JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.168.190.156

103.168.190.156 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 37%: ?

37%

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS142319
Domain Name	apnic.net
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.168.190.156

Whois 103.168.190.156

IP Abuse Reports for 103.168.190.156:

This IP address has been reported a total of 107 times from 27 distinct sources. 103.168.190.156 was first reported on November 13th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-08-20 14:59:12 (2 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-18 19:21:32 (4 days ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-login.php	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-16 18:17:15 (6 days ago)	[16/Aug/2026:21:17:15 +0300] -- 103.168.190.156 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp ... show more [16/Aug/2026:21:17:15 +0300] -- 103.168.190.156 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-08-16 17:00:29 (6 days ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-16 16:00:08 (6 days ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-08-15 06:10:50 (1 week ago)	[15/Aug/2026:09:10:49 +0300] -- 103.168.190.156 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp ... show more [15/Aug/2026:09:10:49 +0300] -- 103.168.190.156 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-08-13 21:16:42 (1 week ago)	[14/Aug/2026:00:16:41 +0300] -- 103.168.190.156 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp ... show more [14/Aug/2026:00:16:41 +0300] -- 103.168.190.156 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-07-29 22:00:30 (3 weeks ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 origrata	2026-07-29 09:49:02 (3 weeks ago)	[OGWAF] bad_reputation attack blocked \| severity: high \| GET /journals/datajournal \| UA: Mozilla/5.0 ... show more [OGWAF] bad_reputation attack blocked \| severity: high \| GET /journals/datajournal \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Web App Attack
🇮🇩 origrata	2026-07-29 09:49:02 (3 weeks ago)	[OGWAF] bad_reputation attack blocked \| severity: high \| GET /data \| UA: Mozilla/5.0 (Windows NT 10. ... show more [OGWAF] bad_reputation attack blocked \| severity: high \| GET /data \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Web App Attack
🇮🇩 origrata	2026-07-29 09:49:01 (3 weeks ago)	[OGWAF] bad_reputation attack blocked \| severity: high \| GET /journals/datajurnal2 \| UA: Mozilla/5.0 ... show more [OGWAF] bad_reputation attack blocked \| severity: high \| GET /journals/datajurnal2 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Web App Attack
🇺🇸 kosada.com	2026-07-24 17:54:27 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 sockominfo	2026-07-23 17:00:53 (4 weeks ago)	Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Conf ... show more Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1210 (Exploitation of Remote Services). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-23 16:00:08 (4 weeks ago)	Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported ... show more Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-22 20:00:28 (1 month ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 123.245.84.168

🇷🇺 95.142.47.113

🇧🇪 198.235.24.220

🇬🇧 195.96.138.16

🇲🇽 189.223.52.189

🇧🇩 103.183.62.2

🇧🇷 45.160.63.2

🇳🇱 45.148.10.152

🇨🇦 4.204.200.136

🇷🇴 2.57.122.150

🇮🇱 2.55.84.240

🇱🇰 220.247.224.226

🇹🇷 212.174.49.30

🇳🇱 212.7.197.220

🇰🇷 58.229.253.119

🇱🇹 213.176.26.134

🇺🇸 152.32.183.236

🇮🇩 69.5.20.133

🇧🇬 5.188.206.30

🇷🇴 2.57.122.168