JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.116.174.125

Neutral Activity

Abuse Confidence Score

0% Low Risk

74 reports

43 reporters · latest 11 months ago

ISP: PT. Quanta Tunas Abadi
Usage Type: Fixed Line ISP
ASN: AS137363
Domain Name: higen.net.id
Country: 🇮🇩 Indonesia
City: Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.116.174.125 has been reported 74 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

74 from 43 distinct reporters

First reported

August 14th 2022

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Altis Shield	2025-12-01 05:30:30 UTC · (11 months ago)	Connection closed by 103.116.174.125 [preauth] or weird packet	Brute-Force SSH
🇩🇪 Packets-Decreaser.NET	2025-09-12 02:48:18 UTC · (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 Hydra-Shield.fr	2025-08-01 23:23:26 UTC · (1 year ago)	Automated DDoS behavior detected targeting production services. Multiple anomalous connections and packet floods recorded.	Brute-Force SSH
🇺🇸 noah	2025-07-31 00:00:00 UTC · (1 year ago)	"Botnet, Web scraping and Account brute forcing"	DDoS Attack Open Proxy Brute-Force
Anonymous	2025-07-09 04:30:23 UTC · (1 year ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force
🇨🇦 TCP FAILED	2025-06-20 16:24:52 UTC · (1 year ago)	TCP Watch Auto Report: Detected a ddos attack and suspicious activity from this IP, indicating a potential attack	DDoS Attack Hacking IoT Targeted
🇨🇿 unhfree.net	2025-05-01 23:59:57 UTC · (1 year ago)	May 2 01:59:15 canopus postfix/smtpd[2220149]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<r ... show more May 2 01:59:15 canopus postfix/smtpd[2220149]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> May 2 01:59:15 canopus postfix/smtpd[2220149]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> May 2 01:59:15 canopus postfix/smtpd[2220149]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> May 2 01:59:16 canopus postfix/smtpd[2220149]: NOQUEUE: reject: RCPT from unknown[103.116.174. ... show less	Brute-Force Exploited Host
🇺🇸 basedchad	2025-04-23 05:15:57 UTC · (1 year ago)	This IP's subnet was blocked due to suspicious activity.	DDoS Attack Port Scan Brute-Force
🇺🇸 FloridaMetadata.com	2025-04-07 07:01:00 UTC · (1 year ago)	Received: from ip-174-125.higen.net.id (unknown [103.116.174.125]) by mx.easymail.ca (Postfix) with ESMTP id ECBD5A0848 for <@antihotmail.com>; Sun, 6 Apr 2025 15:13:54 +0000 (UTC) https://chasingheadlines.com/stwhmrxjjenigqcehzwmolxdksaarkbu ... show more Received: from ip-174-125.higen.net.id (unknown [103.116.174.125]) by mx.easymail.ca (Postfix) with ESMTP id ECBD5A0848 for <@antihotmail.com>; Sun, 6 Apr 2025 15:13:54 +0000 (UTC) https://chasingheadlines.com/stwhmrxjjenigqcehzwmolxdksaarkbup https://ipinfo.io/AS137363 https://ipinfo.io/AS137363/103.116.174.0/24 https://ipinfo.io/103.116.174.125 show less	Email Spam
🇫🇷 tecnicorioja	2025-03-31 06:45:54 UTC · (1 year ago)	Failed password for root Mar 31 06:53:01 port 55680	Brute-Force SSH
🇨🇿 unhfree.net	2025-03-23 00:14:37 UTC · (1 year ago)	Mar 23 01:12:31 canopus postfix/smtpd[2237454]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<wil ... show more Mar 23 01:12:31 canopus postfix/smtpd[2237454]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 23 01:12:31 canopus postfix/smtpd[2237454]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 23 01:12:31 canopus postfix/smtpd[2237454]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 23 01:12:31 canopus postfix/smtpd[2237454]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 <pizzamans@sezna ... show less	Brute-Force Exploited Host
🇺🇸 Ssmidge	2025-03-22 21:27:20 UTC · (1 year ago)	Mar 22 17:22:15 vps-6 sshd[1846940]: Failed password for root from 103.116.174.125 port 38308 ssh2 Mar 22 17:27:17 vps-6 sshd[1847786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.116.174.125 user=root ... show more Mar 22 17:22:15 vps-6 sshd[1846940]: Failed password for root from 103.116.174.125 port 38308 ssh2 Mar 22 17:27:17 vps-6 sshd[1847786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.116.174.125 user=root Mar 22 17:27:19 vps-6 sshd[1847786]: Failed password for root from 103.116.174.125 port 42182 ssh2 ... show less	Brute-Force SSH
🇳🇱 stom	2025-03-22 12:53:25 UTC · (1 year ago)	2025-03-22T12:51:45.027499 socky.stom66.co.uk postfix/smtpd[3568356]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 Service unavailable; Client host [103.116.174.125] blocked using zen.spamhaus.org; Listed by PBL, see https://check.s ... show more 2025-03-22T12:51:45.027499 socky.stom66.co.uk postfix/smtpd[3568356]: NOQUEUE: reject: RCPT from unknown[103.116.174.125]: 554 5.7.1 Service unavailable; Client host [103.116.174.125] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/103.116.174.125 / Listed by XBL, see https://check.spamhaus.org/query/ip/103.116.174.125 / Listed by CSS, see https://check.spamhaus.org/query/ip/103.116.174.125; from=<Alison> to=<[email protected]> proto=ESMTP helo=<ip-174-125.higen.net.id> ... show less	Email Spam Brute-Force
🇮🇩 Burayot	2025-03-01 23:31:56 UTC · (1 year ago)	LF_IMAPD: (imapd) Failed IMAP login from 103.116.174.125 (ID/Indonesia/ip-174-125.higen.net.id): 1 in the last 3600 secs	Brute-Force
Anonymous	2025-02-22 09:43:00 UTC · (1 year ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇷 213.176.26.144

🇺🇸 179.66.140.4

🇵🇹 37.189.247.48

🇫🇷 2a02:842b:a460:da01:7821:9f99:d15e:d9d1

🇧🇪 198.235.24.176

🇳🇴 185.12.59.118

🇲🇾 182.62.249.236

🇲🇾 180.74.70.66

🇵🇭 136.158.117.67

🇳🇱 134.209.88.226

🇳🇱 109.160.32.121

🇹🇭 104.28.246.148

🇹🇭 104.28.246.147

🇹🇭 104.28.214.148

🇸🇬 104.28.160.175

🇺🇸 96.62.71.153

🇫🇷 81.64.227.185

🇳🇱 77.239.124.154

🇩🇪 69.5.169.153

🇺🇸 66.132.186.160