AbuseIPDB » 103.154.139.95

103.154.139.95 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 100%: ?

100%
ISP PT. Mora Telematika Indonesia
Usage Type Fixed Line ISP
ASN AS131111
Hostname(s) ip-103-154-139-95.moratelindo.net.id
Domain Name moratelindo.co.id
Country ๐Ÿ‡ฎ๐Ÿ‡ฉ Indonesia
City Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 103.154.139.95:

This IP address has been reported a total of 138 times from 66 distinct sources. 103.154.139.95 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ช๐Ÿ‡ธ alferez
Searching .(env|sql|zip|tar|rar) files
Hacking Exploited Host Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ BlueWire Hosting
High-confidence malicious configuration/VCS probe
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท Baking333
Bad Web Bot Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ MM-bot
URL-probe: HTTP/1.1 GET request on /sftp-config.json (2026-08-21 20:20:15 UTC+2)
Web App Attack Hacking
๐Ÿ‡ซ๐Ÿ‡ท Baking333
Bad Web Bot Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ cwytech
Fleet-wide ban from the Ghostfleet ๐Ÿ‘ป. Triggered by scenario: cwy/wordpress-geofence-sus.
Bad Web Bot Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Hacking Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช BlueWire Hosting
High-confidence malicious configuration/VCS probe
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท masterguru
Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-195)
Hacking Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช Starburst SysOp Team
Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-nue6-2)
Hacking Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช LRob
Hacking Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
๐Ÿ‡จ๐Ÿ‡ญ lufi
Web Spam Brute-Force Hacking Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ kosada.com
Web vulnerability probing: /sftp-config.json
Web App Attack

Showing 1 to 15 of 138 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ง๐Ÿ‡ท 177.135.209.177
๐Ÿ‡ป๐Ÿ‡ณ 103.82.38.228
๐Ÿ‡บ๐Ÿ‡ธ 71.6.239.168
๐Ÿ‡ฒ๐Ÿ‡ฝ 45.195.79.5
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.157
๐Ÿ‡ป๐Ÿ‡ณ 14.225.217.138
๐Ÿ‡ซ๐Ÿ‡ฎ 2a01:4f9:c013:2a40::1
๐Ÿ‡จ๐Ÿ‡ฑ 190.93.229.120
๐Ÿ‡จ๐Ÿ‡ณ 120.86.237.147
๐Ÿ‡ธ๐Ÿ‡ฎ 102.220.160.124
๐Ÿ‡น๐Ÿ‡ท 77.245.156.107
๐Ÿ‡บ๐Ÿ‡ธ 198.23.232.204
๐Ÿ‡ซ๐Ÿ‡ฎ 147.185.133.134
๐Ÿ‡ง๐Ÿ‡ฉ 103.49.202.204
๐Ÿ‡น๐Ÿ‡ท 87.76.143.70
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.118
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.151
๐Ÿ‡ฎ๐Ÿ‡ฉ 36.84.82.186
๐Ÿ‡ง๐Ÿ‡ท 205.210.31.162
๐Ÿ‡ณ๐Ÿ‡ฑ 193.29.139.235