JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.172.121.5

103.172.121.5 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 46%: ?

46%

ISP	PT Digital Akses Nusantara
Usage Type	Fixed Line ISP
ASN	AS142398
Domain Name	aksesdigitalnusantara.my.id
Country	🇮🇩 Indonesia
City	Salatiga, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.172.121.5

Whois 103.172.121.5

IP Abuse Reports for 103.172.121.5:

This IP address has been reported a total of 58 times from 38 distinct sources. 103.172.121.5 was first reported on December 24th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 hghosting	2026-08-01 13:45:28 (5 hours ago)	CrowdSec auto-report: crowdsecurity/nginx-req-limit-exceeded — 6 events	Brute-Force SSH
🇧🇪 TTT	2026-07-31 04:56:42 (1 day ago)	HTTP flood/DDoS botnet. WAF blocked 2 windows/24h.	DDoS Attack Bad Web Bot
Anonymous	2026-07-19 23:01:02 (1 week ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=10; Hosts=incognet.io; Paths=/?pncf=5hZ1Liud0,/api/v2/users?kpwaie=QixoOufsCp,/graphql?btz=hrWFD0kPoeKA,/server-status?gplkj=q0mqFTvrG54N3c,/wp-json/wp/v2/posts?jnsuxf=vXuqcYE5sa,/wp-login.php?yhrky=MBhvdTKL9q; Country=ID; ASN=142398 PT Digital Akses Nusantara show less	DDoS Attack
🇪🇸 el-brujo	2026-07-17 10:39:20 (2 weeks ago)	07/17/2026-12:32:14.080483 103.172.121.5 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
🇺🇸 kosada.com	2026-07-07 13:37:30 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇭🇺 kranem	2026-07-05 18:03:01 (3 weeks ago)	Triggered Cloudflare WAF from ID. Action taken: BLOCK ASN: 142398 (PT Digital Akses Nusantara) Proto ... show more Triggered Cloudflare WAF from ID. Action taken: BLOCK ASN: 142398 (PT Digital Akses Nusantara) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-05T16:43:37Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 MatStef132	2026-06-30 22:11:37 (1 month ago)	MatShield L7: blocked on dev.mathost.eu (ua-quarantined)	Bad Web Bot
🇬🇧 PeravixGroup	2026-06-30 03:27:55 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇨🇦 1gz	2026-06-27 22:13:45 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-26 19:52:50 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-22 06:04:47 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 FeG Deutschland	2026-06-21 16:38:55 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇩🇪 burger	2026-06-18 10:57:34 (1 month ago)	Cloudflare l7ddos, Mozilla/5.0 (iPhone; CPU iPhone OS 16_5 like Mac OS X)	DDoS Attack
🇮🇩 sockominfo	2026-06-18 03:00:53 (1 month ago)	User login to application from malicious IP 103.172.121.5.. Threat Score: 3.7/10 (LOW). Confidence: ... show more User login to application from malicious IP 103.172.121.5.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-18 02:00:53 (1 month ago)	User login to application from malicious IP 103.172.121.5.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 103.172.121.5.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 106.219.120.93

🇮🇩 36.77.242.140

🇱🇹 194.165.16.164

🇺🇸 188.213.202.8

🇧🇷 186.251.71.202

🇺🇸 172.174.17.234

🇧🇮 154.117.199.5

🇩🇪 139.59.208.225

🇨🇳 110.249.202.53

🇬🇧 35.203.210.149

🇨🇳 8.138.155.88

🇰🇷 220.119.37.141

🇨🇳 180.108.64.6

🇮🇳 119.18.52.5

🇮🇳 115.187.45.20

🇷🇺 109.248.252.146

🇳🇱 93.123.109.164

🇷🇴 92.118.39.57

🇨🇦 85.217.149.30

🇺🇸 47.251.76.211