JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.68.214.135

103.68.214.135 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 16%: ?

16%

ISP	PT Media Grasi Internet
Usage Type	Fixed Line ISP
ASN	AS150517
Domain Name	mediagrasi.net
Country	🇮🇩 Indonesia
City	Pasarkemis, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.68.214.135

Whois 103.68.214.135

IP Abuse Reports for 103.68.214.135:

This IP address has been reported a total of 43 times from 18 distinct sources. 103.68.214.135 was first reported on August 5th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-05-24 05:50:07 (4 weeks ago)	2026-05-24 05:50:07 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2026-05-24 02:40:56 (4 weeks ago)	2026-05-24 02:40:56 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 milcraft.nl	2026-05-20 01:01:09 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇮🇩 sockominfo	2026-05-03 17:00:47 (1 month ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-03 16:00:39 (1 month ago)	User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. C ... show more User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-29 17:00:40 (1 month ago)	User login to application during non-business hours. Threat Score: 6.6/10 (HIGH). Confidence: 40%. C ... show more User login to application during non-business hours. Threat Score: 6.6/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇹 VHosting	2026-04-26 08:43:11 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇩 sockominfo	2026-04-14 23:01:25 (2 months ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-14 22:00:13 (2 months ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇹 VHosting	2026-04-10 05:17:21 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:08:07 (2 months ago)	103.68.214.135 - - [05/Apr/2026:16:34:09 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedi ... show more 103.68.214.135 - - [05/Apr/2026:16:34:09 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.68.214.135 - - [05/Apr/2026:16:34:56 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.68.214.135 - - [05/Apr/2026:16:38:16 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.68.214.135 - - [05/Apr/2026:16:58:27 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.reddit.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.68.214.135 - - [05/Apr/2026:16:58:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (Macinto ... show less	DDoS Attack
🇮🇩 sockominfo	2026-03-23 17:00:50 (2 months ago)	User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. C ... show more User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
Anonymous	2026-03-23 06:30:57 (2 months ago)	\| [Dangerous/Indonesia] Aggressive IP 103.68.214.135 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Aggressive IP 103.68.214.135 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇮🇩 sockominfo	2026-03-12 18:00:57 (3 months ago)	User login to application during non-business hours. Threat Score: 6/10 (MEDIUM). Reported by Tanger ... show more User login to application during non-business hours. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 SiliSoftware	2026-02-15 15:08:10 (4 months ago)	/phpBB3/ucp.php?mode=sendpassword&sid=a0995823e2bdaf4cc394d290c5c0d70b	Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 188.166.251.103

🇬🇧 195.206.182.218

🇬🇧 195.206.182.215

🇬🇧 195.206.182.209

🇽🇰 185.190.132.16

🇭🇰 154.198.162.75

🇸🇬 134.209.111.13

🇰🇷 121.128.84.224

🇮🇩 103.153.190.105

🇫🇷 92.222.108.97

🇺🇸 6.237.152.17

🇬🇧 195.206.182.198

🇲🇴 182.93.7.194

🇧🇷 179.172.187.240

🇨🇳 120.48.22.91

🇨🇳 118.145.242.91

🇳🇬 102.88.137.80

🇫🇷 92.222.104.221

🇺🇸 67.183.248.48

🇸🇬 45.194.17.43