JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.138.70.165

103.138.70.165 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 7%: ?

ISP	PT Centronet Data Indonesia
Usage Type	Fixed Line ISP
ASN	AS138884
Domain Name	centro.net.id
Country	🇮🇩 Indonesia
City	Pangkalan Kerinci, Riau

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.138.70.165

Whois 103.138.70.165

IP Abuse Reports for 103.138.70.165:

This IP address has been reported a total of 28 times from 13 distinct sources. 103.138.70.165 was first reported on June 29th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-04-26 08:29:54 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇵🇱 sefinek.net	2026-04-14 14:37:52 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.4 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2025-12-14 21:14:09 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /auth/register UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.74 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 05:43:25 (6 months ago)	ASN: 138884 (CENTRONETWORK-AS-ID PT Centronet Data Indonesia) Botnet Zombie: This IP has been detec ... show more ASN: 138884 (CENTRONETWORK-AS-ID PT Centronet Data Indonesia) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 01:29:31 (6 months ago)	ASN: 138884 (CENTRONETWORK-AS-ID PT Centronet Data Indonesia) Botnet Zombie: This IP has been detect ... show more ASN: 138884 (CENTRONETWORK-AS-ID PT Centronet Data Indonesia) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	Bad Web Bot
🇳🇱 Silly Development	2025-10-27 00:15:20 (7 months ago)	2025-10-27T01:14:44.646253+01:00 omega.nodes.sillydev.co.uk wings[1515476]: 2025/10/27 00:14:44 http ... show more 2025-10-27T01:14:44.646253+01:00 omega.nodes.sillydev.co.uk wings[1515476]: 2025/10/27 00:14:44 http: TLS handshake error from 103.138.70.165:54898: EOF 2025-10-27T01:15:05.627269+01:00 omega.nodes.sillydev.co.uk wings[1515476]: 2025/10/27 00:15:05 http: TLS handshake error from 103.138.70.165:54902: EOF 2025-10-27T01:15:19.528455+01:00 omega.nodes.sillydev.co.uk wings[1515476]: 2025/10/27 00:15:19 http: TLS handshake error from 103.138.70.165:54906: EOF ... show less	DDoS Attack
🇩🇪 Silly Development	2025-10-20 15:10:05 (7 months ago)	2025-10-20T17:09:50.149197+02:00 Raptor wings[1520817]: 2025/10/20 17:09:50 http: TLS handshake erro ... show more 2025-10-20T17:09:50.149197+02:00 Raptor wings[1520817]: 2025/10/20 17:09:50 http: TLS handshake error from 103.138.70.165:51772: EOF 2025-10-20T17:09:57.193951+02:00 Raptor wings[1520817]: 2025/10/20 17:09:57 http: TLS handshake error from 103.138.70.165:51777: EOF 2025-10-20T17:10:04.276076+02:00 Raptor wings[1520817]: 2025/10/20 17:10:04 http: TLS handshake error from 103.138.70.165:51781: EOF ... show less	DDoS Attack
🇩🇪 Silly Development	2025-10-10 15:53:36 (7 months ago)	2025-10-10T17:52:00.525607+02:00 Raptor wings[1602]: 2025/10/10 17:52:00 http: TLS handshake error f ... show more 2025-10-10T17:52:00.525607+02:00 Raptor wings[1602]: 2025/10/10 17:52:00 http: TLS handshake error from 103.138.70.165:60434: EOF 2025-10-10T17:53:08.350869+02:00 Raptor wings[1602]: 2025/10/10 17:53:08 http: TLS handshake error from 103.138.70.165:60506: EOF 2025-10-10T17:53:35.552703+02:00 Raptor wings[1602]: 2025/10/10 17:53:35 http: TLS handshake error from 103.138.70.165:60526: EOF ... show less	DDoS Attack
