JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.158.197.242

103.158.197.242 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 18%: ?

18%

ISP	Institut Pemerintahan Dalam Negeri
Usage Type	University/College/School
ASN	AS141135
Domain Name	ipdn.ac.id
Country	🇮🇩 Indonesia
City	Sumedang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.158.197.242

Whois 103.158.197.242

IP Abuse Reports for 103.158.197.242:

This IP address has been reported a total of 85 times from 40 distinct sources. 103.158.197.242 was first reported on January 22nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-14 08:01:45 (1 day ago)	[Sun Jun 14 15:01:44.631344 2026] [security2:error] [pid 1610841:tid 139664286451392] [client 103.15 ... show more [Sun Jun 14 15:01:44.631344 2026] [security2:error] [pid 1610841:tid 139664286451392] [client 103.158.197.242:2088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim"] [unique_id "ai5f6KEZsHUV2r80oIA_nAABExY"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1610864] [7E3vHjKbt0k] [ai5f6KEZsHUV2r80oIA_nAABExY] keep_alive=[1] [2026-06-14 15:01:44.631350] [R:ai5f6KEZsHUV2r80 ... show less	Email Spam Hacking
🇮🇩 sockominfo	2026-05-25 21:00:40 (3 weeks ago)	SIMASN Account Signin during non bussiness hour.. Threat Score: 7.6/10 (HIGH). Confidence: 60%. CVSS ... show more SIMASN Account Signin during non bussiness hour.. Threat Score: 7.6/10 (HIGH). Confidence: 60%. CVSS v3.1: 7.3/10 (High). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-25 20:00:39 (3 weeks ago)	SIMASN Account Signin during non bussiness hour.. Threat Score: 7.7/10 (HIGH). Confidence: 60%. CVSS ... show more SIMASN Account Signin during non bussiness hour.. Threat Score: 7.7/10 (HIGH). Confidence: 60%. CVSS v3.1: 7.3/10 (High). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-25 19:00:11 (3 weeks ago)	SIMASN Account Signin during non bussiness hour.. Threat Score: 6.8/10 (MEDIUM). Reported by Tangera ... show more SIMASN Account Signin during non bussiness hour.. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-05-22 03:33:11 (3 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-04-05 19:02:18 (2 months ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇩🇪 Mailguard-FRD	2025-12-09 04:04:41 (6 months ago)	1765253081 - 12/09/2025 05:04:41 Host: 103.158.197.242/103.158.197.242 Port: 445 TCP Blocked ...	Port Scan
🇬🇧 guldkage	2025-11-24 02:42:13 (6 months ago)	Unauthorized connection attempt detected from IP address 103.158.197.242 to port 445 (uk-01) [SMB]	Exploited Host
🇮🇳 Shaik Sai Meera	2025-10-09 15:09:40 (8 months ago)	IM360 WAF: Block Drupal/Joomla spammers - Wed Oct 8 20:31:42 2025	Hacking
🇫🇷 dynamix	2025-09-27 06:08:59 (8 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-09-03 21:15:24 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇹 VHosting	2025-09-03 21:06:49 (9 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇹 VHosting	2025-09-03 21:02:22 (9 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇹🇭 Sawasdee	2025-08-25 04:10:38 (9 months ago)	Port Scan ...	Port Scan
🇸🇰 GOVCERT	2025-08-15 07:15:43 (10 months ago)	SMB Port Scan	Port Scan

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 101.89.141.184

🇧🇪 198.235.24.195

🇧🇪 198.235.24.181

🇭🇳 190.109.214.220

🇧🇴 189.28.77.38

🇮🇳 171.61.19.182

🇨🇳 113.206.130.3

🇪🇸 90.162.116.66

🇺🇸 64.62.197.170

🇹🇼 59.126.224.134

🇷🇺 45.131.70.134

🇺🇸 43.162.112.238

🇶🇦 34.18.62.244

🇺🇸 209.141.57.35

🇲🇳 202.131.1.86

🇮🇳 122.177.247.35

🇻🇳 103.9.204.35

🇺🇸 34.19.116.52

🇶🇦 212.70.109.242

🇳🇱 204.76.203.222