JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.125.173.5

103.125.173.5 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 23%: ?

23%

ISP	PT Trinity Teknologi Nusantara
Usage Type	Fixed Line ISP
ASN	AS139415
Domain Name	trinity.net.id
Country	🇮🇩 Indonesia
City	Medan, North Sumatra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.125.173.5

Whois 103.125.173.5

IP Abuse Reports for 103.125.173.5:

This IP address has been reported a total of 36 times from 16 distinct sources. 103.125.173.5 was first reported on July 25th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-06-12 04:00:53 (2 days ago)	User login to application from malicious IP 103.125.173.5.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 103.125.173.5.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 37%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-12 03:00:10 (2 days ago)	User login to application from malicious IP 103.125.173.5.. Threat Score: 0/10 (INFORMATIONAL). Repo ... show more User login to application from malicious IP 103.125.173.5.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-09 04:00:53 (5 days ago)	User login to application from malicious IP 103.125.173.5.. Threat Score: 4.1/10 (MEDIUM). Confidenc ... show more User login to application from malicious IP 103.125.173.5.. Threat Score: 4.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 64%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-09 03:00:58 (5 days ago)	User login to application from malicious IP 103.125.173.5.. Threat Score: 4.3/10 (MEDIUM). Confidenc ... show more User login to application from malicious IP 103.125.173.5.. Threat Score: 4.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 66%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-09 02:00:09 (5 days ago)	User login to application from malicious IP 103.125.173.5.. Threat Score: 0/10 (INFORMATIONAL). Repo ... show more User login to application from malicious IP 103.125.173.5.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇦🇺 MAGIC	2026-06-09 00:30:40 (5 days ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇹 A000Z	2026-05-18 05:07:45 (3 weeks ago)	Fail2Ban: 103.125.173.5 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 103.125.173.5 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.1215.1517 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-05-17 04:46:00 (4 weeks ago)	Attack Signature Blocked: /wishlist/index/add/product/13314/form_key/WUYf9lb15ohs1QhU/img/logo.jpg ( ... show more Attack Signature Blocked: /wishlist/index/add/product/13314/form_key/WUYf9lb15ohs1QhU/img/logo.jpg (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇮🇩 hermawan	2026-03-16 04:26:33 (2 months ago)	2026-03-15T15:25:12.004236+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ... show more 2026-03-15T15:25:12.004236+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=103.125.173.5 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=2890 DF PROTO=TCP SPT=45473 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Email Spam Hacking
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-08 15:35:26 (7 months ago)	ASN: 139415 (TRINITY-AS-ID PT Trinity Teknologi Nusantara) Botnet Zombie: This IP has been detected ... show more ASN: 139415 (TRINITY-AS-ID PT Trinity Teknologi Nusantara) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇺🇸 SuperEvilLuke	2025-11-04 17:42:34 (7 months ago)	Malicious activity detected from 139415 TRINITY-AS-ID PT Trinity Teknologi Nusantara towards host da ... show more Malicious activity detected from 139415 TRINITY-AS-ID PT Trinity Teknologi Nusantara towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T17:42:34Z (2 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 SuperEvilLuke	2025-11-04 17:11:31 (7 months ago)	Malicious activity detected from 139415 TRINITY-AS-ID PT Trinity Teknologi Nusantara towards host da ... show more Malicious activity detected from 139415 TRINITY-AS-ID PT Trinity Teknologi Nusantara towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T17:11:31Z (3 occurrences) show less	DDoS Attack Exploited Host
🇷🇺 ago.su	2025-10-06 09:48:33 (8 months ago)	F2B blocked nginx activity control ddos v2 [otd]	DDoS Attack
🇺🇸 skycodee	2025-10-05 12:49:04 (8 months ago)	Repeated TLS handshake abuse against Pterodactyl Wings (port 8080)	DDoS Attack
🇷🇺 ago.su	2025-10-03 18:08:37 (8 months ago)	F2B blocked nginx activity control ddos v2 [otd]	DDoS Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.33.126.224

🇰🇿 92.47.46.174

🇺🇸 209.38.70.156

🇳🇱 204.76.203.219

🇺🇸 174.35.25.177

🇮🇳 172.69.178.111

🇱🇹 141.98.11.41

🇫🇷 141.94.94.155

🇦🇪 132.243.121.237

🇧🇬 91.191.209.74

🇧🇷 45.229.91.34

🇺🇸 44.159.156.130

🇬🇧 37.10.113.222

🇬🇧 35.203.211.5

🇬🇧 35.203.210.149

🇺🇸 35.199.35.100

🇿🇼 197.221.232.44

🇺🇸 194.187.179.150

🇺🇸 194.187.179.16

🇫🇮 147.185.133.84