JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.169.149.50

103.169.149.50 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 34%: ?

34%

ISP	PT Kangen Network Solusindo
Usage Type	Fixed Line ISP
ASN	AS142339
Hostname(s)	IP-50.149.169.103.kangen.net.id
Domain Name	kangen.net.id
Country	🇮🇩 Indonesia
City	Bagan Hilir, Riau

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.169.149.50

Whois 103.169.149.50

IP Abuse Reports for 103.169.149.50:

This IP address has been reported a total of 13 times from 10 distinct sources. 103.169.149.50 was first reported on September 21st 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-02 22:27:31 (2 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 botreporter	2026-07-02 07:36:59 (2 days ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2026-06-29 11:53:35 (5 days ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 filstal.org	2026-06-28 03:42:16 (1 week ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (iPad; CPU iPad OS 1_1_5 like Mac OS X) AppleWebKit/531.1 (KHTML, like Gecko) CriOS/26.0.830.0 Mobile/98S686 Safari/531.1 show less	Bad Web Bot Web App Attack
🇩🇪 botreporter	2026-06-24 00:19:19 (1 week ago)	botnet ignoring robots.txt	Bad Web Bot
🇪🇸 el-brujo	2026-06-22 00:54:51 (1 week ago)	Cloudflare WAF: Request Path: /java/ayuda-con-la-conexion-java-mysql Request Query: Host: forum.elh ... show more Cloudflare WAF: Request Path: /java/ayuda-con-la-conexion-java-mysql Request Query: Host: forum.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: PT Kangen Network Solusindo Country: ID Method: GET Timestamp: 2026-06-22T00:54:51Z ruleId: 770fb332273f47628e1c012f2ac4e3d3. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇫🇷 Sklurk	2026-06-03 00:31:51 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-05-31 08:46:01 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 LARL-Stompro-2024	2026-05-20 05:03:53 (1 month ago)	Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-28 06:28:23 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 103.169.149.50 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.169.149.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 01:28:09.289280 2025] [security2:error] [pid 16416:tid 16434] [client 103.169.149.50:52564] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|autodiscover.ozworkshop.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "autodiscover.ozworkshop.com"] [uri "/"] [unique_id "aVDN-U6Qw2N3-viBTNqC2gAAAQ8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-14 12:02:32 (8 months ago)	Web attack	Bad Web Bot Web App Attack
🇮🇩 hermawan	2025-10-03 05:15:00 (9 months ago)	[Fri Oct 03 12:14:29.575491 2025] [security2:error] [pid 1295159:tid 140596736882368] [client 103.16 ... show more [Fri Oct 03 12:14:29.575491 2025] [security2:error] [pid 1295159:tid 140596736882368] [client 103.169.149.50:38482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "HttpClient" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: HttpClient found within REQUEST_HEADERS:User-Agent: AndroidHttpClient (Linux; U; Android 14; in_ID; CPH2641; Build/UP1A.231005.007; Cronet/139.0.7205.3) request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Perubahan_Iklim/Infografis_Perubahan_Iklim_Jawa_Timur.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Perubahan_Iklim/Infografis_Perubahan_Iklim_Jawa_Timur.webp"] [unique_id "aN9btfjETZZQefnjNN9rLQABCQ8"] [staklim-malang.info] [staklim-malang.info] top=[1295175] [YTjyLDpzT2E] [aN9btfjETZZQefnjNN9rLQAB ... show less	Hacking Web App Attack
🇩🇪 pressler.pro	2025-09-21 14:06:48 (9 months ago)	Fail2ban - DDoS attack on woocommerce shop ...	DDoS Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.166

🇫🇷 185.177.72.10

🇹🇭 147.50.103.212

🇧🇩 103.174.51.100

🇷🇺 94.79.7.73

🇫🇷 91.231.89.218

🇺🇦 91.195.157.228

🇹🇷 88.230.196.12

🇬🇧 35.203.210.215

🇬🇧 2a06:4880:8000::9d

🇲🇾 219.92.8.225

🇨🇳 182.54.23.163

🇩🇿 154.242.13.72

🇨🇳 111.225.214.218

🇭🇰 103.243.27.155

🇮🇩 103.129.150.77

🇨🇦 85.217.149.34

🇩🇪 69.5.169.188

🇳🇱 45.148.10.239

🇺🇸 45.79.172.21