JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.71.163.42

103.71.163.42 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 45%: ?

45%

ISP	PT. Menaksopal Link Nusantara
Usage Type	Fixed Line ISP
ASN	AS139981
Domain Name	menaksopal.net.id
Country	🇮🇩 Indonesia
City	Madiun, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.71.163.42

Whois 103.71.163.42

IP Abuse Reports for 103.71.163.42:

This IP address has been reported a total of 20 times from 17 distinct sources. 103.71.163.42 was first reported on February 24th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-16 02:24:44 (12 hours ago)	Web App Attack	Web App Attack
🇦🇺 prologic	2026-06-13 18:08:49 (2 days ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
🇩🇪 Vegascosmetics	2026-06-07 12:55:32 (1 week ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Bad Web Bot
🇦🇺 MAGIC	2026-06-07 01:26:52 (1 week ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-03 02:25:28 (1 week ago)	(mod_security) mod_security (id:217210) triggered by 103.71.163.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217210) triggered by 103.71.163.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:25:21.761236 2026] [security2:error] [pid 6603:tid 6603] [client 103.71.163.42:45102] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|sun0put.online\|F\|4"] [data "GET http://sun0put.online HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sun0put.online"] [uri "/"] [unique_id "ah-QkV304gt6a7rkJZGsSwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: fd8a75e9-7ad9-4605-bec7-39ad26683952	DDoS Attack
🇨🇿 vitex	2026-05-26 04:00:00 (3 weeks ago)	Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ... show more Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour. show less	DDoS Attack Bad Web Bot
🇺🇸 MPL	2026-05-24 01:02:06 (3 weeks ago)	tcp/23 (2 or more attempts)	Port Scan
Anonymous	2026-05-16 17:30:31 (4 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇫🇷 Sklurk	2026-05-08 04:19:54 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 filstal.org	2026-05-01 10:10:16 (1 month ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/6344-01-17 22:3 ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/6344-01-17 22:30:19.319611 Firefox/5.0). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇱🇹 NotACaptcha	2026-04-27 22:52:32 (1 month ago)	webserver:80 [28/Apr/2026] "GET http://ashunledevles.eu.org/rmy_ro/roc/html/JHN18.htm HTTP/1.1" 302 ... show more webserver:80 [28/Apr/2026] "GET http://ashunledevles.eu.org/rmy_ro/roc/html/JHN18.htm HTTP/1.1" 302 445 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇹 A000Z	2026-03-26 18:22:58 (2 months ago)	Fail2Ban: 103.71.163.42 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 103.71.163.42 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot
🇺🇸 stechusa	2026-03-24 07:47:24 (2 months ago)	[Askari] ELEVATED_THREAT \| country=ID \| ASN=PT. Menaksopal Link Nusantara \| AbuseIPDB=23% \| Facet re ... show more [Askari] ELEVATED_THREAT \| country=ID \| ASN=PT. Menaksopal Link Nusantara \| AbuseIPDB=23% \| Facet request during elevated threat (facet_ratio=0.77, unique_ips=99) \| 14 IPs targeting /brand/satco-products-inc.html \| HTTP/1.1 over TLS (elevated=True) \| Signals: path_concentration, non_target_geo, concurrent_facet_load, outdated_user_agent, http1_on_tls show less	Web App Attack Hacking Web Spam
🇺🇸 stechusa	2026-03-24 07:47:24 (2 months ago)	ELEVATED_THREAT \| country=ID \| ASN=PT. Menaksopal Link Nusantara \| AbuseIPDB=23% \| Facet request dur ... show more ELEVATED_THREAT \| country=ID \| ASN=PT. Menaksopal Link Nusantara \| AbuseIPDB=23% \| Facet request during elevated threat (facet_ratio=0.77, unique_ips=99) \| 14 IPs targeting /brand/satco-products-inc.html \| HTTP/1.1 over TLS (elevated=True) show less	Web App Attack Hacking Web Spam

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.221

🇺🇸 143.42.1.185

🇦🇷 2620:171:4d:f002:9999::177

🇺🇸 185.77.225.52

🇺🇸 162.216.149.206

🇺🇸 138.197.204.198

🇹🇭 49.231.43.86

🇩🇪 43.228.157.9

🇺🇸 209.222.98.158

🇺🇸 208.109.191.140

🇸🇬 185.225.20.181

🇮🇩 149.129.193.163

🇨🇳 112.5.66.12

🇳🇱 81.19.216.74

🇸🇬 45.78.198.199

🇸🇬 8.219.221.108

🇻🇪 200.11.228.171

🇷🇺 185.42.24.225

🇨🇳 171.8.84.231

🇸🇬 165.154.205.128