Notable Threat
IP 103.207.103.115 rated 8/10 from 33 verified reports.
Multiple security incidents attributed to this IP. Confidence: 86%.
More threatening than 90% of monitored IPs
IP Address
103.207.103.115
IPv4
Public
ID
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Indonesia
Location
Subbid Sistem Jaringan da...
ASN 133796
33
Reports
Mixed
Data Source
Threat Categories
Brute-Force
24
Web App Attack
12
WP Login Brute Force
6
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
9. September 2026
Last Activity
6. October 2026
Recent (7 days)
5 incidents
Reputable Network
This IP is hosted on a network (ASN 133796) with generally good reputation. The ISP Subbid Sistem Jaringan dan Infrastruktur maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
86%
Verified
Confidence History
4. Jun 2026 - 6. Oct 2026
86%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 103.207.103.115
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ID
- ASN
- AS133796
- ISP
- Subbid Sistem Jaringan dan Infrastruktur
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 33
- First Reported
- 2 Jun 2026
- Last Reported
- 6 Oct 2026, 10:20
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS133796
Subbid Sistem Jaringan dan Infrastruktur
ID
Network Threat Assessment
0/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
2
Total IPs Monitored
10
Total Reports
5
Reports per IP
Network Context
This IP address belongs to Subbid Sistem Jaringan dan Infrastruktur (AS133796), which manages 2 IP addresses in our monitoring system. Out of these, 10 have been reported for suspicious activities, resulting in a network-wide threat level of 0/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 833,479 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
33
avg: 9
++
Network Comparison
Compared against 4 IPs in ASN 133796
Threat Level
8/10
network avg: 9.0
=
Total Reports
33
network avg: 17
++
Network Subbid Sistem Jaringan dan Infrastruktur has overall threat level 0/10
Geographic Comparison
Compared against 14,976 IPs in ID
Threat Level
8/10
country avg: 6.9
+
Total Reports
33
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
21 Sep 2026
3 reports
Daily Average
0.5
reports/day
Most Active
Monday
12 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
27
Web App Attack
12
WP Login Brute Force
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
757,703 threat incidents tracked globally • Last 24h: 30,990 Logs
FEED
Top Threat Sources
-
01
United States148,319 19.6% -
02
Brazil111,888 14.8%
-
03
India87,217 11.5%
-
04
China46,098 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,454 2.4%
-
07
Netherlands18,023 2.4%
-
08
Pakistan17,827 2.4%
-
09
Argentina16,272 2.1%
-
10
Colombia15,172 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
3
Related IPs
9.3/10
Avg Threat
29%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
0%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
210.87.97.90
10/10
Confidence
100%
Reports
183
ISP
PT Solusi Data ...
103.154.81.166
10/10
Confidence
100%
Reports
132
ISP
PT Mora Telemat...
160.22.240.235
10/10
Confidence
100%
Reports
126
ISP
PT Seeplus Medi...
103.121.20.18
10/10
Confidence
100%
Reports
114
ISP
PT. Eka Mas Rep...
103.90.25.52
10/10
Confidence
100%
Reports
112
ISP
PT. Arana Tekno...
103.162.1.80
10/10
Confidence
100%
Reports
97
ISP
PT Satu Sistem ...
103.214.100.4
10/10
Confidence
100%
Reports
92
ISP
PT SURYA TEKNIK...
117.102.87.140
10/10
Confidence
100%
Reports
89
ISP
BIZNET NETWORKS
103.154.137.43
10/10
Confidence
100%
Reports
78
ISP
PT Mora Telemat...
36.64.131.68
10/10
Confidence
100%
Reports
78
ISP
PT Telekomunika...
103.79.90.26
10/10
Confidence
100%
Reports
76
ISP
PEMERINTAH KABU...
202.150.130.180
10/10
Confidence
100%
Reports
68
ISP
PT Comtronics S...
103.154.137.41
10/10
Confidence
100%
Reports
67
ISP
PT Mora Telemat...
103.162.69.11
10/10
Confidence
100%
Reports
65
ISP
Dinas Komunikas...
119.47.88.254
8/10
Confidence
100%
Reports
57
ISP
JAWA POS NATION...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
86%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
202.47.34.118
8/10
Confidence
86%
Reports
17
Location
PK
PK
150.5.141.198
10/10
Confidence
86%
Reports
37
Location
HK
HK
213.209.159.241
8/10
Confidence
86%
Reports
938
Location
TW
TW
20.13.164.162
10/10
Confidence
86%
Reports
47
Location
IE
IE
117.187.180.166
10/10
Confidence
86%
Reports
12
Location
CN
CN
91.230.168.206
10/10
Confidence
86%
Reports
216
Location
US
US
66.132.195.120
10/10
Confidence
86%
Reports
62
Location
US
US
66.132.195.61
8/10
Confidence
86%
Reports
261
Location
US
US
165.154.163.91
10/10
Confidence
86%
Reports
27
Location
US
US
101.126.53.14
8/10
Confidence
86%
Reports
16
Location
CN
CN
2.57.217.229
10/10
Confidence
86%
Reports
41
Location
GE
GE
61.222.211.114
10/10
Confidence
86%
Reports
159
Location
TW
TW
194.88.98.83
10/10
Confidence
86%
Reports
78
Location
DE
DE
111.17.199.57
8/10
Confidence
86%
Reports
41
Location
CN
CN
176.53.159.196
10/10
Confidence
86%
Reports
2,120
Location
TR
TR