JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.184.54.67

103.184.54.67 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	PT Hancom Teknologi Indonesia
Usage Type	Fixed Line ISP
ASN	AS140401
Domain Name	hancom.co.id
Country	🇮🇩 Indonesia
City	Jember, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.184.54.67

Whois 103.184.54.67

IP Abuse Reports for 103.184.54.67:

This IP address has been reported a total of 18 times from 14 distinct sources. 103.184.54.67 was first reported on August 19th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Modules	2025-12-17 01:06:58 (6 months ago)	Open proxy http://103.184.54.67:8090 (RT:77303ms,Loc:Indonesia,ASN:AS140401)	Open Proxy
🇸🇬 Fn4ticHz	2025-12-12 00:06:19 (6 months ago)	repeated ddos targeted just.zpriv.cc -- ZeroGuard	DDoS Attack
🇸🇬 Fn4ticHz	2025-12-11 23:05:24 (6 months ago)	repeated ddos targeted load.rapidreset.net -- ZeroGuard	DDoS Attack
🇩🇪 Tizian Maxime Weigt	2025-11-25 08:17:40 (6 months ago)	Incoming DDoS to port 443 (L7 HTTPS Flood) Detected	DDoS Attack
🇺🇸 SuperEvilLuke	2025-11-16 15:09:16 (7 months ago)	Malicious activity detected from 140401 PROXINET-AS-ID PT Proxi Jaringan Nusantara towards host pane ... show more Malicious activity detected from 140401 PROXINET-AS-ID PT Proxi Jaringan Nusantara towards host panel.embotic.xyz (GET HTTP/2) @ 2025-11-16T15:09:16Z (11 occurrences) show less	DDoS Attack Exploited Host
🇷🇺 ago.su	2025-11-13 08:48:35 (7 months ago)	F2B blocked nginx activity control ddos v1 [otd]	DDoS Attack
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-08 15:25:08 (7 months ago)	ASN: 140401 (PROXINET-AS-ID PT Proxi Jaringan Nusantara) Botnet Zombie: This IP has been detected as ... show more ASN: 140401 (PROXINET-AS-ID PT Proxi Jaringan Nusantara) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇺🇸 SuperEvilLuke	2025-11-04 21:43:49 (7 months ago)	Malicious activity detected from 140401 PROXINET-AS-ID PT Proxi Jaringan Nusantara towards host dash ... show more Malicious activity detected from 140401 PROXINET-AS-ID PT Proxi Jaringan Nusantara towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T21:43:49Z (2 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 SuperEvilLuke	2025-11-04 17:42:18 (7 months ago)	Malicious activity detected from 140401 PROXINET-AS-ID PT Proxi Jaringan Nusantara towards host dash ... show more Malicious activity detected from 140401 PROXINET-AS-ID PT Proxi Jaringan Nusantara towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T17:42:18Z (2 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-11-01 13:11:33 (7 months ago)	Malicious activity detected from 140401 PROXINET-AS-ID PT Proxi Jaringan Nusantara towards host pane ... show more Malicious activity detected from 140401 PROXINET-AS-ID PT Proxi Jaringan Nusantara towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-11-01T13:11:33Z (2 occurrences) show less	DDoS Attack Exploited Host
🇨🇭 backslash	2025-10-31 15:16:04 (7 months ago)		DDoS Attack
🇦🇺 MAGIC	2025-10-23 04:04:06 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2025-10-05 17:51:52 (8 months ago)	[Mon Oct 06 00:49:50.823564 2025] [security2:error] [pid 2633349:tid 140305807423168] [client 103.18 ... show more [Mon Oct 06 00:49:50.823564 2025] [security2:error] [pid 2633349:tid 140305807423168] [client 103.184.54.67:49344] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/140.0.7339.208 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; CPH266 ... show less	Hacking Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-09-27 12:28:19 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇹 Progetto1	2025-09-27 05:16:01 (8 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇴 109.107.229.94

🇺🇸 65.49.1.47

🇳🇱 45.142.193.169

🇺🇸 2607:f8b0:4004:1000::123

🇺🇸 2604:a880:400:d1:0:4:9e8e:e001

🇺🇸 205.210.31.66

🇹🇼 198.235.24.76

🇮🇶 185.166.25.150

🇨🇳 171.15.131.165

🇺🇸 143.42.1.53

🇦🇷 131.196.189.10

🇺🇸 73.120.59.52

🇩🇪 64.89.163.137

🇭🇰 199.45.155.87

🇺🇸 167.99.175.224

🇻🇳 113.186.250.217

🇮🇹 82.49.81.53

🇺🇸 66.132.195.86

🇺🇸 20.15.163.174

🇺🇸 205.210.31.76