JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.162.60.48

103.162.60.48 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 45%: ?

45%

ISP	PT Indo Prima Akses
Usage Type	Fixed Line ISP
ASN	AS141648
Hostname(s)	iprime-48.ldp.net.id
Domain Name	indoakses-online.com
Country	🇮🇩 Indonesia
City	Parangtritis, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.162.60.48

Whois 103.162.60.48

IP Abuse Reports for 103.162.60.48:

This IP address has been reported a total of 20 times from 17 distinct sources. 103.162.60.48 was first reported on July 27th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-05-31 02:04:45 (2 weeks ago)	(wordpress) Failed wordpress login from 103.162.60.48 (ID/Indonesia/-/-/iprime-48.ldp.net.id/[redact ... show more (wordpress) Failed wordpress login from 103.162.60.48 (ID/Indonesia/-/-/iprime-48.ldp.net.id/[redacted]): (CF_ENABLE) show less	Brute-Force
🇮🇩 Burayot	2026-05-31 01:51:23 (2 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.162.60.48 (ID/Indonesia/iprime- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.162.60.48 (ID/Indonesia/iprime-48.ldp.net.id): 1 in the last 3600 secs show less	Web App Attack
🇳🇱 wlt-blocker	2026-05-31 00:42:09 (2 weeks ago)	Unauthorized access to webpage admin	Web App Attack
🇨🇦 TheGnome	2026-05-29 20:44:00 (2 weeks ago)	Indonesia was blocked by the Wordfence Security Network at https://REDACTED/xmlrpc.php May 29, 2 ... show more Indonesia was blocked by the Wordfence Security Network at https://REDACTED/xmlrpc.php May 29, 2026 12:32:28 PM (3 hours 53 minutes ago) IP: 103.162.60.48 Hostname: iprime-48.ldp.net.id Human/Bot: Bot show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 18:24:25 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.162.60.48 (iprime-48.ldp.net.id): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 103.162.60.48 (iprime-48.ldp.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 14:24:18.612697 2026] [security2:error] [pid 21733:tid 21851] [client 103.162.60.48:56022] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|quantumgaze.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "quantumgaze.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahnZ0uK3cDPe1I-4F9EJLwAAAks"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 16:11:42 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.162.60.48 (iprime-48.ldp.net.id): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 103.162.60.48 (iprime-48.ldp.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 12:11:38.642708 2026] [security2:error] [pid 23111:tid 23111] [client 103.162.60.48:49820] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|peterndudar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peterndudar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahm6utytp8NV89I3qbNFjwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-05-28 22:45:16 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 rh24	2026-05-28 01:14:24 (2 weeks ago)	(xmlrpc_405) XMLRPC-Bot 405 103.162.60.48 (ID/Indonesia/iprime-48.ldp.net.id)	Hacking
🇩🇪 big-cloud.nl	2026-05-28 00:37:52 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇧🇾 lns.bz	2026-05-27 19:51:19 (2 weeks ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇩🇪 LRob.fr	2026-05-27 12:45:24 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-04-14 05:28:01 (1 month ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇮🇩 hermawan	2026-03-09 02:06:48 (3 months ago)	03/09/2026-09:06:17.952886 [Drop] [] [1:921145:1] Dibuat Gemini TCP RST Packet [] [Classificati ... show more 03/09/2026-09:06:17.952886 [Drop] [] [1:921145:1] Dibuat Gemini TCP RST Packet [] [Classification: Attempted Denial of Service] [Priority: 3] {TCP} 103.162.60.48:64958 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇨🇳 ThreatBook.io	2026-01-17 00:44:36 (4 months ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/103.162.60.48	SSH
Anonymous	2026-01-03 21:40:43 (5 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-post.asp show less	Bad Web Bot Exploited Host

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.232

🇲🇾 47.250.175.135

🇬🇧 35.203.211.244

🇲🇽 187.191.48.4

🇨🇳 123.166.135.58

🇧🇩 123.49.38.114

🇨🇳 120.48.178.142

🇺🇸 97.93.43.157

🇧🇬 79.124.62.126

🇺🇸 66.132.172.241

🇺🇸 45.79.115.134

🇩🇪 43.228.157.10

🇧🇪 35.187.184.80

🇰🇷 210.183.21.53

🇧🇷 177.200.39.156

🇻🇳 103.176.179.183

🇫🇷 91.231.89.169

🇳🇱 45.156.87.13

🇺🇸 43.153.32.5

🇰🇷 34.64.120.96