JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.71.163.42

103.71.163.42 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 44%: ?

44%

ISP	PT. Menaksopal Link Nusantara
Usage Type	Fixed Line ISP
ASN	AS139981
Domain Name	menaksopal.net.id
Country	🇮🇩 Indonesia
City	Trenggalek, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.71.163.42

Whois 103.71.163.42

IP Abuse Reports for 103.71.163.42:

This IP address has been reported a total of 21 times from 18 distinct sources. 103.71.163.42 was first reported on February 24th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-06-21 21:25:33 (1 day ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 Sklurk	2026-06-16 02:24:44 (1 week ago)	Web App Attack	Web App Attack
🇦🇺 prologic	2026-06-13 18:08:49 (1 week ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
🇩🇪 Vegascosmetics	2026-06-07 12:55:32 (2 weeks ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Bad Web Bot
🇦🇺 MAGIC	2026-06-07 01:26:52 (2 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 02:25:28 (2 weeks ago)	(mod_security) mod_security (id:217210) triggered by 103.71.163.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217210) triggered by 103.71.163.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:25:21.761236 2026] [security2:error] [pid 6603:tid 6603] [client 103.71.163.42:45102] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|sun0put.online\|F\|4"] [data "GET http://sun0put.online HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sun0put.online"] [uri "/"] [unique_id "ah-QkV304gt6a7rkJZGsSwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: fd8a75e9-7ad9-4605-bec7-39ad26683952	DDoS Attack
🇨🇿 vitex	2026-05-26 04:00:00 (4 weeks ago)	Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ... show more Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour. show less	DDoS Attack Bad Web Bot
🇺🇸 MPL	2026-05-24 01:02:06 (4 weeks ago)	tcp/23 (2 or more attempts)	Port Scan
Anonymous	2026-05-16 17:30:31 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇫🇷 Sklurk	2026-05-08 04:19:54 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 filstal.org	2026-05-01 10:10:16 (1 month ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/6344-01-17 22:3 ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/6344-01-17 22:30:19.319611 Firefox/5.0). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇱🇹 NotACaptcha	2026-04-27 22:52:32 (1 month ago)	webserver:80 [28/Apr/2026] "GET http://ashunledevles.eu.org/rmy_ro/roc/html/JHN18.htm HTTP/1.1" 302 ... show more webserver:80 [28/Apr/2026] "GET http://ashunledevles.eu.org/rmy_ro/roc/html/JHN18.htm HTTP/1.1" 302 445 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇹 A000Z	2026-03-26 18:22:58 (2 months ago)	Fail2Ban: 103.71.163.42 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 103.71.163.42 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot
🇺🇸 stechusa	2026-03-24 07:47:24 (2 months ago)	[Askari] ELEVATED_THREAT \| country=ID \| ASN=PT. Menaksopal Link Nusantara \| AbuseIPDB=23% \| Facet re ... show more [Askari] ELEVATED_THREAT \| country=ID \| ASN=PT. Menaksopal Link Nusantara \| AbuseIPDB=23% \| Facet request during elevated threat (facet_ratio=0.77, unique_ips=99) \| 14 IPs targeting /brand/satco-products-inc.html \| HTTP/1.1 over TLS (elevated=True) \| Signals: path_concentration, non_target_geo, concurrent_facet_load, outdated_user_agent, http1_on_tls show less	Web App Attack Hacking Web Spam

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.242.3.195

🇹🇼 128.14.229.150

🇬🇧 123.58.207.155

🇮🇹 72.146.1.254

🇺🇸 66.132.172.102

🇮🇹 45.91.20.84

🇰🇷 211.169.212.206

🇺🇸 144.202.92.17

🇹🇼 128.14.237.120

🇫🇷 85.217.140.18

🇺🇸 65.49.1.212

🇺🇸 34.63.160.174

🇫🇷 207.180.226.155

🇩🇪 164.92.244.132

🇩🇪 159.65.126.58

🇨🇳 115.191.66.84

🇳🇱 91.92.40.217

🇷🇴 80.94.92.182

🇺🇸 64.62.197.157

🇺🇸 35.225.19.88