103.155.25.120

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
42% Elevated
27 reports
23 reporters ยท latest 15 hours ago
ISP
PT Signal Indo Sukses
Usage Type
Fixed Line ISP
ASN
AS141074
Domain Name
core.net.id
Country
๐Ÿ‡ฎ๐Ÿ‡ฉ Indonesia
City
Tebingtinggi, North Sumatra
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 11 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 6 ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 2
Most common categories Port Scan 12 Bad Web Bot 9 Hacking 8 Brute-Force 7 SSH 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช PTScreens
Rotating-proxy exit used by a headless browser crawler on an image host: 2 requests on 2026-11-03, part of a ~1M request/day scrape spread over ~57k IPs.
Bad Web Bot
๐Ÿ‡ฎ๐Ÿ‡ฉ bps-statistics
Malicious Access
Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: High Priority: %25252F
Hacking Exploited Host Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
๐Ÿ‡ง๐Ÿ‡ช Fanjoe
Sep 23 15:08:23 raspberrypi sshd\[32409\]: Did not receive identification string from 103.155.25.120\
DDoS Attack SSH
๐Ÿ‡บ๐Ÿ‡ธ ้ฌผๅฝฑ233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
๐Ÿ‡ณ๐Ÿ‡ฑ DrLex0
Bad Web Bot Exploited Host
๐Ÿ‡ท๐Ÿ‡ด Gigi
CrowdSec automatic ban | Scenario: local/pf-ssh-bf | Duration: 4h | Origin: crowdsec | Detected by OPNsense firewall (Beast home network security)
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 47 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-09-21T22:24:51Z
Port Scan Hacking
๐Ÿ‡ท๐Ÿ‡ด abuse_IP_reporter
Sep 21 19:32:52 server UFW BLOCK SRC=103.155.25.120 DF PROTO=TCP SPT=42568
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช numberstorm
Port Scan Hacking Brute-Force IoT Targeted
๐Ÿ‡บ๐Ÿ‡ธ ้ฌผๅฝฑ233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
๐Ÿ‡ฆ๐Ÿ‡บ FireGuard Server
Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=22,23
Port Scan Hacking
๐Ÿ‡ง๐Ÿ‡ท noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 103.155.25.120
Port Scan Brute-Force SSH
Anonymous
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ต๐Ÿ‡ฑ 194.180.49.56
๐Ÿ‡บ๐Ÿ‡ธ 192.161.49.2
๐Ÿ‡ง๐Ÿ‡ท 189.101.75.145
๐Ÿ‡ซ๐Ÿ‡ฎ 147.185.133.123
๐Ÿ‡บ๐Ÿ‡ฟ 144.124.192.108
๐Ÿ‡ฌ๐Ÿ‡ง 94.8.100.216
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.68
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.67
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.58
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.57
๐Ÿ‡ณ๐Ÿ‡ฑ 77.67.26.117
๐Ÿ‡ฉ๐Ÿ‡ช 34.159.199.93
๐Ÿ‡ง๐Ÿ‡ช 34.78.238.133
๐Ÿ‡ฐ๐Ÿ‡ท 211.46.188.16
๐Ÿ‡บ๐Ÿ‡ธ 192.207.105.196
๐Ÿ‡จ๐Ÿ‡ฑ 190.5.48.5
๐Ÿ‡บ๐Ÿ‡ธ 172.110.223.179
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.59
๐Ÿ‡บ๐Ÿ‡ธ 143.42.1.44
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.63
feedback