JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.169.149.50

103.169.149.50 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 34%: ?

34%

ISP	PT Kangen Network Solusindo
Usage Type	Fixed Line ISP
ASN	AS142339
Hostname(s)	IP-50.149.169.103.kangen.net.id
Domain Name	kangen.net.id
Country	🇮🇩 Indonesia
City	Bagan Hilir, Riau

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.169.149.50

Whois 103.169.149.50

IP Abuse Reports for 103.169.149.50:

This IP address has been reported a total of 13 times from 10 distinct sources. 103.169.149.50 was first reported on September 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-02 22:27:31 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 botreporter	2026-07-02 07:36:59 (2 days ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2026-06-29 11:53:35 (5 days ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 filstal.org	2026-06-28 03:42:16 (6 days ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Mozilla/5.0 (iPad; CPU iPad OS 1_1_5 like Mac OS X) AppleWebKit/531.1 (KHTML, like Gecko) CriOS/26.0.830.0 Mobile/98S686 Safari/531.1 show less	Bad Web Bot Web App Attack
🇩🇪 botreporter	2026-06-24 00:19:19 (1 week ago)	botnet ignoring robots.txt	Bad Web Bot
🇪🇸 el-brujo	2026-06-22 00:54:51 (1 week ago)	Cloudflare WAF: Request Path: /java/ayuda-con-la-conexion-java-mysql Request Query: Host: forum.elh ... show more Cloudflare WAF: Request Path: /java/ayuda-con-la-conexion-java-mysql Request Query: Host: forum.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: PT Kangen Network Solusindo Country: ID Method: GET Timestamp: 2026-06-22T00:54:51Z ruleId: 770fb332273f47628e1c012f2ac4e3d3. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇫🇷 Sklurk	2026-06-03 00:31:51 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-05-31 08:46:01 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 LARL-Stompro-2024	2026-05-20 05:03:53 (1 month ago)	Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-28 06:28:23 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 103.169.149.50 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.169.149.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 01:28:09.289280 2025] [security2:error] [pid 16416:tid 16434] [client 103.169.149.50:52564] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|autodiscover.ozworkshop.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "autodiscover.ozworkshop.com"] [uri "/"] [unique_id "aVDN-U6Qw2N3-viBTNqC2gAAAQ8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-14 12:02:32 (8 months ago)	Web attack	Bad Web Bot Web App Attack
🇮🇩 hermawan	2025-10-03 05:15:00 (9 months ago)	[Fri Oct 03 12:14:29.575491 2025] [security2:error] [pid 1295159:tid 140596736882368] [client 103.16 ... show more [Fri Oct 03 12:14:29.575491 2025] [security2:error] [pid 1295159:tid 140596736882368] [client 103.169.149.50:38482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "HttpClient" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: HttpClient found within REQUEST_HEADERS:User-Agent: AndroidHttpClient (Linux; U; Android 14; in_ID; CPH2641; Build/UP1A.231005.007; Cronet/139.0.7205.3) request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Perubahan_Iklim/Infografis_Perubahan_Iklim_Jawa_Timur.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Perubahan_Iklim/Infografis_Perubahan_Iklim_Jawa_Timur.webp"] [unique_id "aN9btfjETZZQefnjNN9rLQABCQ8"] [staklim-malang.info] [staklim-malang.info] top=[1295175] [YTjyLDpzT2E] [aN9btfjETZZQefnjNN9rLQAB ... show less	Hacking Web App Attack
🇩🇪 pressler.pro	2025-09-21 14:06:48 (9 months ago)	Fail2ban - DDoS attack on woocommerce shop ...	DDoS Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.222.20.20

🇺🇸 162.216.149.58

🇹🇷 94.138.209.214

🇩🇪 94.16.17.139

🇷🇺 45.195.221.26

🇸🇬 35.187.231.181

🇬🇧 31.14.254.45

🇺🇸 20.84.162.248

🇺🇸 205.210.31.40

🇻🇳 103.75.183.177

🇨🇳 101.26.28.188

🇫🇷 85.204.70.104

🇮🇳 49.36.243.28

🇨🇳 27.155.172.247

🇮🇳 13.71.92.229

🇳🇱 195.178.110.227

🇻🇳 103.200.23.154

🇷🇺 37.110.113.113

🇮🇷 5.237.97.41

🇫🇷 5.48.46.95