JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.18.34.215

103.18.34.215 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 40%: ?

40%

ISP	PT Indonesia Comnet Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.18.34.215

Whois 103.18.34.215

IP Abuse Reports for 103.18.34.215:

This IP address has been reported a total of 30 times from 13 distinct sources. 103.18.34.215 was first reported on April 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-07-03 04:58:26 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 gui-ying233	2026-07-03 00:07:53 (1 day ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇩 sockominfo	2026-07-01 21:00:28 (2 days ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 02:33:42 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 103.18.34.215 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 103.18.34.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 22:33:38.726736 2026] [security2:error] [pid 25121:tid 25121] [client 103.18.34.215:52211] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.me.ctemdr.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.me.ctemdr.com"] [uri "/root/.config/gcloud/credentials.db"] [unique_id "akMrAhFQ4-F6AOIfIpjUYAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-06-26 23:00:09 (1 week ago)	Weekend login - Suspicious for Government. Threat Score: 6.7/10 (MEDIUM). Reported by TangerangKota- ... show more Weekend login - Suspicious for Government. Threat Score: 6.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-26 22:00:09 (1 week ago)	Weekend login - Suspicious for Government. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota- ... show more Weekend login - Suspicious for Government. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇹🇷 Threat.live	2026-06-10 11:40:03 (3 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇮🇩 sockominfo	2026-06-07 16:00:33 (3 weeks ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇫🇷 sthoyer.de	2026-06-02 06:15:25 (1 month ago)	Jun 2 08:15:24 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jun 2 08:15:24 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.18.34.215 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=1314 DF PROTO=TCP SPT=54363 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 rsa	2026-06-01 19:08:00 (1 month ago)	excessive crawling ddos	DDoS Attack Bad Web Bot Web App Attack
🇫🇷 Coco Bongo	2026-05-07 05:15:15 (1 month ago)	1778130913 - 05/07/2026 07:15:13 Host: 103.18.34.215/103.18.34.215 Port: 445 TCP Blocked ...	Port Scan
🇩🇪 filstal.org	2026-05-01 09:54:08 (2 months ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 11.0; Trident/5.1)). ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 11.0; Trident/5.1)). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-04-26 05:00:44 (2 months ago)	Double URL encoding detection. Threat Score: 7.9/10 (HIGH). Confidence: 60%. CVSS v3.1: 7.3/10 (High ... show more Double URL encoding detection. Threat Score: 7.9/10 (HIGH). Confidence: 60%. CVSS v3.1: 7.3/10 (High). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1110 (Brute Force). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-26 03:00:43 (2 months ago)	Double URL encoding detection. Threat Score: 7.9/10 (HIGH). Confidence: 60%. CVSS v3.1: 7.3/10 (High ... show more Double URL encoding detection. Threat Score: 7.9/10 (HIGH). Confidence: 60%. CVSS v3.1: 7.3/10 (High). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1110 (Brute Force). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-26 02:00:19 (2 months ago)	Double URL encoding detection. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.20

🇬🇧 188.122.37.97

🇩🇴 179.53.47.94

🇺🇸 162.216.150.29

🇺🇸 157.245.126.134

🇨🇳 59.46.182.10

🇺🇸 13.219.122.225

🇩🇪 167.94.146.79

🇺🇸 162.216.150.69

🇻🇳 118.70.182.193

🇨🇳 117.139.175.180

🇬🇧 92.27.101.99

🇨🇳 112.53.97.176

🇦🇴 102.213.34.99

🇨🇳 60.15.229.242

🇬🇧 35.203.210.231

🇦🇺 223.27.17.37

🇩🇪 213.209.159.231

🇺🇸 148.153.193.107

🇫🇮 147.185.133.28