JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.39.49.103

103.39.49.103 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 0%: ?

ISP	PT Mega Mentari Mandiri
Usage Type	Fixed Line ISP
ASN	AS63501
Domain Name	mentari.net.id
Country	🇮🇩 Indonesia
City	Cirebon, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.39.49.103

Whois 103.39.49.103

IP Abuse Reports for 103.39.49.103:

This IP address has been reported a total of 50 times from 19 distinct sources. 103.39.49.103 was first reported on January 3rd 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Altis Shield	2025-11-30 23:12:48 (8 months ago)	Connection closed by 103.39.49.103 [preauth] or weird packet	Brute-Force SSH
🇨🇭 backslash	2025-10-03 04:55:05 (10 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 COMPLEX	2025-10-02 03:59:21 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 63501 (MEGAHUB-AS-ID PT Mega Men ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 63501 (MEGAHUB-AS-ID PT Mega Mentari Mandiri) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇬🇧 Silly Development	2025-09-28 13:29:36 (10 months ago)	Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host paid.silly ... show more Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host paid.sillydev.co.uk (GET HTTP/2) @ 2025-09-28T13:29:36Z (4 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-09-11 09:05:48 (11 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-08-16 03:18:01 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.39.49.103 (ip-103-39-49-103.mentari.net.id) ... show more (mod_security) mod_security (id:225170) triggered by 103.39.49.103 (ip-103-39-49-103.mentari.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 15 23:17:55.180992 2025] [security2:error] [pid 32076:tid 32076] [client 103.39.49.103:34461] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kerrywood.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kerrywood.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aJ_4YyPPnfbYPM8q6KfjgwAAAA4"], referer: https://kerrywood.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SuperEvilLuke	2025-08-11 22:26:20 (1 year ago)	Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embo ... show more Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-11T22:26:20Z (5 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-08-09 09:28:38 (1 year ago)	Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host www.sillyd ... show more Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host www.sillydev.co.uk (GET HTTP/2) @ 2025-08-09T09:28:38Z (1 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2025-08-05 23:14:31 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.39.49.103 (ip-103-39-49-103.mentari.net.id) ... show more (mod_security) mod_security (id:225170) triggered by 103.39.49.103 (ip-103-39-49-103.mentari.net.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 19:14:25.888818 2025] [security2:error] [pid 27200:tid 27200] [client 103.39.49.103:41568] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|advantagesystemsgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "advantagesystemsgroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aJKQUWfRpghETex38c6nnAAAAA4"], referer: https://advantagesystemsgroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SuperEvilLuke	2025-08-05 22:12:52 (1 year ago)	2025-08-05T19:06:11Z,"Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri t ... show more 2025-08-05T19:06:11Z,"Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:06:11Z (7 occurrences) show less	DDoS Attack
🇺🇸 SuperEvilLuke	2025-08-05 21:04:39 (1 year ago)	2025-08-05T19:03:07Z,"Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri t ... show more 2025-08-05T19:03:07Z,"Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:03:07Z (1 occurrences) show less	DDoS Attack
🇬🇧 SuperEvilLuke	2025-08-05 19:06:11 (1 year ago)	Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embo ... show more Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:06:11Z (1 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 SuperEvilLuke	2025-08-05 19:06:11 (1 year ago)	Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embo ... show more Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:06:11Z (1 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 SuperEvilLuke	2025-08-05 19:06:11 (1 year ago)	Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embo ... show more Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:06:11Z (1 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 SuperEvilLuke	2025-08-05 19:06:11 (1 year ago)	Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embo ... show more Malicious activity detected from 63501 MEGAHUB-AS-ID PT Mega Mentari Mandiri towards host panel.embotic.xyz (GET HTTP/2) @ 2025-08-05T19:06:11Z (1 occurrences) show less	DDoS Attack Exploited Host

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 134.209.167.0

🇺🇸 2607:f8b0:4003:c00::123

🇵🇹 193.136.97.121

🇲🇽 189.229.242.183

🇲🇽 187.144.58.131

🇻🇳 113.161.222.150

🇮🇩 103.171.244.196

🇸🇬 101.47.8.187

🇳🇱 91.92.40.45

🇺🇸 66.132.224.19

🇺🇸 64.225.30.2

🇹🇼 61.222.211.114

🇳🇱 51.158.205.47

🇧🇷 45.175.118.185

🇨🇳 36.157.184.6

🇩🇪 34.159.205.15

🇳🇴 20.100.175.163

🇳🇱 204.76.203.7

🇨🇴 190.5.199.181

🇬🇧 185.216.145.162