JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.171.31.172

103.171.31.172 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 8%: ?

ISP	PT.Mora Telematika Indonesia
Usage Type	Fixed Line ISP
ASN	AS131111
Domain Name	moratelindo.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.171.31.172

Whois 103.171.31.172

IP Abuse Reports for 103.171.31.172:

This IP address has been reported a total of 14 times from 11 distinct sources. 103.171.31.172 was first reported on November 18th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Fn4ticHz	2026-05-10 11:49:12 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇮🇳 liveaspankaj	2026-05-09 17:50:19 (1 month ago)	DDoS attack: 90 requests in 5m (GET / or repair.php).	DDoS Attack
Anonymous	2024-06-26 00:42:42 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 DJ	2024-05-28 16:36:00 (2 years ago)	form honeypot	Web Spam Web App Attack
Anonymous	2024-05-23 00:27:33 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-05-17 11:22:29 (2 years ago)	(mod_security) mod_security (id:217291) triggered by 103.171.31.172 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217291) triggered by 103.171.31.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 17 07:22:14.871893 2024] [security2:error] [pid 10698] [client 103.171.31.172:51710] [client 103.171.31.172] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|furballrecords.com\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "furballrecords.com"] [uri "/g12contactnolog.php"] [unique_id "Zkc95rj4Q1fQlzXQ8C9ViQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 unhfree.net	2024-03-13 14:55:52 (2 years ago)	Mar 13 05:27:34 canopus postfix/smtpd[1436960]: NOQUEUE: reject: RCPT from unknown[103.171.31.172]: ... show more Mar 13 05:27:34 canopus postfix/smtpd[1436960]: NOQUEUE: reject: RCPT from unknown[103.171.31.172]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 13 09:14:57 canopus postfix/smtpd[1509991]: NOQUEUE: reject: RCPT from unknown[103.171.31.172]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 13 09:21:59 canopus postfix/smtpd[1529405]: NOQUEUE: reject: RCPT from unknown[103.171.31.172]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 13 15:24:12 canopus postfix/smtpd[1584222]: NOQUEUE: reject: RCPT from unknown[103.171.31.172]: 554 5.7.1 ... show less	Brute-Force Exploited Host
Anonymous	2024-02-29 17:30:15 (2 years ago)	Vulnerable file probing. Part of a bigger attack.	DDoS Attack Hacking Brute-Force Web App Attack
🇩🇪 Fusl	2024-02-24 04:13:49 (2 years ago)	received unsolicited smtp data stream: MIME-Version: 1.0 Date: Sat, 24 Feb 2024 04:51:53 +0100 Messa ... show more received unsolicited smtp data stream: MIME-Version: 1.0 Date: Sat, 24 Feb 2024 04:51:53 +0100 Message-ID: <A237F3A7BAB4475709C17CF881C439B90FAB9BDF@unknown> Content-Type: multipart/mixed; boundary="------------040008000502020206090105" X-Priority: 3 (Normal) From: "Sunrr Prettydo" <[email protected]> To: [email protected] Subject: Hi man! EkfNfjkjsdD --------------040008000502020206090105 Content-Type: multipart/alternative; boundary="------------040007030209020904010103" --------------040007030209020904010103 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hey there my awesome friend! I'm living in The russian federation. So how = are you now a days? I would love to become familiar you personally whole lo= t more close. And what is your name? I m single and I am trying to get a fr= iend, true love and responsibility. I m an extremely warm and caring girl. = I will love and be cherished. If possible describe to me more about your se= lf...i anticipate to hear from you show less	Email Spam
🇩🇪 Fusl	2024-02-16 00:55:10 (2 years ago)	received unsolicited smtp data stream: MIME-Version: 1.0 Date: Fri, 16 Feb 2024 01:25:24 +0100 Messa ... show more received unsolicited smtp data stream: MIME-Version: 1.0 Date: Fri, 16 Feb 2024 01:25:24 +0100 Message-ID: <904E08DB5890DE2309BFB14629C8389CE2BD11CB@unknown> Content-Type: multipart/mixed; boundary="------------010007040702000300010904" X-Priority: 3 (Normal) From: "Iamst Megg" <[email protected]> To: [email protected] Subject: Hello. FDkjfNfjkjsW --------------010007040702000300010904 Content-Type: multipart/alternative; boundary="------------000306080202000704000800" --------------000306080202000704000800 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Good day I live in Russian federation. How r u doing now a days? I want to= get acquainted with you personally more deeper. What is your name? I'm unm= arried and I am struggling to find a pal, love and responsibility. I m quit= e a warm and nurturing woman. I will really love and be loved. Please infor= m me much more about you...i would love to know what you think. I really ho= pe after you're going to observe my ow show less	Email Spam
Anonymous	2024-01-25 05:12:00 (2 years ago)	Spam Botnet using harvested credential	Exploited Host
Anonymous	2024-01-24 05:34:00 (2 years ago)	Spam Botnet using harvested credential	Exploited Host
🇷🇸 Smel	2023-11-29 03:34:01 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇧🇷 Vieira Filho	2023-11-18 21:43:50 (2 years ago)	PAM Brute-Forcing ...	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:332::38

🇳🇱 204.76.203.206

🇧🇷 170.83.153.145

🇩🇪 165.154.164.112

🇷🇴 80.94.95.242

🇬🇧 74.114.29.151

🇩🇪 69.5.169.135

🇧🇷 45.205.1.240

🇮🇱 38.64.218.252

🇸🇬 8.219.237.186

🇮🇷 5.237.126.185

🇰🇷 211.228.218.47

🇨🇳 180.153.236.143

🇺🇸 172.253.242.55

🇺🇸 135.237.126.224

🇮🇳 103.172.95.54

🇧🇩 103.171.69.68

🇭🇰 103.43.191.43

🇺🇸 50.116.72.11

🇰🇷 43.164.133.108