JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.39.51.156

103.39.51.156 was found in our database!

This IP was reported 114 times. Confidence of Abuse is 9%: ?

ISP	PT Mega Mentari Mandiri
Usage Type	Fixed Line ISP
ASN	AS63501
Hostname(s)	ip-103-39-51-156.mentari.net.id
Domain Name	mentari.net.id
Country	🇮🇩 Indonesia
City	Majalengka, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.39.51.156

Whois 103.39.51.156

IP Abuse Reports for 103.39.51.156:

This IP address has been reported a total of 114 times from 54 distinct sources. 103.39.51.156 was first reported on November 2nd 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-06-21 06:03:15 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇷🇴 Fn4ticHz	2026-06-09 16:08:48 (1 month ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇳🇱 maxxsense	2026-05-12 01:59:23 (2 months ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 103.39.51.156 (ID/Indon ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 103.39.51.156 (ID/Indonesia/ip-103-39-51-156.mentari.net.id) show less	Hacking
🇷🇴 Fn4ticHz	2026-05-09 14:13:14 (2 months ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇩🇪 NoaQT	2026-04-05 22:08:58 (3 months ago)	103.39.51.156 - - [05/Apr/2026:16:46:19 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.co ... show more 103.39.51.156 - - [05/Apr/2026:16:46:19 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.39.51.156 - - [05/Apr/2026:17:16:47 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.reddit.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.39.51.156 - - [05/Apr/2026:17:22:32 +0200] "GET /web/login HTTP/1.1" 499 0 "https://shop.digital.biz/blog" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.39.51.156 - - [05/Apr/2026:17:23:21 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.39.51.156 - - [05/Apr/2026:17:33:48 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5 ... show less	DDoS Attack
🇷🇴 gtheo99	2026-04-04 00:12:32 (3 months ago)	103.39.51.156 (ID/Indonesia/ip-103-39-51-156.mentari.net.id), 2 distributed smtpauth attacks on acco ... show more 103.39.51.156 (ID/Indonesia/ip-103-39-51-156.mentari.net.id), 2 distributed smtpauth attacks on account [enache.maria] in the last 900 secs show less	SSH Brute-Force Hacking
🇩🇪 arc21	2026-03-25 20:37:10 (3 months ago)	2026-03-25T20:37:09.555559+00:00 database-prodv1-game kernel: [1634960.082093] [UFW BLOCK] IN=eth0 O ... show more 2026-03-25T20:37:09.555559+00:00 database-prodv1-game kernel: [1634960.082093] [UFW BLOCK] IN=eth0 OUT= MAC=92:00:06:71:5d:8a:d2:74:7f:6e:37:e3:08:00 SRC=103.39.51.156 DST=142.132.169.25 LEN=578 TOS=0x00 PREC=0x00 TTL=48 ID=43022 DF PROTO=47 ... show less	Port Scan
🇩🇪 phil2k	2026-03-25 15:25:23 (3 months ago)	ICMP + GRE & TCP portscan on multiple ports : Firewall: Within 2026-03-25 02:25:57 - 2026-03-25 12:4 ... show more ICMP + GRE & TCP portscan on multiple ports : Firewall: Within 2026-03-25 02:25:57 - 2026-03-25 12:45:24 CET(+0100) identified: Fail2ban: Within 2026-03-25 02:25:57 - 2026-03-25 12:45:24 CET(+0100) banned: 3 times by fail2ban[firewall] show less	Port Scan Ping of Death
🇺🇸 xmission.com	2026-03-25 13:13:06 (3 months ago)	Blocked by UFW (47 on ) Source port: TTL: 52 Packet length: 578 TOS: 0x00 This report (for 103.39. ... show more Blocked by UFW (47 on ) Source port: TTL: 52 Packet length: 578 TOS: 0x00 This report (for 103.39.51.156) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 Erpelstolz	2026-03-25 09:12:06 (3 months ago)	portscan on cluster node, port/proto: 47	Port Scan
🇩🇪 iNetWorker	2026-03-25 08:50:28 (3 months ago)	firewall-block, port(s): /47	Port Scan
🇳🇱 VMHeaven.io	2026-03-25 05:10:09 (3 months ago)	Blocked by UFW [null/47] Source port: N/A TTL: 50 Packet length: 578	Port Scan
🇨🇭 Origon	2026-03-02 13:19:23 (4 months ago)	NOQUEUE - IP: 103.39.51.156 - Mar 2 14:19:23 plesk postfix/smtpd[2909447]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 103.39.51.156 - Mar 2 14:19:23 plesk postfix/smtpd[2909447]: NOQUEUE: reject: RCPT from unknown[103.39.51.156]: 554 5.7.1 Service unavailable; Client host [103.39.51.156] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?103.39.51.156; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<ip-103-39-51-156.mentari.net.id> show less	Email Spam
🇵🇱 cheatmaster.store	2026-02-25 23:33:52 (4 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Indonesia Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇧🇪 cmbplf	2026-02-20 06:00:31 (4 months ago)	749 limiting connections by zone (2h23m59s)	DDoS Attack

Showing 1 to 15 of 114 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.79

🇹🇼 198.235.24.81

🇧🇷 179.174.218.230

🇨🇳 123.56.157.254

🇬🇧 94.72.109.49

🇺🇸 44.116.4.128

🇺🇸 43.110.38.5

🇺🇸 20.98.165.154

🇺🇸 2a09:bac1:76a0:460::5e:79

🇩🇪 213.209.159.238

🇺🇸 208.115.124.243

🇹🇭 202.29.234.42

🇲🇽 177.239.81.206

🇺🇸 162.216.149.113

🇺🇸 158.101.104.151

🇯🇵 157.107.192.32

🇨🇺 152.207.22.110

🇺🇸 74.7.241.23

🇺🇸 47.251.119.40

🇵🇱 46.174.73.106