103.167.236.66

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
59% Elevated
316 reports
80 reporters · latest 22 hours ago
ISP
PT Whiz Digital Berjaya
Usage Type
Fixed Line ISP
ASN
AS142308
Domain Name
whizdigital.id
Country
🇮🇩 Indonesia
City
Perbaungan, North Sumatra
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
316 from 80 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇮🇪 Ireland 3 🇦🇹 Austria 2
Most common categories Port Scan 12 Brute-Force 6 Hacking 2 Web App Attack 1 Email Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 HoneyPot-FrPri
1790134891 - 09/23/2026 05:41:31 Host: 103.167.236.66/103.167.236.66 Port: 1433 TCP Blocked ...
Port Scan
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
🇺🇸 COMPLEX
Unsolicited TCP traffic | Action: DROP | Port 1433
Brute-Force
🇨🇿 Petr Dub
Brute-force attack on MS SQL server, port 1433.
Brute-Force
🇨🇦 Arpan Sen
Network port/address scan: probed 1 distinct port(s) across 29 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan
🇮🇩 bps-statistics
TinyMCE Scan Activities: "2026-09-09T09:05:06.065+07:00" "/se2026/assets/vendor/tinymce/tinymce.min.js" "103.167.236.66" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
Web App Attack
🇳🇵 radheykrishna.com.np
Sep 7 03:41:25 kernel: [2447968.230495] [UFW BLOCK] IN=ens160 OUT= SRC=103.167.236.66 LEN=52 TOS=0x0A PREC=0x20 TTL=115 ID=177 DF PROTO=TCP SPT=56843 DPT=1433 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 ...
Port Scan
🇫🇮 6kilowatti
Port Scan
🇨🇿 Countryman
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 109 | Len: 52B | Win: 8192(1) | F2B/ufw-honeypot@2026-09-02T12:04:22Z
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: MSSQL traffic (on 1433) without login credentials
Port Scan
🇹🇷 pashait
Auto-blocked by Seczar SecureOps — Database Service Brute Force (11 events in 5min) at 2026-08-31 00:39
Web App Attack
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
🇪🇸 raiolanetworks.com
Honeypot detection: malware/exploit attempt. 2 events observed. 1 login attempts. Reported automatically from a honeypot sensor.
Hacking
🇷🇸 Smel
SQL/MH Probe, Scan, Hack -
Port Scan Hacking SQL Injection

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 192.144.253.244
🇨🇱 190.47.12.75
🇵🇱 172.69.155.190
🇷🇴 92.118.39.50
🇺🇸 66.132.172.154
🇳🇱 45.148.10.151
🇸🇪 5.133.192.88
🇿🇦 4.168.232.22
🇺🇸 216.25.90.61
🇺🇸 209.126.2.129
🇨🇱 181.42.188.145
🇻🇳 180.93.193.100
🇺🇸 167.172.227.57
🇬🇧 165.154.129.201
🇧🇩 103.153.130.5
🇸🇮 102.220.161.173
🇫🇷 91.231.89.174
🇷🇺 83.142.14.179
🇭🇰 43.129.248.59
🇧🇷 34.95.247.158
feedback