JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.62.49.138

103.62.49.138 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 46%: ?

46%

ISP	Streamline Servers Ltd - Tokyo
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	streamline-servers.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.62.49.138

Whois 103.62.49.138

IP Abuse Reports for 103.62.49.138:

This IP address has been reported a total of 100 times from 50 distinct sources. 103.62.49.138 was first reported on December 7th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 akarguard.net	2026-09-17 20:28:57 (1 day ago)	Reported by Akarguard DDoS protection: this IP exceeded the per-IP rate limit at our reverse-proxy e ... show more Reported by Akarguard DDoS protection: this IP exceeded the per-IP rate limit at our reverse-proxy edge (repeated HTTP 444), consistent with an automated Layer 7 flood. show less	DDoS Attack Web App Attack
🇺🇸 Jason Howell	2026-09-17 02:03:43 (2 days ago)	103.62.49.138 - - [16/Sep/2026:21:03:41 -0500] "GET //wp-login.php HTTP/1.1" 200 6634 "-" "Mozilla/5 ... show more 103.62.49.138 - - [16/Sep/2026:21:03:41 -0500] "GET //wp-login.php HTTP/1.1" 200 6634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36" 103.62.49.138 - - [16/Sep/2026:21:03:42 -0500] "GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1" 200 34276 "https://lhrareenacting.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36" 103.62.49.138 - - [16/Sep/2026:21:03:42 -0500] "GET /wp-includes/css/dashicons.min.css?ver=5.3.23 HTTP/1.1" 200 29281 "https://lhrareenacting.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36" 103.62.49.138 - - [16/Sep/2026:21:03:42 -0500] "GET /wp-includes/css/buttons.min.css?ver=5.3.23 HTTP/1.1" 200 1817 "https://lhrareenacting.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( ... show less	Web App Attack
🇮🇹 VHosting	2026-09-12 12:26:51 (1 week ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 LRob	2026-09-11 04:23:11 (1 week ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: / \| 2026-09-11 04:23 UTC show less	Bad Web Bot
🇺🇸 Jason Howell	2026-08-31 03:04:34 (2 weeks ago)	103.62.49.138 - - [30/Aug/2026:22:04:32 -0500] "GET //wp-login.php HTTP/1.1" 200 5595 "-" "Mozilla/5 ... show more 103.62.49.138 - - [30/Aug/2026:22:04:32 -0500] "GET //wp-login.php HTTP/1.1" 200 5595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36" 103.62.49.138 - - [30/Aug/2026:22:04:32 -0500] "GET /wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,jquery-migrate&ver=4.9.31 HTTP/1.1" 200 37740 "https://www.starbuckmachinery.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36" 103.62.49.138 - - [30/Aug/2026:22:04:33 -0500] "GET /wp-admin/load-styles.php?c=0&dir=ltr&load%5B%5D=dashicons,buttons,forms,l10n,login&ver=4.9.31 HTTP/1.1" 200 37355 "https://www.starbuckmachinery.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36" 103.62.49.138 - - [30/Aug/2026:22:04:33 -0500] "GET /favicon.ico HTTP/1.1" 200 224 "https://www.starbuckmachinery.com//wp-log ... show less	Web App Attack
Anonymous	2026-08-28 07:30:17 (3 weeks ago)	apache vulnerability scan	Web App Attack
🇪🇸 el-brujo	2026-08-24 10:51:23 (3 weeks ago)	Cloudflare WAF: Request Path: / Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (Windo ... show more Cloudflare WAF: Request Path: / Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GSL Networks Pty LTD Country: JP Method: GET Timestamp: 2026-08-24T10:51:23Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇸🇬 naveeddaros	2026-08-23 19:22:52 (3 weeks ago)	Automatic ban by Fail2ban on HestiaCP	Brute-Force Bad Web Bot
🇵🇱 xdearboy	2026-08-23 13:27:43 (3 weeks ago)	HAProxy WAF: Blocked 200 requests during DDoS attack on backend default_portfolio_80	DDoS Attack
🇺🇸 Jason Howell	2026-08-20 02:45:28 (4 weeks ago)	103.62.49.138 - - [19/Aug/2026:21:45:26 -0500] "GET //wp-login.php HTTP/1.1" 200 6899 "-" "Mozilla/5 ... show more 103.62.49.138 - - [19/Aug/2026:21:45:26 -0500] "GET //wp-login.php HTTP/1.1" 200 6899 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36" 103.62.49.138 - - [19/Aug/2026:21:45:27 -0500] "GET /wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,jquery-migrate&ver=4.7.35 HTTP/1.1" 200 37740 "https://www.kingsharvest.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36" 103.62.49.138 - - [19/Aug/2026:21:45:27 -0500] "GET /wp-admin/load-styles.php?c=0&dir=ltr&load%5B%5D=dashicons,buttons,forms,l10n,login&ver=4.7.35 HTTP/1.1" 200 36538 "https://www.kingsharvest.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/142.0.0.0 Safari/537.36" 103.62.49.138 - - [19/Aug/2026:21:45:27 -0500] "GET /wp-content/themes/advocate/javascripts/jquery-ui-1.8.14.js?ver=4.7.35 HTTP/1.1" 20 ... show less	Web App Attack
🇹🇷 neron	2026-08-15 23:06:48 (1 month ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 anycast_ac	2026-08-13 10:05:16 (1 month ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 456 requests on port 443	DDoS Attack Web App Attack
Anonymous	2026-08-13 00:00:00 (1 month ago)	"Security violation, excess traffic against library/education infrastructure"	Brute-Force
🇹🇷 neron	2026-08-07 05:37:17 (1 month ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-06 00:29:43 (1 month ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2001:67c:4e8:f004::7

🇨🇿 72.63.111.121

🇩🇪 23.88.47.15

🇸🇬 8.219.172.88

🇷🇺 5.255.231.186

🇨🇳 182.113.212.56

🇺🇸 172.210.9.231

🇧🇩 103.213.239.150

🇧🇬 79.124.49.114

🇸🇬 43.163.86.65

🇮🇩 36.93.21.138

🇳🇱 20.160.86.7

🇺🇾 190.135.248.196

🇮🇩 160.22.126.54

🇺🇸 152.32.207.234

🇲🇶 83.203.78.91

🇵🇰 72.255.26.81

🇺🇸 66.132.172.180

🇳🇱 45.148.10.157

🇭🇰 45.138.12.15