JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.166.159.197

103.166.159.197 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 3%: ?

ISP	PT Timor Lintas Nusantara
Usage Type	Fixed Line ISP
ASN	AS141955
Domain Name	timorlintas.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.166.159.197

Whois 103.166.159.197

IP Abuse Reports for 103.166.159.197:

This IP address has been reported a total of 15 times from 12 distinct sources. 103.166.159.197 was first reported on August 9th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 week ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 157cd6d7-1140-4c75-95c6-4a267aae4754	DDoS Attack
🇺🇸 COMPLEX	2026-03-17 18:26:53 (2 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:145.0) Gecko/145.0 Firefox/145.0 show less	DDoS Attack Bad Web Bot
🇮🇳 Bharat Datacenter	2026-03-05 18:44:26 (2 months ago)	6: date=2026-03-06 time=00:11:40 eventtime=1772736101162336740 tz="+0530" logid="0720018432" type="u ... show more 6: date=2026-03-06 time=00:11:40 eventtime=1772736101162336740 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=103.166.159.197 srccountry="Indonesia" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=195298 attack="tcp_syn_flood" srcport=52965 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 5936 > threshold 2000, repeats 195298 times since last log, pps 5995 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
Anonymous	2026-03-02 19:20:08 (3 months ago)	\| [Dangerous/Indonesia] Agressive IP 103.166.159.197 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Agressive IP 103.166.159.197 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇧🇬 cheatmaster.store	2026-02-26 05:16:04 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Indonesia Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇮🇹 VHosting	2026-02-24 10:34:16 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇳 liveaspankaj	2026-02-20 23:31:20 (3 months ago)	DDoS attack: 58 requests in 5m (GET / or repair.php).	DDoS Attack
🇬🇧 Silly Development	2025-09-29 20:52:28 (8 months ago)	Malicious activity detected from 141955 IDNIC-TIMORLINTAS-AS-ID PT Timor Lintas Nusantara towards ho ... show more Malicious activity detected from 141955 IDNIC-TIMORLINTAS-AS-ID PT Timor Lintas Nusantara towards host sillydev.co.uk (GET HTTP/2) @ 2025-09-29T20:52:28Z (3 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 1gz	2025-09-24 15:00:43 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 COMPLEX	2025-09-23 20:01:40 (8 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141955 (IDNIC-TIMORLINTAS-AS-ID ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141955 (IDNIC-TIMORLINTAS-AS-ID PT Timor Lintas Nusantara) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇩🇪 CommanderRoot	2025-08-26 18:53:24 (9 months ago)	HTTP request flood	DDoS Attack Web Spam
🇸🇬 Vano Ganzzz	2025-08-24 00:30:39 (9 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141955 (IDNIC-TIMORLINTAS-AS-ID ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 141955 (IDNIC-TIMORLINTAS-AS-ID PT Timor Lintas Nusantara) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-08-24T00:30:39Z Ray ID: 973ebe06296d44bb UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2025-08-14 20:53:04 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK ASN: 141955 (IDNIC-TIMORLINTA ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK ASN: 141955 (IDNIC-TIMORLINTAS-AS-ID PT Timor Lintas Nusantara) Protocol: HTTP/2 (GET method) Endpoint: / show less	Bad Web Bot
🇬🇧 Silly Development	2025-08-10 00:59:05 (9 months ago)	Malicious activity detected from 141955 IDNIC-TIMORLINTAS-AS-ID PT Timor Lintas Nusantara towards ho ... show more Malicious activity detected from 141955 IDNIC-TIMORLINTAS-AS-ID PT Timor Lintas Nusantara towards host sillydev.co.uk (GET HTTP/2) @ 2025-08-10T00:59:05Z (6 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-08-09 16:43:20 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.132.139.64

🇸🇾 212.68.59.126

🇵🇰 202.143.122.157

🇺🇸 162.216.150.220

🇺🇸 154.21.80.14

🇧🇬 91.191.209.46

🇬🇧 35.203.210.156

🇺🇸 23.191.200.23

🇺🇸 20.65.184.116

🇬🇧 2a06:4880:8000::9b

🇺🇸 216.218.206.67

🇯🇵 212.135.208.13

🇺🇸 195.184.76.163

🇺🇸 195.184.76.160

🇻🇳 103.69.96.120

🇺🇸 77.91.118.50

🇺🇸 65.49.1.162

🇭🇰 58.152.42.174

🇹🇷 45.158.14.124

🇹🇼 198.235.24.15