JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.172.42.131

103.172.42.131 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 26%: ?

26%

ISP	PT Media Solusi Sukses
Usage Type	Fixed Line ISP
ASN	AS142393
Domain Name	mediasolusisukses.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.172.42.131

Whois 103.172.42.131

IP Abuse Reports for 103.172.42.131:

This IP address has been reported a total of 25 times from 14 distinct sources. 103.172.42.131 was first reported on December 20th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-09-12 12:49:50 (3 days ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇹 VHosting	2026-08-25 06:48:16 (3 weeks ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous	2026-08-12 04:01:19 (1 month ago)	\| [Dangerous/Indonesia] Aggressive IP 103.172.42.131 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Aggressive IP 103.172.42.131 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇷🇺 DZBOT	2026-08-08 03:13:22 (1 month ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
🇫🇷 dynamix	2026-08-07 23:25:28 (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 EGP Abuse Dept	2026-07-29 01:03:20 (1 month ago)	Scraping webshop URLs (creall.com), likely botnet drone	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-07-26 01:49:51 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 sockominfo	2026-07-24 02:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 103.172.42.131. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 103.172.42.131. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-07-07 08:34:01 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-16 06:52:33 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 hermawan	2026-05-29 07:36:10 (3 months ago)	[Fri May 29 14:35:14.472246 2026] [security2:error] [pid 1432408:tid 139851642955456] [client 103.17 ... show more [Fri May 29 14:35:14.472246 2026] [security2:error] [pid 1432408:tid 139851642955456] [client 103.172.42.131:54906] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "410"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 103.172.42.131 request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555560632-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2024-update-dari-analisis-bulan-november-tahun-2023-di-provinsi-jawa-timur HTTP/1.1 Request URI RAW = /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555560632-prakiraan-bulan..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakira ... show less	Email Spam Hacking
🇮🇩 sockominfo	2026-05-18 09:00:43 (3 months ago)	User login to application from malicious IP 103.172.42.131.. Threat Score: 3.6/10 (LOW). Confidence: ... show more User login to application from malicious IP 103.172.42.131.. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-18 08:00:39 (3 months ago)	User login to application from malicious IP 103.172.42.131.. Threat Score: 3.7/10 (LOW). Confidence: ... show more User login to application from malicious IP 103.172.42.131.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-18 07:00:39 (3 months ago)	User login to application from malicious IP 103.172.42.131.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 103.172.42.131.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-18 06:00:12 (3 months ago)	User login to application from malicious IP 103.172.42.131.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 103.172.42.131.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.178.13.41

🇬🇧 185.247.137.198

🇵🇰 139.135.45.145

🇮🇳 103.217.83.17

🇺🇸 91.230.168.184

🇸🇦 87.109.148.125

🇫🇷 85.217.140.5

🇰🇼 37.34.138.115

🇬🇧 35.203.211.212

🇰🇷 210.127.208.145

🇦🇷 190.99.112.155

🇲🇽 189.204.230.91

🇦🇿 158.181.42.9

🇺🇸 136.112.141.4

🇳🇱 94.154.46.242

🇵🇱 83.175.178.236

🇬🇧 35.203.211.233

🇯🇵 34.97.160.227

🇺🇸 20.106.59.184

🇩🇪 213.209.159.133