High Risk
IP 103.165.220.102 rated at threat level 8/10 based on 14 security reports.
Pattern analysis reveals concerning activity. Confidence: 82%.
More threatening than 80% of monitored IPs
IP Address
103.165.220.102
IPv4
Public
ID
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Indonesia
Location
PT iForte Global Internet
ASN 17995
14
Reports
Mixed
Data Source
Threat Categories
Brute-Force
10
WP Login Brute Force
4
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
28. May 2026
Last Activity
8. June 2026
Recent (7 days)
9 incidents
Reputable Network
This IP is hosted on a network (ASN 17995) with generally good reputation. The ISP PT iForte Global Internet maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
82%
Verified
Confidence History
28. May 2026 - 8. Jun 2026
82%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 103.165.220.102
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ID
- ASN
- AS17995
- ISP
- PT iForte Global Internet
DNS Information
- Reverse DNS
- 102.220.165.103.net.iforte.net.id
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 14
- First Reported
- 28 May 2026
- Last Reported
- 8 Jun 2026, 06:27
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS17995
PT iForte Global Internet
ID
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
52
Total IPs Monitored
1,293
Total Reports
24.9
Reports per IP
Network Context
This IP address belongs to PT iForte Global Internet (AS17995), which manages 52 IP addresses in our monitoring system. Out of these, 1,293 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
80
%
Global Threat Ranking
This IP is more threatening than 80% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,768 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
14
avg: 23
-
Network Comparison
Compared against 67 IPs in ASN 17995
Threat Level
8/10
network avg: 4.4
++
Total Reports
14
network avg: 20
-
Network PT iForte Global Internet has overall threat level 2/10
Geographic Comparison
Compared against 5,557 IPs in ID
Threat Level
8/10
country avg: 5.4
+
Total Reports
14
country avg: 16
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
3 Jun 2026
3 reports
Daily Average
0.5
reports/day
Most Active
Wednesday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
10
WP Login Brute Force
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3%
-
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.4/10
Avg Threat
63%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
103.165.139.145
10/10
Confidence
97%
Reports
30
Location
ID
ID
103.165.128.173
10/10
Confidence
89%
Reports
38
Location
ID
ID
103.165.206.238
10/10
Confidence
87%
Reports
8
Location
ID
ID
103.164.221.138
10/10
Confidence
75%
Reports
37
Location
ID
ID
103.165.222.26
10/10
Confidence
69%
Reports
43
Location
ID
ID
103.105.66.26
10/10
Confidence
67%
Reports
726
Location
ID
ID
103.158.162.242
10/10
Confidence
67%
Reports
146
Location
ID
ID
103.164.214.46
10/10
Confidence
66%
Reports
93
Location
ID
ID
103.162.146.66
10/10
Confidence
66%
Reports
41
Location
ID
ID
103.167.5.30
10/10
Confidence
60%
Reports
28
Location
ID
ID
202.51.104.162
8/10
Confidence
59%
Reports
15
Location
ID
ID
103.182.195.75
10/10
Confidence
54%
Reports
4
Location
ID
ID
103.150.110.35
10/10
Confidence
53%
Reports
6
Location
ID
ID
103.182.244.250
10/10
Confidence
53%
Reports
4
Location
ID
ID
103.166.105.26
10/10
Confidence
51%
Reports
9
Location
ID
ID
202.51.102.86
0/10
Confidence
51%
Reports
4
Location
ID
ID
103.165.214.122
0/10
Confidence
51%
Reports
3
Location
ID
ID
202.51.99.34
0/10
Confidence
51%
Reports
3
Location
ID
ID
103.165.127.197
10/10
Confidence
49%
Reports
8
Location
ID
ID
202.51.114.190
10/10
Confidence
49%
Reports
4
Location
ID
ID
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.76.120.219
8/10
Confidence
100%
Reports
310
ISP
PT Cloud Hostin...
103.177.15.14
10/10
Confidence
100%
Reports
164
ISP
PT Angkasa Pura...
103.84.5.9
10/10
Confidence
100%
Reports
99
ISP
PT Netciti Persada
103.84.7.190
10/10
Confidence
100%
Reports
63
ISP
PT Netciti Persada
202.145.0.61
10/10
Confidence
100%
Reports
50
ISP
PT. Uninet Medi...
103.67.78.201
8/10
Confidence
100%
Reports
48
ISP
PT Cloud Hostin...
116.197.133.25
8/10
Confidence
100%
Reports
46
ISP
PT. Fiber Netwo...
103.132.52.46
10/10
Confidence
100%
Reports
46
ISP
PT. ADEAKSA IND...
182.16.252.18
10/10
Confidence
100%
Reports
41
ISP
INTERLINK TECHN...
139.255.100.188
8/10
Confidence
100%
Reports
28
ISP
Linknet ASN
103.187.146.33
10/10
Confidence
100%
Reports
20
ISP
Cloud Host Pte Ltd
103.8.59.250
10/10
Confidence
99%
Reports
206
ISP
Prime Link Comm...
103.191.14.243
10/10
Confidence
99%
Reports
88
ISP
PT Aplikanusa L...
103.190.214.241
10/10
Confidence
99%
Reports
56
ISP
PT Aplikanusa L...
43.248.27.115
10/10
Confidence
99%
Reports
47
ISP
Neuviz Net
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
82%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.3
8/10
Confidence
82%
Reports
13,315
Location
US
US
207.90.244.2
8/10
Confidence
82%
Reports
13,206
Location
US
US
147.182.225.86
8/10
Confidence
82%
Reports
9,097
Location
US
US
130.12.181.104
8/10
Confidence
82%
Reports
3,340
Location
DE
DE
137.184.95.216
8/10
Confidence
82%
Reports
2,212
Location
US
US
101.36.107.103
8/10
Confidence
82%
Reports
890
Location
HK
HK
60.254.111.212
8/10
Confidence
82%
Reports
588
Location
IN
IN
64.62.197.212
8/10
Confidence
82%
Reports
571
Location
US
US
65.49.1.66
8/10
Confidence
82%
Reports
569
Location
US
US
204.76.203.213
10/10
Confidence
82%
Reports
561
Location
NL
NL
184.105.247.254
8/10
Confidence
82%
Reports
552
Location
US
US
216.218.206.67
10/10
Confidence
82%
Reports
522
Location
US
US
65.49.1.52
8/10
Confidence
82%
Reports
521
Location
US
US
80.94.95.221
10/10
Confidence
82%
Reports
469
Location
RO
RO
95.110.231.151
8/10
Confidence
82%
Reports
397
Location
IT
IT
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203