JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.181.138.6

103.181.138.6 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 32%: ?

32%

ISP	PT Mutiara Cahaya Raya Net
Usage Type	Fixed Line ISP
ASN	AS149383
Domain Name	mcrnet.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.181.138.6

Whois 103.181.138.6

IP Abuse Reports for 103.181.138.6:

This IP address has been reported a total of 90 times from 24 distinct sources. 103.181.138.6 was first reported on November 24th 2022, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-10-23 02:16:54 (10 hours ago)	[Fri Oct 23 09:16:54.258385 2026] [security2:error] [pid 857801:tid 139900884076224] [client 103.181 ... show more [Fri Oct 23 09:16:54.258385 2026] [security2:error] [pid 857801:tid 139900884076224] [client 103.181.138.6:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /templates/protostar/favicon.ico HTTP/1.1 request_line = GET /templates/protostar/favicon.ico HTTP/1.1 Request URI RAW = /templates/protostar/favicon.ico Request Basename = favicon.ico"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/ ... show less	Email Spam Hacking
🇩🇪 edgeshield	2026-10-03 14:53:51 (2 weeks ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
Anonymous	2026-10-03 01:54:37 (2 weeks ago)	Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shi ... show more Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shield HTTP event export; 241 requests from this client IP between 2026-10-03T01:45:33.965+00:00 and 2026-10-03T01:54:37.331+00:00; peak 25 requests in one UTC calendar second. Methods: POST=241. Top paths (host and payment IDs redacted): /<uuid> (148), /api/v1/integration/ (93). JA4: t13d1515h2_8daaf6152771_e4c2b8c727f2, t13d1615h2_86a278354501_c1eccb039341. CDN actions: Challenged=24, Blocked=217. Counts refer to the supplied log window. show less	DDoS Attack
🇬🇧 compute	2026-10-02 08:19:28 (3 weeks ago)	Participated in a distributed HTTP flood (L7 DDoS) against 10x.gg on 2026-10-02 08:19:25-08:20:09 UT ... show more Participated in a distributed HTTP flood (L7 DDoS) against 10x.gg on 2026-10-02 08:19:25-08:20:09 UTC. 6 requests from this IP to a single API endpoint (GET .../funding), HTTP/2 via Cloudflare (CF-Connecting-IP), spoofed browser UA + rotated referrers. nginx rate-limited (HTTP 429). First seen 2026-10-02T08:19:28+00:00. Part of a 1,572-IP rented-proxy pool; this IP had no other traffic to the site that day. show less	DDoS Attack Bad Web Bot
🇨🇭 ALPHANET	2026-10-01 07:35:23 (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇩🇪 edgeshield	2026-09-26 06:04:54 (3 weeks ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
🇺🇸 鬼影233	2026-09-25 01:55:10 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-19 10:01:42 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-13 15:32:46 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-03 17:06:14 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-29 13:49:11 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 VHosting	2026-08-25 06:33:11 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇵🇱 bmino.pl	2026-08-21 14:34:34 (2 months ago)	Autoban IP(2): 103.181.138.6 - Hostname: PT Mutiara Cahaya Raya Net - City: Kedungwringin Satu - Reg ... show more Autoban IP(2): 103.181.138.6 - Hostname: PT Mutiara Cahaya Raya Net - City: Kedungwringin Satu - Region: East Java - Country: Indonesia - Location: - Organization: PT Mutiara Cahaya Raya Net - failed attempts. show less	Web App Attack
🇺🇸 kosada.com	2026-08-11 08:02:59 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-07 06:38:12 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 90 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 35.199.57.214

🇺🇸 199.165.159.54

🇨🇱 191.114.189.236

🇩🇪 185.168.29.142

🇨🇳 114.246.203.194

🇮🇳 103.248.120.6

🇬🇫 92.142.41.233

🇰🇿 77.240.39.64

🇺🇸 43.172.114.89

🇻🇳 2405:4802:1c60:b730:9582:2bd1:c66:53d4

🇺🇸 209.85.215.200

🇧🇷 200.160.86.152

🇪🇹 196.191.112.13

🇪🇹 196.189.240.109

🇳🇱 193.25.167.93

🇨🇦 143.105.39.224

🇺🇸 130.49.9.62

🇺🇸 82.23.203.120

🇬🇧 82.10.252.80

🇺🇸 68.225.60.172