JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.242.104.209

103.242.104.209 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 22%: ?

22%

ISP	PT Lintas Jaringan Nusantara
Usage Type	Fixed Line ISP
ASN	AS58821
Domain Name	lintasjaringan.net
Country	🇮🇩 Indonesia
City	Kudus, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.242.104.209

Whois 103.242.104.209

IP Abuse Reports for 103.242.104.209:

This IP address has been reported a total of 57 times from 28 distinct sources. 103.242.104.209 was first reported on February 25th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-21 10:21:41 (2 days ago)	06/21/2026-17:21:37.249741 [Drop] [] [1:9129193:1] Suricata Site User Agent [] [Classification: ... show more 06/21/2026-17:21:37.249741 [Drop] [] [1:9129193:1] Suricata Site User Agent [] [Classification: Not Suspicious Traffic] [Priority: 3] {TCP} 103.242.104.209:35419 -> 103.166.156.58:80 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-13 01:19:58 (1 week ago)	Captured JA4H: ge20c_46207df29aef \| Log: 103.242.104.209 - - [13/Jun/2026:08:19:53 +0700] "GET /imag ... show more Captured JA4H: ge20c_46207df29aef \| Log: 103.242.104.209 - - [13/Jun/2026:08:19:53 +0700] "GET /image-loader-worker-v3.js HTTP/2.0" 200 15721 "https://staklim-jatim.bmkg.go.id/index.php/prakiraan-cuaca-transportasi-darat-jawa-jalur-utara-dan-selatan/113-akar/meteorologi/prakiraan-meteorologi" "Mozilla/5.0 (Linux; U; Android 13; en-US; SM-G780G Build/TP1A.220624.014) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/123.0.6312.80 UCBrowser/15.1.7.1393 Mobile Safari/537.36" ge20c_sec-ch-ua,origin,sec-ch-ua-mobile,user-agent,sec-ch-ua-platform,accept,accept-language,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,cookie,referer,accept-encoding,host... ... show less	Email Spam Hacking
Anonymous	2026-06-08 02:11:51 (2 weeks ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇮🇹 VHosting	2026-06-08 01:06:59 (2 weeks ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇹 VHosting	2026-04-10 05:17:22 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:08:44 (2 months ago)	103.242.104.209 - - [05/Apr/2026:16:42:38 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google ... show more 103.242.104.209 - - [05/Apr/2026:16:42:38 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.242.104.209 - - [05/Apr/2026:17:00:49 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.whatsapp.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.242.104.209 - - [05/Apr/2026:17:02:04 +0200] "GET /web/login HTTP/1.1" 499 0 "https://news.bestpro.info/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.242.104.209 - - [05/Apr/2026:17:11:16 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.242.104.209 - - [05/Apr/2026:17:16:39 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.blog94.net/blog" "Mozi ... show less	DDoS Attack
🇩🇪 filstal.org	2026-03-29 04:45:24 (2 months ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇺🇸 kosada.com	2026-03-19 12:05:46 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 octageeks.com	2026-03-02 05:31:25 (3 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇧🇬 cheatmaster.store	2026-02-26 05:54:41 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Indonesia Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇩🇪 ardexter	2026-01-28 01:15:41 (4 months ago)	Wordpress attack and DDOS	DDoS Attack Web App Attack
🇨🇦 SuperEvilLuke	2026-01-24 19:58:44 (4 months ago)	Malicious activity detected from 58821 IDNIC-LJN-AS-ID PT Lintas Jaringan Nusantara towards host emb ... show more Malicious activity detected from 58821 IDNIC-LJN-AS-ID PT Lintas Jaringan Nusantara towards host embotic.xyz (GET HTTP/2) @ 2026-01-24T19:58:44Z (5 occurrences) show less	DDoS Attack Exploited Host
🇨🇭 Modules	2026-01-17 12:52:58 (5 months ago)	Open proxy http://103.242.104.209:8080 (RT:6179ms,Loc:Indonesia,ASN:AS58821)	Open Proxy
🇸🇬 Fn4ticHz	2025-12-15 08:23:15 (6 months ago)	repeated ddos targeted zeroguard.space -- ZeroGuard	DDoS Attack
🇺🇸 SuperEvilLuke	2025-12-14 13:36:39 (6 months ago)	Malicious activity detected from 58821 IDNIC-LJN-AS-ID PT Lintas Jaringan Nusantara towards host pan ... show more Malicious activity detected from 58821 IDNIC-LJN-AS-ID PT Lintas Jaringan Nusantara towards host panel.embotic.xyz (GET HTTP/2) @ 2025-12-14T13:36:39Z (6 occurrences) show less	DDoS Attack Exploited Host

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 129.121.102.3

🇨🇳 106.13.39.89

🇫🇷 82.102.18.116

🇱🇻 81.30.98.62

🇱🇻 81.30.98.49

🇩🇪 2.26.51.57

🇪🇨 181.188.237.223

🇳🇱 176.65.139.94

🇺🇸 172.217.37.208

🇨🇦 167.114.156.169

🇺🇸 162.216.150.210

🇮🇷 151.233.53.255

🇺🇸 130.131.162.156

🇨🇳 117.79.226.11

🇲🇦 105.190.144.105

🇩🇪 85.115.29.34

🇺🇸 64.62.197.189

🇰🇷 39.115.195.164

🇨🇦 15.157.189.0

🇮🇷 2.189.99.240