:17 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 16571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" 103.59.161.151 - - [04/Jun/2026:09:59:15 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 82843 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" 103.59.161.151 - - [04/Jun/2026:09:59:19 +0200] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 16571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" ... show less	Brute-Force Web App Attack
🇺🇸 wordpresshosting.solutions	2026-06-04 01:46:04 (4 days ago)	Vulnerability scanning / script probing detected. Evidence: [Thu Jun 04 01:46:01.212755 2026] [php:e ... show more Vulnerability scanning / script probing detected. Evidence: [Thu Jun 04 01:46:01.212755 2026] [php:error] [pid 3105759] [client 103.59.161.151:0] script '[WEB_ROOT]/wp-ver.php' not found or unable to stat [Thu Jun 04 01:46:02.106591 2026] [php:error] [pid 3107000] [client 103.59.161.151:0] script '[WEB_ROOT]/inc.php' not found or unable to stat [Thu Jun 04 01:46:02.956513 2026] [php:error] [pid 3106375] [client 103.59.161.151:0] script '[WEB_ROOT]/inputs.php' not found or unable to stat [Thu Jun 04 01:46:03.846701 2026] [php:error] [pid 3049137] [client 103.59.161.151:0] script '[WEB_ROOT]/atomlib.php' not found or unable to stat [Thu Jun 04 01:46:04.843366 2026] [php:error] [pid 3048711] [client 103.59.161.151:0] script '[WEB_ROOT]/simple.php' not found or unable to stat show less	Web App Attack
🇬🇧 catalink.com	2026-06-04 01:41:23 (4 days ago)	Brute forcing Wordpress login	Exploited Host Web App Attack
🇺🇸 interbiznw.com	2026-06-04 01:33:41 (4 days ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 WeekendWeb	2026-06-03 23:06:35 (4 days ago)	Wordpress Vunerability attack	Web App Attack
🇫🇷 ELYAZ	2026-06-03 22:39:28 (4 days ago)	(y3) Failed access -byebye- from 103.59.161.151 (ID/Indonesia/ip-103-59-161-151.indovm.com): (CF_EN ... show more (y3) Failed access -byebye- from 103.59.161.151 (ID/Indonesia/ip-103-59-161-151.indovm.com): (CF_ENABLE) show less	Hacking
🇺🇸 mind5t0rm	2026-06-02 18:29:55 (5 days ago)	(WPLOGIN) WP Login Attack 103.59.161.151 (ID/Indonesia/ip-103-59-161-151.indovm.com): 3 in the last ... show more (WPLOGIN) WP Login Attack 103.59.161.151 (ID/Indonesia/ip-103-59-161-151.indovm.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 103.59.161.151 - - [03/Jun/2026:01:29:40 +0700] "GET /wp-login.php HTTP/2.0" 200 2314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 103.59.161.151 - - [03/Jun/2026:01:29:45 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fpowerhouseconsulting.group%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 2314 "https://www.google.com/search?q=wordpress+2026" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 103.59.161.151 - - [03/Jun/2026:01:29:50 +0700] "GET /wp-login.php HTTP/2.0" 200 2314 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" show less	Port Scan
🇫🇷 ELYAZ	2026-06-02 17:28:09 (5 days ago)	(y4) Failed scan -byebye- from 103.59.161.151 (ID/Indonesia/ip-103-59-161-151.indovm.com): (CF_ENAB ... show more (y4) Failed scan -byebye- from 103.59.161.151 (ID/Indonesia/ip-103-59-161-151.indovm.com): (CF_ENABLE) show less	Hacking
Anonymous	2026-06-02 15:38:31 (5 days ago)	103.59.161.151 - - [02/Jun/2026:17:38:24 +0200] "POST /wp-login.php HTTP/1.1" 200 3383 "https://prin ... show more 103.59.161.151 - - [02/Jun/2026:17:38:24 +0200] "POST /wp-login.php HTTP/1.1" 200 3383 "https://princetakamadoprimaryschool.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 103.59.161.151 - - [02/Jun/2026:17:38:24 +0200] "POST /wp-login.php HTTP/1.1" 200 2876 "https://princetakamadoprimaryschool.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 103.59.161.151 - - [02/Jun/2026:17:38:27 +0200] "POST /wp-login.php HTTP/1.1" 200 3389 "https://princetakamadoprimaryschool.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.59.161.151 - - [02/Jun/2026:17:38:27 +0200] "POST /wp-login.php HTTP/1.1" 200 2882 "https://princetakamadoprimaryschool.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.59.161.151 - - [02/Jun/2026:17:38: ... show less	Brute-Force Web App Attack
🇩🇪 tentwentyfour	2026-06-02 08:59:06 (5 days ago)	Blocked for brute-forcing WordPress log-in	Brute-Force Web App Attack
🇺🇸 mind5t0rm	2026-06-02 08:07:02 (5 days ago)	(WPLOGIN) WP Login Attack 103.59.161.151 (ID/Indonesia/ip-103-59-161-151.indovm.com): 3 in the last ... show more (WPLOGIN) WP Login Attack 103.59.161.151 (ID/Indonesia/ip-103-59-161-151.indovm.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 103.59.161.151 - - [02/Jun/2026:15:06:57 +0700] "GET /wp-login.php HTTP/2.0" 200 2485 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 103.59.161.151 - - [02/Jun/2026:15:07:01 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftma.travel%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 2485 "https://t.co/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 103.59.161.151 - - [02/Jun/2026:15:07:02 +0700] "GET /wp-login.php HTTP/2.0" 200 2485 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0; rv:127.0) Gecko/20100101 Firefox/127.0" show less	Port Scan

Showing 1 to 15 of 174 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4023:1002::127

🇰🇷 211.231.20.121

🇬🇧 193.32.209.233

🇩🇪 157.230.18.133

🇫🇷 82.65.110.200

🇭🇰 47.238.103.66

🇪🇸 46.24.47.94

🇳🇱 45.148.10.151

🇦🇺 34.151.97.218

🇺🇸 24.144.121.64

🇺🇸 2001:470:1:fb5::157

🇨🇳 112.28.73.142

🇺🇸 2607:f8b0:4023:100f::129

🇭🇰 199.45.154.177

🇰🇷 115.91.48.142

🇺🇸 107.167.34.125

🇱🇹 77.90.185.33

🇮🇳 34.14.181.49

🇭🇰 8.217.211.183

🇯🇵 8.216.3.3