JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.106.115.57

103.106.115.57 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 10%: ?

10%

ISP	PT. Sumatra Multimedia Solusi
Usage Type	Fixed Line ISP
ASN	AS136880
Hostname(s)	ip-103.106.115.57.sms.net.id
Domain Name	sms.net.id
Country	🇮🇩 Indonesia
City	Palas, Lampung

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.106.115.57

Whois 103.106.115.57

IP Abuse Reports for 103.106.115.57:

This IP address has been reported a total of 15 times from 12 distinct sources. 103.106.115.57 was first reported on September 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-05-29 21:00:39 (2 weeks ago)	User login to application during non-business hours, Late night login (22:00-05:30) - High risk Jaka ... show more User login to application during non-business hours, Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-29 20:00:12 (2 weeks ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.5/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.5/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-29 19:00:11 (2 weeks ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇯🇵 VXG-NET	2026-05-17 16:48:43 (3 weeks ago)	port=60315, indicator_type=N/A	Port Scan Hacking
Anonymous	2026-03-31 06:43:44 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-03-30 05:36:32 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 quilla	2026-03-28 23:35:00 (2 months ago)	Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)	DDoS Attack
🇺🇸 gumbysoft	2026-02-20 03:31:49 (3 months ago)	Unauthorized web vulnerability scan (/.env, wordpress, etc.)	Web App Attack
🇮🇩 Burayot	2025-12-08 20:53:41 (6 months ago)	LF_SMTPAUTH: (smtpauth) Failed SMTP AUTH login from 103.106.115.57 (ID/Indonesia/ip-103.106.115.57.s ... show more LF_SMTPAUTH: (smtpauth) Failed SMTP AUTH login from 103.106.115.57 (ID/Indonesia/ip-103.106.115.57.sms.net.id): 1 in the last 3600 secs show less	Brute-Force
Anonymous	2025-11-16 03:25:17 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇺🇸 SuperEvilLuke	2025-10-07 23:55:57 (8 months ago)	Malicious activity detected from 136880 SMSNET-AS-ID PT. Sumatra Multimedia Solusi towards host dash ... show more Malicious activity detected from 136880 SMSNET-AS-ID PT. Sumatra Multimedia Solusi towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:57Z (11 occurrences) show less	DDoS Attack Exploited Host
🇮🇩 hermawan	2025-10-07 22:16:50 (8 months ago)	[Wed Oct 08 03:12:33.066489 2025] [security2:error] [pid 241621:tid 140372046128832] [client 103.106 ... show more [Wed Oct 08 03:12:33.066489 2025] [security2:error] [pid 241621:tid 140372046128832] [client 103.106.115.57:56183] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=476&id=1098%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-9-15-agustus-2016&start=70 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=1098%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-9-15-agustus-2016&start=70 Req..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOV0MeFVHaqI ... show less	Hacking Web App Attack
🇩🇪 1gz	2025-10-01 20:33:50 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-10-01 14:37:02 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇦🇺 oncord	2025-09-21 19:01:35 (8 months ago)	Form spam	Web Spam

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.239.240.72

🇮🇳 110.227.211.82

🇸🇬 47.82.48.131

🇳🇱 35.204.197.107

🇦🇺 34.151.164.108

🇮🇳 2401:4900:8811:66a0:ad46:80bc:6324:4c55

🇫🇷 185.177.72.16

🇷🇺 31.130.35.29

🇨🇳 223.109.252.144

🇰🇷 222.239.251.12

🇧🇷 45.160.138.242

🇿🇦 41.13.152.170

🇬🇧 35.242.130.194

🇸🇬 13.229.207.65

🇺🇸 2604:a880:400:d1:0:4:9639:4001

🇨🇱 186.10.86.130

🇺🇸 150.136.214.177

🇺🇸 138.197.204.198

🇻🇳 103.237.144.204

🇱🇹 45.227.254.170