JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.144.146.137

103.144.146.137 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 16%: ?

16%

ISP	PT.LEXXA DATA INDONUSA
Usage Type	Fixed Line ISP
ASN	AS139428
Hostname(s)	146-137.lexxadata.net.id
Domain Name	lexxadata.co.id
Country	🇮🇩 Indonesia
City	Trenggalek, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.144.146.137

Whois 103.144.146.137

IP Abuse Reports for 103.144.146.137:

This IP address has been reported a total of 80 times from 54 distinct sources. 103.144.146.137 was first reported on January 11th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-08-17 05:00:53 (6 days ago)	Zimbra: Login failures from malicious IP: 103.144.146.137. Threat Score: 6.2/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 103.144.146.137. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-17 04:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 103.144.146.137. Threat Score: 6.3/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 103.144.146.137. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-17 03:00:09 (1 week ago)	Zimbra: Login failures from malicious IP: 103.144.146.137. Threat Score: 6/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 103.144.146.137. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-07-31 04:23:05 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇮 as211431.net	2026-07-14 01:24:46 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-06 17:41:29 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-11 00:51:21 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 soc-yk	2026-06-10 15:54:10 (2 months ago)	Type: suspicious_network_activity Risk: 70 Events: 290 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 70 Events: 290 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
Anonymous	2026-06-08 16:23:01 (2 months ago)	...	Brute-Force
🇫🇷 dwmp	2026-06-08 16:11:49 (2 months ago)	Jun 8 18:11:48 plesk postfix/smtpd[1305785]: warning: unknown[103.144.146.137]: SASL CRAM-MD5 authe ... show more Jun 8 18:11:48 plesk postfix/smtpd[1305785]: warning: unknown[103.144.146.137]: SASL CRAM-MD5 authentication failed: authentication failure Jun 8 18:11:48 plesk postfix/smtpd[1305785]: warning: unknown[103.144.146.137]: SASL PLAIN authentication failed: authentication failure Jun 8 18:11:48 plesk postfix/smtpd[1305785]: warning: unknown[103.144.146.137]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force SSH
🇳🇱 maxxsense	2026-05-31 04:52:30 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 103.144.146.137 (ID/Indonesia/146-137.lexxadata.net.id)	Brute-Force
🇨🇦 electronico	2026-05-31 04:41:01 (2 months ago)	2026-05-31T15:40:56.383059+11:00 mail.host postfix/smtps/smtpd[88145]: warning: unknown[103.144.146. ... show more 2026-05-31T15:40:56.383059+11:00 mail.host postfix/smtps/smtpd[88145]: warning: unknown[103.144.146.137]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-05-31T15:41:00.342435+11:00 mail.host postfix/smtps/smtpd[88144]: warning: unknown[103.144.146.137]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-05-31T15:41:00.342537+11:00 mail.host postfix/smtps/smtpd[88148]: warning: unknown[103.144.146.137]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force Email Spam
🇨🇭 master.arknet.ch	2026-05-30 16:25:45 (2 months ago)	2026-05-30T18:25:38.172134+02:00 cliff postfix[728]: May 30 16:25:38 mail postfix/smtpd[2927]: warni ... show more 2026-05-30T18:25:38.172134+02:00 cliff postfix[728]: May 30 16:25:38 mail postfix/smtpd[2927]: warning: unknown[103.144.146.137]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-05-30T18:25:44.307196+02:00 cliff postfix[728]: May 30 16:25:44 mail postfix/smtpd[2927]: warning: unknown[103.144.146.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, [email protected] 2026-05-30T18:25:44.512296+02:00 cliff postfix[728]: May 30 16:25:44 mail postfix/smtpd[2927]: lost connection after AUTH from unknown[103.144.146.137] ... show less	Brute-Force
🇱🇻 garmtech.com	2026-05-02 15:17:28 (3 months ago)	Multiple SASL authentication failures.	Brute-Force
Anonymous	2026-05-02 14:18:20 (3 months ago)	SMTP brute force - auth failed	Brute-Force Exploited Host

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.145.115.134

🇺🇸 104.23.160.153

🇧🇫 102.178.137.98

🇫🇷 91.196.152.243

🇺🇸 2400:cb00:988:1000:fc32:dc76:21a3:6ee7

🇱🇹 213.176.26.94

🇳🇱 193.176.31.222

🇸🇬 185.200.116.79

🇧🇩 180.92.230.131

🇺🇸 104.23.160.220

🇺🇸 104.23.160.46

🇹🇷 93.177.103.125

🇹🇷 93.177.103.100

🇸🇾 91.144.21.210

🇨🇦 85.217.149.65

🇫🇷 84.102.242.6

🇺🇸 66.132.195.115

🇺🇸 64.71.164.99

🇨🇦 20.151.9.151

🇦🇷 186.158.145.213