JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.159.96.102

103.159.96.102 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	PT Jinde Grup Indonesia
Usage Type	Fixed Line ISP
ASN	AS141140
Domain Name	myriseid.com
Country	🇮🇩 Indonesia
City	Krajan, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.159.96.102

Whois 103.159.96.102

IP Abuse Reports for 103.159.96.102:

This IP address has been reported a total of 15 times from 13 distinct sources. 103.159.96.102 was first reported on October 30th 2023, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Tizian Maxime Weigt	2025-07-25 04:55:15 (10 months ago)	Incoming DDoS to port 443 (L7 HTTPS Flood) Detected	DDoS Attack
🇫🇷 ᴀʀᴛ	2025-07-22 07:20:25 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. ASN: 141140 (IDNIC-MYRISE-AS-ID PT Jinde Grup Indonesia) ... show more Triggered Cloudflare WAF (l7ddos) from ID. ASN: 141140 (IDNIC-MYRISE-AS-ID PT Jinde Grup Indonesia) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇫🇷 sterile.network	2025-07-21 21:59:08 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /..3... UA: z1ea8qp9EbjHGsI show less	DDoS Attack Bad Web Bot
🇩🇪 Tizian Maxime Weigt	2025-07-21 19:11:32 (10 months ago)	Incoming DDoS to port 443 (L7 HTTPS Flood) Detected	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-07-19 20:48:06 (10 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Tizian Maxime Weigt	2025-07-18 08:03:57 (10 months ago)	Incoming DDoS to port 443 (L7 HTTPS Flood) Detected	DDoS Attack
🇬🇧 Silly Development	2025-07-16 01:58:23 (10 months ago)	Malicious activity detected from 141140 IDNIC-MYRISE-AS-ID PT Jinde Grup Indonesia towards host pane ... show more Malicious activity detected from 141140 IDNIC-MYRISE-AS-ID PT Jinde Grup Indonesia towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-07-16T01:58:23Z (2 occurrences) show less	DDoS Attack Exploited Host
Anonymous	2025-01-16 11:58:56 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇨🇿 lp	2024-10-30 19:26:20 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 103.159.96.102 2024-10-30T19:33:27+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 103.159.96.102 2024-10-30T19:33:27+01:00 vpn Access-Reject 'q1w2e3r4t5' station: 103.159.96.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇪🇸 10dencehispahard SL	2024-10-03 06:19:20 (1 year ago)	DDOS attack	DDoS Attack Brute-Force
🇮🇩 hermawan	2024-08-17 11:20:23 (1 year ago)	[Sat Aug 17 18:19:28.393917 2024] [security2:error] [pid 318835:tid 132458091644480] [client 103.159 ... show more [Sat Aug 17 18:19:28.393917 2024] [security2:error] [pid 318835:tid 132458091644480] [client 103.159.96.102:39640] [client 103.159.96.102] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /administrator/ /TableFilter/system-v167.css /index.php /android-icon-192-192.png /offline-service-worker-07-07-2023-v-4-15-0.js /plugins/Morpheus/ /offline-service-worker-01-08-2023-v4-5-1.js /index.php?module /depan/offline/ /OneSignalSDKWorker.js /O ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "441003"] [msg "bot downloader Cache-Control no-cache gak punya cookies dan diluar REQUEST_LINE line"] [data "Matched Data: no-cache found within REQUEST_LINE: GET /timeout-worker-v3.js HTTP/2.0 request_line = GET /timeout-worker-v3.js HTTP/2.0"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/timeout-worker-v3.js"] [unique_id "ZsCHQK1ZNkeFqq37aDjvHAABUwU"], referer https://staklim-jatim.bmkg.go.id/i ... show less	Hacking Web App Attack
🇺🇸 nowyouknow	2024-03-30 14:08:08 (2 years ago)	(From [email protected]) SZPaYQFDxJ	Phishing Web Spam
🇩🇪 paradox-hub.fr	2024-01-01 02:11:28 (2 years ago)	1704075012 - 01/01/2024 02:10:12 Host: 103.159.96.102/103.159.96.102 Port: 487 UDP Blocked	Port Scan
🇨🇦 Largnet SOC	2023-12-11 09:57:12 (2 years ago)	103.159.96.102 triggered Icarus honeypot on port 445. Check us out on github.	Port Scan Hacking
Anonymous	2023-10-30 16:48:36 (2 years ago)	Malicious Activity Detected	Hacking Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a02:4780:b:737:0:225d:dee:1

🇨🇳 222.128.15.127

🇩🇪 213.209.159.52

🇨🇦 207.219.221.53

🇨🇦 159.203.58.78

🇨🇦 144.217.76.59

🇨🇦 142.44.247.134

🇨🇳 123.160.235.85

🇨🇳 113.246.155.32

🇮🇳 103.91.246.101

🇺🇸 98.90.43.197

🇺🇸 69.73.187.130

🇺🇸 66.132.195.17

🇫🇷 51.68.109.176

🇻🇪 38.166.166.240

🇮🇶 37.238.67.19

🇺🇸 2604:a880:400:d1:0:4:8c04:8001

🇨🇳 223.107.146.186

🇨🇳 223.105.71.106

🇨🇳 222.246.240.162