JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.145.244.26

Activity Trending Down

Abuse confidence score ?

13% Caution

73 reports

36 reporters · latest 4 weeks ago

ISP	PT Netciti Persada
Usage Type	Fixed Line ISP
ASN	AS132641
Domain Name	netciti.co.id
Country	🇮🇩 Indonesia
City	Tangerang, Banten

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 103.145.244.26

This IP address has been reported a total of 73 times from 36 distinct sources. 103.145.244.26 was first reported on September 6th 2025, and the most recent report was 4 weeks ago. In the last 60 days, the top reporter locations were: United States of America with 2 reports; Indonesia with 1 report. The most common categories in these recent reports were: Bad Web Bot 2 times; Web App Attack 1 time; Hacking 1 time; DDoS Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-25 06:13:21 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-22 09:03:43 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇮🇩 sockominfo	2026-08-07 09:00:53 (1 month ago)	User login to application from malicious IP 103.145.244.26.. Threat Score: 4.6/10 (MEDIUM). Confiden ... show more User login to application from malicious IP 103.145.244.26.. Threat Score: 4.6/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 80%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-09 13:00:41 (4 months ago)	User login to application from malicious IP 103.145.244.26.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 103.145.244.26.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 51%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-09 12:00:39 (4 months ago)	User login to application from malicious IP 103.145.244.26.. Threat Score: 4/10 (MEDIUM). Confidence ... show more User login to application from malicious IP 103.145.244.26.. Threat Score: 4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 57%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-09 10:00:14 (4 months ago)	User login to application from malicious IP 103.145.244.26.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 103.145.244.26.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 hserv	2025-10-23 08:31:06 (10 months ago)	2025-10-23T10:29:32.029528+02:00 topah03 sshd[4079713]: Invalid user edy from 103.145.244.26 port 51 ... show more 2025-10-23T10:29:32.029528+02:00 topah03 sshd[4079713]: Invalid user edy from 103.145.244.26 port 51461 2025-10-23T10:29:51.857633+02:00 topah03 sshd[4080053]: Invalid user system from 103.145.244.26 port 51532 2025-10-23T10:30:10.594499+02:00 topah03 sshd[4080412]: Invalid user msr from 103.145.244.26 port 53999 2025-10-23T10:30:29.416687+02:00 topah03 sshd[4080944]: Invalid user jbhwang from 103.145.244.26 port 51529 2025-10-23T10:31:06.202741+02:00 topah03 sshd[4081803]: Invalid user deploy from 103.145.244.26 port 33568 ... show less	Brute-Force SSH
🇭🇰 bluecloudwork	2025-10-23 07:32:05 (10 months ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇺🇸 Rocky Mountain Bioengineering Symposium	2025-10-22 08:40:07 (11 months ago)	Oct 22 02:40:06 KORD-B sshd[3128166]: Connection closed by 103.145.244.26 port 7400 [preauth] ...	Brute-Force SSH
🇩🇪 kkeyser	2025-10-20 15:30:11 (11 months ago)	Failed password for root from 103.145.244.26 port 4497 ssh2	Brute-Force SSH
🇳🇱 Francisco Vallejo	2025-10-11 10:53:03 (11 months ago)	Oct 11 12:52:07 putisimocoque sshd[4033440]: pam_unix(sshd:auth): authentication failure; logname= u ... show more Oct 11 12:52:07 putisimocoque sshd[4033440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.145.244.26 Oct 11 12:52:09 putisimocoque sshd[4033440]: Failed password for invalid user ryan from 103.145.244.26 port 35626 ssh2 Oct 11 12:53:00 putisimocoque sshd[4034481]: Invalid user jiayu from 103.145.244.26 port 4484 Oct 11 12:53:00 putisimocoque sshd[4034481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.145.244.26 Oct 11 12:53:02 putisimocoque sshd[4034481]: Failed password for invalid user jiayu from 103.145.244.26 port 4484 ssh2 ... show less	Brute-Force SSH
🇩🇪 ps-center	2025-10-11 09:18:35 (11 months ago)	C1: Brutforce ssh Login	Brute-Force
🇸🇰 Spyerfox	2025-10-11 07:12:33 (11 months ago)	Oct 11 09:12:30 <server> sshd\[1461\]: User root from 103.145.244.26 not allowed because not listed ... show more Oct 11 09:12:30 <server> sshd\[1461\]: User root from 103.145.244.26 not allowed because not listed in AllowUsersOct 11 09:12:33 <server> sshd\[1461\]: Failed password for invalid user root from 103.145.244.26 port 62608 ssh2 ... show less	Brute-Force SSH
🇩🇪 ps-center	2025-10-06 01:35:12 (11 months ago)	C2: Brutforce ssh Login	Brute-Force
Anonymous	2025-10-05 21:35:00 (11 months ago)	Oct 5 23:34:59 eiaf sshd[3529641]: Connection from 103.145.244.26 port 4403 on 88.218.224.13 port 5 ... show more Oct 5 23:34:59 eiaf sshd[3529641]: Connection from 103.145.244.26 port 4403 on 88.218.224.13 port 5123 rdomain "" Oct 5 23:35:00 eiaf sshd[3529641]: Invalid user aishwarya from 103.145.244.26 port 4403 ... show less	DDoS Attack Port Scan Brute-Force SSH

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 61.87.113.81

🇭🇰 199.45.154.186

🇧🇷 191.37.68.23

🇷🇺 178.251.142.166

🇧🇷 177.191.51.129

🇫🇷 145.239.141.192

🇺🇸 138.197.92.239

🇫🇷 85.217.140.48

🇫🇷 85.217.140.15

🇱🇹 77.90.185.46

🇨🇦 45.42.103.228

🇺🇸 20.14.76.49

🇮🇳 4.240.96.30

🇨🇦 4.206.92.183

🇻🇪 190.202.89.69

🇦🇷 190.2.22.129

🇵🇰 154.57.216.142

🇮🇳 103.192.199.245

🇮🇩 103.162.69.11

🇻🇳 103.153.65.59