JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.181.255.49

103.181.255.49 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 21%: ?

21%

ISP	CV Langit Bersama
Usage Type	Fixed Line ISP
ASN	AS141145
Domain Name	langitbersama.my.id
Country	🇮🇩 Indonesia
City	Jember, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.181.255.49

Whois 103.181.255.49

IP Abuse Reports for 103.181.255.49:

This IP address has been reported a total of 37 times from 24 distinct sources. 103.181.255.49 was first reported on July 1st 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-02 09:00:06 (3 days ago)	\| [Dangerous/Indonesia] Aggressive IP 103.181.255.49 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Aggressive IP 103.181.255.49 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇷🇴 Fn4ticHz	2026-05-30 15:41:18 (5 days ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇷🇴 Fn4ticHz	2026-05-09 14:14:14 (3 weeks ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇩🇪 filstal.org	2026-04-30 11:53:55 (1 month ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_11_3) AppleWebKit/535 ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_11_3) AppleWebKit/535.2 (KHTML; like Gecko) Chrome/31.0.874.0 Safari/535.2). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-04-10 05:17:22 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:05:12 (1 month ago)	103.181.255.49 - - [05/Apr/2026:16:37:56 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pintere ... show more 103.181.255.49 - - [05/Apr/2026:16:37:56 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.181.255.49 - - [05/Apr/2026:16:42:59 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.181.255.49 - - [05/Apr/2026:16:46:13 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.super.biz/blog" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.181.255.49 - - [05/Apr/2026:16:57:24 +0200] "GET /web/login HTTP/1.1" 499 0 "https://app.globalcloud.biz/products" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.181.255.49 - - [05/Apr/2026:17:00:33 +0200] "GET /web/login HTTP/1.1" 499 0 "http ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 15:08:57 (1 month ago)	103.181.255.49 - - [05/Apr/2026:16:57:24 +0200] "GET /web/login HTTP/1.1" 499 0 "https://app.globalc ... show more 103.181.255.49 - - [05/Apr/2026:16:57:24 +0200] "GET /web/login HTTP/1.1" 499 0 "https://app.globalcloud.biz/products" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.181.255.49 - - [05/Apr/2026:17:00:33 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.181.255.49 - - [05/Apr/2026:17:00:33 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.181.255.49 - - [05/Apr/2026:17:02:44 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.social53.net/services" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.181.255.49 - - [05/Apr/2026:17:02:44 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.social53.n ... show less	DDoS Attack
🇺🇸 COMPLEX	2026-03-17 18:26:57 (2 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:146.0) Gecko/146.0 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇺🇸 Vano Ganzzz	2026-03-07 12:51:34 (2 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141145 (GIGANET-AS-ID PT Giga Di ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141145 (GIGANET-AS-ID PT Giga Digital Nusantara) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-03-07T12:51:34Z Ray ID: 9d89bb799d026b9f UA: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.0.3) Gecko/20060427 Camino/1.0.1 show less	DDoS Attack Bad Web Bot
🇧🇪 cmbplf	2026-02-27 19:20:58 (3 months ago)	534 limiting connections by zone (14m59s)	DDoS Attack
🇨🇳 ThreatBook.io	2026-01-16 22:55:24 (4 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/103.181.255.49	SSH
🇺🇸 MPL	2026-01-16 10:56:50 (4 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇨🇭 Modules	2025-12-24 01:46:35 (5 months ago)	Open proxy http://103.181.255.49:8080 (RT:6296ms,Loc:Indonesia,ASN:AS141145)	Open Proxy
🇸🇬 Fn4ticHz	2025-12-15 18:25:10 (5 months ago)	repeated ddos targeted load.rapidreset.net -- ZeroGuard	DDoS Attack
🇸🇬 Fn4ticHz	2025-12-11 23:07:33 (5 months ago)	repeated ddos targeted load.rapidreset.net -- ZeroGuard	DDoS Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.7.30.146

🇭🇰 150.109.55.164

🇳🇱 45.148.10.141

🇺🇸 8.231.190.190

🇰🇷 211.178.247.182

🇺🇦 193.176.251.229

🇺🇿 185.203.236.212

🇺🇸 173.194.99.21

🇸🇬 140.245.125.139

🇸🇬 139.180.213.30

🇫🇷 94.239.150.162

🇳🇱 45.156.87.254

🇧🇪 34.140.168.155

🇧🇷 177.104.171.149

🇵🇱 87.251.64.145

🇺🇸 45.202.240.36

🇹🇷 212.154.86.114

🇯🇵 212.135.208.32

🇺🇸 162.216.149.34

🇧🇩 103.129.238.110