This IP address has been reported a total of
10
times from
8 distinct
sources.
112.203.56.161 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
United States of America
with 2
reports;
Belarus
with 1
report.
The most common categories in these recent reports were:
DDoS Attack
4
times;
Web App Attack
2
times;
Web Spam
1
time;
Brute-Force
1
time;
Bad Web Bot
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Automated web request flooding / DDoS (EdgeShield WAF).
DDoS Attack
Anonymous
Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shi ...
show moreRepeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shield HTTP event export; 48 requests from this client IP between 2026-10-03T01:48:03.386+00:00 and 2026-10-03T01:53:33.580+00:00; peak 23 requests in one UTC calendar second. Methods: POST=48. Top paths (host and payment IDs redacted): /api/v1/integration/ (48). JA4: t13d1515h2_8daaf6152771_e4c2b8c727f2. CDN actions: Blocked=48. Counts refer to the supplied log window.
show less
UDP flood (DDoS) vs AS215599: 2499 pkts / 3.57 MB to UDP 80/8443 across 275 dst IP(s), 2026-08-19 21 ...
show moreUDP flood (DDoS) vs AS215599: 2499 pkts / 3.57 MB to UDP 80/8443 across 275 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 2499 pkts / 3.57 MB to UDP 80/8443 across 275 dst IP(s), 2026-08-19 21 ...
show moreUDP flood (DDoS) vs AS215599: 2499 pkts / 3.57 MB to UDP 80/8443 across 275 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
