JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.144.102.109

103.144.102.109 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 18%: ?

18%

ISP	PT Dharma Sarana Solusindo
Usage Type	Fixed Line ISP
ASN	AS139421
Domain Name	pandawa.net.id
Country	🇮🇩 Indonesia
City	Indramayu, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.144.102.109

Whois 103.144.102.109

IP Abuse Reports for 103.144.102.109:

This IP address has been reported a total of 22 times from 14 distinct sources. 103.144.102.109 was first reported on February 18th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-06-30 07:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 103.144.102.109. Threat Score: 6.4/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 103.144.102.109. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 76%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-30 06:00:52 (1 week ago)	Zimbra: Login failures from malicious IP: 103.144.102.109. Threat Score: 6.5/10 (HIGH). Confidence: ... show more Zimbra: Login failures from malicious IP: 103.144.102.109. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 hermawan	2026-06-22 09:21:27 (2 weeks ago)	[Mon Jun 22 16:21:26.926601 2026] [security2:error] [pid 268865:tid 140214922254016] [client 103.144 ... show more [Mon Jun 22 16:21:26.926601 2026] [security2:error] [pid 268865:tid 140214922254016] [client 103.144.102.109:50922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-distribusi-hujan/analisis-distribusi-curah-hujan"] [unique_id "ajj-lsH3qoduMLxM89v8CwADBgA"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[268867] [XxW2KhSXhXw] [ajj-lsH3qoduMLxM89v8CwADBgA] keep_alive=[1] [2026-06-22 16:21:26.926608] [R ... show less	Email Spam Hacking
🇩🇪 Vegascosmetics	2026-06-20 21:24:40 (2 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇳 Mcshield.org	2025-12-01 01:14:26 (7 months ago)	GET /cgi-bin/ HTTP/1.1" 404 - "Mozilla/5.0 zgrab/0.x"	Web Spam Port Scan Hacking
🇨🇦 TCP FAILED	2025-06-20 16:59:19 (1 year ago)	TCP Watch Auto Report: Detected a ddos attack and suspicious activity from this IP, indicating a pot ... show more TCP Watch Auto Report: Detected a ddos attack and suspicious activity from this IP, indicating a potential attack show less	DDoS Attack Hacking IoT Targeted
🇷🇺 avaio-media	2025-06-17 09:28:18 (1 year ago)		Brute-Force
🇺🇸 COMPLEX	2025-06-06 05:30:35 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 139421 (PANDAWANET-AS-ID PT Dhar ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 139421 (PANDAWANET-AS-ID PT Dharma Sarana Solusindo) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2025-05-22 03:34:25 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 139421 (PANDAWANET-AS-ID PT Dhar ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 139421 (PANDAWANET-AS-ID PT Dharma Sarana Solusindo) Protocol: HTTP/2 (GET method) Endpoint: /login show less	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2025-05-19 21:40:20 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 139421 (PANDAWANET-AS-ID PT Dhar ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 139421 (PANDAWANET-AS-ID PT Dharma Sarana Solusindo) Protocol: HTTP/2 (GET method) Timestamp: 2025-05-19T21:39:19Z show less	Bad Web Bot
🇬🇧 SuperEvilLuke	2025-05-19 18:19:10 (1 year ago)	Malicious activity detected from 139421 PANDAWANET-AS-ID PT Dharma Sarana Solusindo towards host pan ... show more Malicious activity detected from 139421 PANDAWANET-AS-ID PT Dharma Sarana Solusindo towards host panel.embotic.xyz (GET HTTP/2) @ 2025-05-19T18:19:10Z (2 occurrences) show less	DDoS Attack
🇮🇩 securejdprop	2025-05-15 10:45:16 (1 year ago)	This IP was detected by CrowdSec triggering jendela/too-many-probing. Ip 103.144.102.109 performed ' ... show more This IP was detected by CrowdSec triggering jendela/too-many-probing. Ip 103.144.102.109 performed 'jendela/too-many-probing' (4 events over 177.490738ms) at 2025-05-15 10:44:27.660466728 +0000 UTC show less	Hacking Brute-Force Web App Attack
🇬🇧 uira.live	2025-05-04 15:54:43 (1 year ago)	Malicious activity detected from 139421 PANDAWANET-AS-ID PT Dharma Sarana Solusindo towards host uir ... show more Malicious activity detected from 139421 PANDAWANET-AS-ID PT Dharma Sarana Solusindo towards host uira.live (GET HTTP/2) @ 2025-05-04T15:54:43Z (5 occurrences) show less	DDoS Attack
🇵🇱 sefinek.net	2025-05-04 15:43:09 (1 year ago)	DDoS Attack L7 (3.01 RPS): Requests coming from known bad sources. UA: Mozilla/5.0 (Windows NT 10.0; ... show more DDoS Attack L7 (3.01 RPS): Requests coming from known bad sources. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇬🇧 Silly Development	2025-05-03 10:49:24 (1 year ago)	Malicious activity detected from 139421 PANDAWANET-AS-ID PT Dharma Sarana Solusindo towards host pan ... show more Malicious activity detected from 139421 PANDAWANET-AS-ID PT Dharma Sarana Solusindo towards host panel.sillydev.co.uk (GET HTTP/1.1) @ 2025-05-03T10:49:24Z (1 occurrences) show less	DDoS Attack Hacking Exploited Host

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.98.189

🇲🇽 200.68.172.6

🇬🇧 185.216.145.170

🇦🇺 65.254.93.170

🇬🇧 5.226.140.20

🇺🇸 195.252.206.160

🇵🇱 176.53.159.197

🇩🇪 141.11.32.54

🇺🇸 98.81.214.57

🇺🇸 66.187.7.97

🇺🇸 66.132.186.142

🇪🇸 5.182.83.231

🇨🇳 222.93.12.122

🇷🇺 217.118.90.191

🇰🇪 197.248.207.139

🇹🇬 196.170.87.37

🇹🇭 114.131.130.11

🇵🇱 109.205.211.91

🇰🇷 61.84.211.107

🇸🇬 47.128.51.65