🇲🇾 Silly Development	2025-10-07 12:43:04 (8 months ago)	2025-10-07T12:42:14.796347+00:00 onyx wings[50209]: 2025/10/07 12:42:14 http: TLS handshake error fr ... show more 2025-10-07T12:42:14.796347+00:00 onyx wings[50209]: 2025/10/07 12:42:14 http: TLS handshake error from 103.138.70.165:52054: EOF 2025-10-07T12:42:45.847168+00:00 onyx wings[50209]: 2025/10/07 12:42:45 http: TLS handshake error from 103.138.70.165:52066: EOF 2025-10-07T12:43:03.021061+00:00 onyx wings[50209]: 2025/10/07 12:43:03 http: TLS handshake error from 103.138.70.165:52078: EOF ... show less	DDoS Attack
🇲🇾 Silly Development	2025-10-06 17:21:55 (8 months ago)	2025-10-06T17:20:36.690752+00:00 onyx wings[50209]: 2025/10/06 17:20:36 http: TLS handshake error fr ... show more 2025-10-06T17:20:36.690752+00:00 onyx wings[50209]: 2025/10/06 17:20:36 http: TLS handshake error from 103.138.70.165:57071: EOF 2025-10-06T17:21:09.744328+00:00 onyx wings[50209]: 2025/10/06 17:21:09 http: TLS handshake error from 103.138.70.165:57090: EOF 2025-10-06T17:21:54.049284+00:00 onyx wings[50209]: 2025/10/06 17:21:54 http: TLS handshake error from 103.138.70.165:57118: EOF ... show less	DDoS Attack
🇺🇸 yangfan	2025-09-29 16:15:35 (8 months ago)	IP: 103.138.70.165 [Country: ID] triggered WAF (firewallCustom). Action: managed_challenge ASN: 1388 ... show more IP: 103.138.70.165 [Country: ID] triggered WAF (firewallCustom). Action: managed_challenge ASN: 138884 (CENTRONETWORK-AS-ID PT Centronet Data Indonesia) Protocol: HTTP/1.1 (method GET) Endpoint: /cc.hryjtrgefw Time: 2025-09-29T14:36:23Z User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.109 Safari/537.36 OPR/84.0.4316.50 --- Report generated by CFWAF2AbuseIPDB. show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-09-18 09:56:59 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 shabi	2025-09-06 16:14:49 (9 months ago)	IP: 103.138.70.165 [Country: ID] triggered WAF (firewallCustom). Action: block ASN: 138884 (CENTRONE ... show more IP: 103.138.70.165 [Country: ID] triggered WAF (firewallCustom). Action: block ASN: 138884 (CENTRONETWORK-AS-ID PT Centronet Data Indonesia) Protocol: HTTP/1.1 (method GET) Endpoint: /cc.su Time: 2025-09-06T14:43:56Z User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0 --- Report generated by CFWAF2AbuseIPDB. show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Silly Development	2025-09-06 13:42:40 (9 months ago)	Malicious activity detected from 138884 CENTRONETWORK-AS-ID PT Centronet Data Indonesia towards host ... show more Malicious activity detected from 138884 CENTRONETWORK-AS-ID PT Centronet Data Indonesia towards host panel.sillydev.co.uk (GET HTTP/1.1) @ 2025-09-06T13:42:40Z (7 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 1gz	2025-08-24 00:51:11 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.127.69.115

🇳🇱 176.65.148.81

🇨🇳 106.13.183.241

🇻🇳 45.117.177.47

🇩🇪 2a0b:f4c2:2::35

🇮🇩 203.83.39.67

🇺🇸 195.184.76.208

🇺🇸 165.227.110.45

🇵🇭 119.93.249.179

🇺🇸 107.89.114.117

🇺🇸 104.37.185.25

🇲🇾 103.6.245.158

🇫🇮 87.121.105.152

🇺🇸 65.49.1.29

🇺🇸 44.12.154.97

🇫🇷 2a02:4780:27:1372:0:31b5:d015:1

🇺🇸 2607:f8b0:4001:c61::126

🇯🇵 156.227.235.87

🇭🇰 125.59.145.78

🇺🇸 104.37.185.38