JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.196.116.163

Neutral Activity

Abuse confidence score ?

0% Low Risk

50 reports

32 reporters · latest 3 months ago

ISP	PT Media Antar Nusa
Usage Type	Fixed Line ISP
ASN	AS23679
Domain Name	nusanet.id
Country	🇮🇩 Indonesia
City	Medan, North Sumatra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.196.116.163 has been reported 50 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.196.116.163

This IP address has been reported a total of 50 times from 32 distinct sources. 103.196.116.163 was first reported on May 23rd 2026, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-05-29 11:38:05 (3 months ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇬🇧 openstrike.co.uk	2026-05-29 05:43:59 (3 months ago)	11 packets to ports 5900 5901 5902 5903 5904 5905 5906 5907 5908 5909 5910	Port Scan
🇳🇱 StopAbuse	2026-05-28 17:46:26 (3 months ago)	tcp/5900 tcp/5902 tcp/5903 tcp/5906 tcp/5908	Port Scan
🇳🇱 StopAbuse	2026-05-28 16:27:28 (3 months ago)	tcp/5901 tcp/5905 tcp/5907 tcp/5910	Port Scan
🇫🇮 6kilowatti	2026-05-28 16:07:05 (3 months ago)	2026-05-28T19:07:05.393119+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-05-28T19:07:05.393119+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=103.196.116.163 DST=10.0.0.30 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=35594 PROTO=TCP SPT=56862 DPT=5901 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 6kilowatti	2026-05-28 15:19:17 (3 months ago)	2026-05-28T18:19:17.264941+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-05-28T18:19:17.264941+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=103.196.116.163 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=40811 PROTO=TCP SPT=62877 DPT=5903 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇹🇷 0xi	2026-05-28 15:00:36 (3 months ago)	Malicious scanning and attack activity detected (42 attempts). Targeted ports: 5901, 5909, 5910. Tri ... show more Malicious scanning and attack activity detected (42 attempts). Targeted ports: 5901, 5909, 5910. Triggered sensors: P0f, Suricata, Honeytrap. Observed via distributed honeypot network. show less	Port Scan
🇫🇮 iamxorum	2026-05-28 13:13:15 (3 months ago)	2026-05-28T13:13:14.545166+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-05-28T13:13:14.545166+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=103.196.116.163 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=1019 PROTO=TCP SPT=19070 DPT=5900 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 phil2k	2026-05-28 12:45:50 (3 months ago)	fail2ban:firewall:2026-05-28T14:14:39.900335+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-05-28T14:14:39.900335+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=103.196.116.163 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=58194 PROTO=TCP SPT=37811 DPT=5909 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-28T14:45:48.706348+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=103.196.116.163 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=26088 PROTO=TCP SPT=27184 DPT=5902 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇫🇮 6kilowatti	2026-05-28 12:39:39 (3 months ago)	2026-05-28T15:39:38.746553+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-05-28T15:39:38.746553+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=103.196.116.163 DST=192.168.0.102 LEN=44 TOS=0x00 PREC=0x20 TTL=239 ID=11793 PROTO=TCP SPT=56129 DPT=5907 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 rafamiga	2026-05-28 12:08:25 (3 months ago)	fail2ban/ufw - Port scan detected. ...	Port Scan
🇩🇪 mattk	2026-05-28 10:01:08 (3 months ago)	port scan	Port Scan
🇯🇵 S.O.B.A. Dev.	2026-05-27 17:03:30 (3 months ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇩🇪 on1x.cloud	2026-05-27 10:39:08 (4 months ago)	[on1x.cloud] SSH-Multi login Attempt	Brute-Force SSH
🇫🇮 6kilowatti	2026-05-27 09:42:17 (4 months ago)	2026-05-27T12:42:16.685580+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-05-27T12:42:16.685580+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=103.196.116.163 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=36908 PROTO=TCP SPT=35994 DPT=5910 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 186.85.240.65

🇺🇸 205.210.31.33

🇭🇰 152.32.189.181

🇸🇬 136.110.54.70

🇺🇸 107.150.110.121

🇫🇷 91.134.133.184

🇳🇱 77.239.124.172

🇺🇸 68.227.77.50

🇺🇸 65.111.7.125

🇺🇸 35.193.64.220

🇧🇷 34.39.179.77

🇺🇸 24.102.143.126

🇮🇳 182.95.217.202

🇵🇱 176.53.159.198

🇳🇱 109.160.32.79

🇲🇾 43.217.162.56

🇵🇰 223.123.42.48

🇧🇷 190.115.84.25

🇺🇦 188.239.78.237

🇺🇸 142.93.8.51