Substantial Risk
Threat level 8/10 for 103.159.221.207 based on 18 documented incidents.
Consistent suspicious behavior patterns. 98% confidence rating.
More threatening than 82% of monitored IPs
IP Address
103.159.221.207
IPv4
Public
ID
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Indonesia
Location
PT. Fiber Networks Indone...
ASN 58369
18
Reports
Mixed
Data Source
Threat Categories
Brute-Force
9
WP Login Brute Force
9
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
20. May 2026
Last Activity
9. June 2026
Recent (7 days)
5 incidents
Reputable Network
This IP is hosted on a network (ASN 58369) with generally good reputation. The ISP PT. Fiber Networks Indonesia maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
5/10
Moderate
Confidence Score
98%
Verified
Confidence History
27. Apr 2026 - 9. Jun 2026
98%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force | Community | 75% |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 103.159.221.207
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ID
- ASN
- AS58369
- ISP
- PT. Fiber Networks Indonesia
DNS Information
- Reverse DNS
- 207-221.fiber.net.id
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 4 May 2026
- Last Reported
- 9 Jun 2026, 01:22
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS58369
PT. Fiber Networks Indonesia
ID
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
14
Total IPs Monitored
141
Total Reports
10.1
Reports per IP
Network Context
This IP address belongs to PT. Fiber Networks Indonesia (AS58369), which manages 14 IP addresses in our monitoring system. Out of these, 141 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
82
%
Global Threat Ranking
This IP is more threatening than 82% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,796 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
18
avg: 23
-
Network Comparison
Compared against 18 IPs in ASN 58369
Threat Level
8/10
network avg: 4.8
++
Total Reports
18
network avg: 11
++
Network PT. Fiber Networks Indonesia has overall threat level 1/10
Geographic Comparison
Compared against 5,557 IPs in ID
Threat Level
8/10
country avg: 5.4
+
Total Reports
18
country avg: 16
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
21 May 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Wednesday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
9
Brute-Force
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
187,517 threat incidents tracked globally • Last 24h: 19,025 Logs
FEED
Top Threat Sources
-
01
United States38,480 20.5% -
02
India29,193 15.6% -
03
China26,035 13.9% -
04
Brazil10,259 5.5% -
05
Germany7,146 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,557 3%
-
08
Russia4,707 2.5% -
09
Pakistan4,689 2.5% -
10
Netherlands4,361 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
17
Related IPs
4.6/10
Avg Threat
43%
Avg Confidence
8
High Threat
Elevated risk: Multiple related IPs are flagged
116.197.133.25
8/10
Confidence
100%
Reports
46
Location
ID
ID
103.18.46.250
10/10
Confidence
71%
Reports
20
Location
ID
ID
103.173.76.19
10/10
Confidence
60%
Reports
77
Location
ID
ID
103.188.170.216
10/10
Confidence
60%
Reports
8
Location
ID
ID
45.112.126.86
10/10
Confidence
51%
Reports
3
Location
ID
ID
103.188.171.173
10/10
Confidence
49%
Reports
6
Location
ID
ID
103.173.76.187
0/10
Confidence
48%
Reports
4
Location
ID
ID
103.188.170.59
0/10
Confidence
37%
Reports
4
Location
ID
ID
103.188.170.218
0/10
Confidence
30%
Reports
3
Location
ID
ID
103.188.171.69
7/10
Confidence
30%
Reports
3
Location
ID
ID
103.144.213.57
0/10
Confidence
30%
Reports
1
Location
ID
ID
115.187.30.154
0/10
Confidence
30%
Reports
1
Location
ID
ID
116.197.130.58
0/10
Confidence
30%
Reports
1
Location
ID
ID
45.112.124.149
0/10
Confidence
30%
Reports
1
Location
ID
ID
103.144.126.82
0/10
Confidence
30%
Reports
1
Location
ID
ID
103.165.245.219
7/10
Confidence
25%
Reports
2
Location
ID
ID
116.197.128.17
6/10
Confidence
23%
Reports
1
Location
ID
ID
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.76.120.219
8/10
Confidence
100%
Reports
310
ISP
PT Cloud Hostin...
103.177.15.14
10/10
Confidence
100%
Reports
164
ISP
PT Angkasa Pura...
103.84.5.9
10/10
Confidence
100%
Reports
99
ISP
PT Netciti Persada
103.84.7.190
10/10
Confidence
100%
Reports
63
ISP
PT Netciti Persada
202.145.0.61
10/10
Confidence
100%
Reports
50
ISP
PT. Uninet Medi...
103.67.78.201
8/10
Confidence
100%
Reports
48
ISP
PT Cloud Hostin...
116.197.133.25
8/10
Confidence
100%
Reports
46
ISP
PT. Fiber Netwo...
103.132.52.46
10/10
Confidence
100%
Reports
46
ISP
PT. ADEAKSA IND...
182.16.252.18
10/10
Confidence
100%
Reports
41
ISP
INTERLINK TECHN...
139.255.100.188
8/10
Confidence
100%
Reports
28
ISP
Linknet ASN
103.187.146.33
10/10
Confidence
100%
Reports
20
ISP
Cloud Host Pte Ltd
103.8.59.250
10/10
Confidence
99%
Reports
206
ISP
Prime Link Comm...
103.191.14.243
10/10
Confidence
99%
Reports
88
ISP
PT Aplikanusa L...
103.190.214.241
10/10
Confidence
99%
Reports
56
ISP
PT Aplikanusa L...
43.248.27.115
10/10
Confidence
99%
Reports
47
ISP
Neuviz Net
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
87.251.64.146
10/10
Confidence
98%
Reports
1,964
Location
US
US
193.32.162.35
10/10
Confidence
98%
Reports
992
Location
RO
RO
106.75.190.150
10/10
Confidence
98%
Reports
681
Location
CN
CN
85.11.167.7
10/10
Confidence
98%
Reports
462
Location
BG
BG
207.90.244.19
8/10
Confidence
98%
Reports
452
Location
US
US
103.189.234.69
8/10
Confidence
98%
Reports
445
Location
ID
ID
20.89.17.172
10/10
Confidence
98%
Reports
400
Location
JP
JP
146.148.26.145
10/10
Confidence
98%
Reports
229
Location
BE
BE
4.194.133.126
10/10
Confidence
98%
Reports
220
Location
SG
SG
74.176.59.137
10/10
Confidence
98%
Reports
219
Location
JP
JP
4.213.160.187
10/10
Confidence
98%
Reports
204
Location
IN
IN
103.59.95.177
10/10
Confidence
98%
Reports
194
Location
ID
ID
181.23.107.93
10/10
Confidence
98%
Reports
192
Location
AR
AR
52.147.68.81
10/10
Confidence
98%
Reports
190
Location
JP
JP
52.141.42.203
10/10
Confidence
98%
Reports
189
Location
KR
KR
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203