JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.242.105.199

Recent Activity

Abuse Confidence Score

47% Elevated

105 reports

57 reporters · latest 5 days ago

ISP: PT Lintas Jaringan Nusantara
Usage Type: Fixed Line ISP
ASN: AS58821
Domain Name: lintasjaringan.net
Country: 🇮🇩 Indonesia
City: Cikarang, West Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

105 from 57 distinct reporters

First reported

April 7th 2024

Most recent report

5 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 4 🇮🇩 Indonesia 3 🇵🇱 Poland 2

Most common categories DDoS Attack 8 Hacking 7 Web App Attack 6 Email Spam 2 Exploited Host 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇼 tyebstx	2026-11-09 05:37:31 UTC · (5 days ago)	Wazuh Alert Evidence: Nov 09 05:37:29 ms1.bitstreetx.info postfix/smtpd[1996789]: NOQUEUE: reject: RCPT from unknown[103.242.105.199]: 554 5.7.1 Service unavailable; Client host [103.242.105.199] blocked using bl.spamcop.net; from=<it-support@bitstre ... show more Wazuh Alert Evidence: Nov 09 05:37:29 ms1.bitstreetx.info postfix/smtpd[1996789]: NOQUEUE: reject: RCPT from unknown[103.242.105.199]: 554 5.7.1 Service unavailable; Client host [103.242.105.199] blocked using bl.spamcop.net; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<probe-host.local> show less	Hacking
🇵🇱 MatStef132	2026-11-06 04:22:14 UTC · (1 week ago)	MatShield L7: blocked on unlocknow.cc (sec-ch-ua-grease-mismatch)	DDoS Attack
🇳🇱 Site.eu	2026-11-04 07:19:10 UTC · (1 week ago)	Web shell access (POST to a PHP file in wp-includes or wp-content/uploads)	Hacking Web App Attack
🇬🇧 Silly Development	2026-11-03 21:27:30 UTC · (1 week ago)	Malicious activity detected from 58821 PT Lintas Jaringan Nusantara towards host sillydev.co.uk (GET HTTP/2) @ 2026-11-03T21:27:30Z (1 occurrences)	DDoS Attack Exploited Host
🇩🇪 GunsawianHosting	2026-10-29 11:17:00 UTC · (2 weeks ago)	Open public proxy/relay	Open Proxy VPN IP Exploited Host
Anonymous	2026-10-27 14:30:53 UTC · (2 weeks ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /catalog/product_compare/add/product/9711/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvYnJhbmRzL3Nob3BieS9tYW51ZmFjdHVyZXItY2hpZWYtbGctcnVja3VzLmh0bWw_X19fU0lEPTIyY2UzZmFhM2JjMTk4MDU0MGM3ZDMyN2RhYTZhM2Y3VQ,,/form_key/VYMGM3Gsi9wl8GMx/ \| UA: Opera/9.47.(X11; Linux x86_64; sq-AL) Presto/2.9.170 Version/10.00 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-10-24 10:19:21 UTC · (3 weeks ago)	[Sat Oct 24 17:19:21.008495 2026] [security2:error] [pid 1182516:tid 140101464078016] [client 103.242.105.199:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/ ... show more [Sat Oct 24 17:19:21.008495 2026] [security2:error] [pid 1182516:tid 140101464078016] [client 103.242.105.199:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "atyGKcI9OwvBEmU1i7zxPwAAABM"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1182562] [qCkfbhOcGlo] [atyGKcI9OwvBEmU1i7zxPwAAABM] keep_alive=[0] [2026-10-24 17:19:21.008504] [R:atyGKcI9OwvBEmU1i7zxPwAAABM] UA:'Mozilla/5.0 (iPhone; CPU iPh ... show less	Email Spam Hacking
🇩🇰 powerhostingdk	2026-10-12 09:01:19 UTC · (1 month ago)	[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.	Email Spam Brute-Force
🇩🇪 Packets-Decreaser.NET	2026-10-08 05:32:48 UTC · (1 month ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇵🇱 MatStef132	2026-10-05 19:27:00 UTC · (1 month ago)	MatShield L7: blocked on fivevault.net (sec-fetch-navigate-method)	DDoS Attack
🇩🇪 edgeshield	2026-10-02 02:53:51 UTC · (1 month ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
🇩🇪 LRob	2026-09-28 17:55:26 UTC · (1 month ago)	Shop search flood (L7 DDoS) \| path: /marque/4-bergamont \| query: q=Taille-XXL/Famille-E%5C-Horizon+Tour&order=product.position.asc&productListView=list \| src_port: 43475	DDoS Attack Web App Attack
🇮🇩 sockominfo	2026-09-21 23:01:01 UTC · (1 month ago)	Active Response: IP 103.242.105.199 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Netw ... show more Active Response: IP 103.242.105.199 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-21 22:00:09 UTC · (1 month ago)	Active Response: IP 103.242.105.199 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT	Hacking Web App Attack
🇺🇸 kosada.com	2026-09-20 21:05:48 UTC · (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=34&topics%5B2%5D=27&topics%5B3%5D=66&topics%5B4%5D=81 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=34&topics%5B2%5D=27&topics%5B3%5D=66&topics%5B4%5D=81 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.26.226.4

🇳🇱 200.138.46.40

🇺🇸 193.202.87.126

🇸🇬 89.233.105.182

🇳🇱 45.148.10.157

🇳🇱 200.138.46.51

🇺🇸 193.203.9.196

🇲🇽 187.190.35.163

🇸🇬 159.223.81.54

🇨🇳 112.28.153.240

🇺🇦 91.235.225.179

🇫🇷 89.157.51.218

🇳🇱 45.148.10.141

🇺🇸 34.125.49.40

🇺🇸 23.234.98.99

🇺🇸 13.143.135.160

🇨🇱 190.22.130.43

🇮🇳 182.76.36.62

🇦🇫 149.54.40.222

🇫🇮 130.49.10.15