AbuseIPDB » 103.135.49.195
103.135.49.195 was found in our database!
This IP was reported 6 times. Confidence of
Abuse
is 0% : ?
ISP
CV. WIJAYA MAJU LESTARI
Usage Type
Fixed Line ISP
ASN
AS38320
Domain Name
wijayamajulestari.net
Country
๐ฎ๐ฉ
Indonesia
City
South Tangerang, Banten
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 103.135.49.195 :
This IP address has been reported a total of
6
times from
4 distinct
sources.
103.135.49.195 was first reported on
December 3rd 2024 , and the most recent report was
3 months ago .
Old Reports:
The most recent abuse report for this IP address is from
3 months ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฎ๐น
VHosting
2026-02-24 09:57:14
(3 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-09-22 12:24:56
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 103.135.49.195 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.135.49.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 08:24:49.064891 2025] [security2:error] [pid 22127:tid 22127] [client 103.135.49.195:52922] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aNFAETJuJKzpt4JiVMsX_gAAAAY"], referer: https://jolankagroup.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-04 10:16:12
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 103.135.49.195 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.135.49.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 06:16:06.120303 2025] [security2:error] [pid 26931:tid 26931] [client 103.135.49.195:36410] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||staben.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aLlm5gf3gmZI1kMnjTqmBQAAAAQ"], referer: https://staben.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-04-03 02:32:23
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ฒ๐พ
syokadmin
2024-12-30 16:38:47
(1 year ago)
Brute-Force
Anonymous
2024-12-03 08:26:36
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: