JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.185.40.66

103.185.40.66 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 21%: ?

21%

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS149681
Domain Name	apnic.net
Country	🇮🇩 Indonesia
City	Panaragan, Lampung

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.185.40.66

Whois 103.185.40.66

IP Abuse Reports for 103.185.40.66:

This IP address has been reported a total of 66 times from 31 distinct sources. 103.185.40.66 was first reported on January 23rd 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-05-24 03:57:34 (2 weeks ago)	2026-05-24 03:57:34 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-05-24 03:49:16 (2 weeks ago)	Try to connect to Port_Scan_23_stealth	Port Scan
🇦🇺 MAGIC	2026-05-20 01:07:07 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-05-15 12:57:04 (3 weeks ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇮🇹 VHosting	2026-03-31 14:13:16 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
Anonymous	2026-02-23 13:46:15 (3 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp show less	Exploited Host Bad Web Bot
🇳🇱 ConsulHosting	2026-02-15 16:01:41 (3 months ago)	Part of an HTTP Flood DDoS attack and had sent at least 1 requests.	DDoS Attack Exploited Host
🇸🇬 Vano Ganzzz	2025-12-10 12:33:27 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149681 (IDNIC-OSA-AS-ID PT Oreo ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 149681 (IDNIC-OSA-AS-ID PT Oreo Smart Access) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-12-10T12:33:27Z Ray ID: 9abcc54fecd40a9d UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 05:44:55 (7 months ago)	ASN: 149681 (IDNIC-OSA-AS-ID PT Oreo Smart Access) Botnet Zombie: This IP has been detected as a bo ... show more ASN: 149681 (IDNIC-OSA-AS-ID PT Oreo Smart Access) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇩🇪 Silly Development	2025-10-20 15:14:34 (7 months ago)	2025-10-20T17:12:33.321298+02:00 Raptor wings[1520817]: 2025/10/20 17:12:33 http: TLS handshake erro ... show more 2025-10-20T17:12:33.321298+02:00 Raptor wings[1520817]: 2025/10/20 17:12:33 http: TLS handshake error from 103.185.40.66:49301: EOF 2025-10-20T17:13:42.580615+02:00 Raptor wings[1520817]: 2025/10/20 17:13:42 http: TLS handshake error from 103.185.40.66:49470: EOF 2025-10-20T17:14:33.490076+02:00 Raptor wings[1520817]: 2025/10/20 17:14:33 http: TLS handshake error from 103.185.40.66:49562: EOF ... show less	DDoS Attack
🇺🇸 SuperEvilLuke	2025-10-07 23:55:04 (8 months ago)	Malicious activity detected from 149681 IDNIC-OSA-AS-ID PT Oreo Smart Access towards host dash.embot ... show more Malicious activity detected from 149681 IDNIC-OSA-AS-ID PT Oreo Smart Access towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:04Z (1 occurrences) show less	DDoS Attack Exploited Host
🇲🇾 Silly Development	2025-10-06 17:24:10 (8 months ago)	2025-10-06T17:22:05.187347+00:00 onyx wings[50209]: 2025/10/06 17:22:05 http: TLS handshake error fr ... show more 2025-10-06T17:22:05.187347+00:00 onyx wings[50209]: 2025/10/06 17:22:05 http: TLS handshake error from 103.185.40.66:55172: EOF 2025-10-06T17:23:23.879318+00:00 onyx wings[50209]: 2025/10/06 17:23:23 http: TLS handshake error from 103.185.40.66:55464: EOF 2025-10-06T17:24:09.397337+00:00 onyx wings[50209]: 2025/10/06 17:24:09 http: TLS handshake error from 103.185.40.66:55586: EOF ... show less	DDoS Attack
🇺🇸 shabi	2025-09-29 16:15:50 (8 months ago)	IP: 103.185.40.66 [Country: ID] triggered WAF (firewallCustom). Action: managed_challenge ASN: 14968 ... show more IP: 103.185.40.66 [Country: ID] triggered WAF (firewallCustom). Action: managed_challenge ASN: 149681 (IDNIC-OSA-AS-ID PT Oreo Smart Access) Protocol: HTTP/1.1 (method GET) Endpoint: /cc.hryjtrgefw Time: 2025-09-29T14:36:14Z User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 --- Report generated by CFWAF2AbuseIPDB. show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 yangfan	2025-09-06 16:15:10 (9 months ago)	IP: 103.185.40.66 [Country: ID] triggered WAF (firewallCustom). Action: block ASN: 149681 (IDNIC-OSA ... show more IP: 103.185.40.66 [Country: ID] triggered WAF (firewallCustom). Action: block ASN: 149681 (IDNIC-OSA-AS-ID PT Oreo Smart Access) Protocol: HTTP/1.1 (method GET) Endpoint: /cc.su Time: 2025-09-06T14:43:54Z User Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0 --- Report generated by CFWAF2AbuseIPDB. show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Silly Development	2025-09-06 13:42:07 (9 months ago)	Malicious activity detected from 149681 IDNIC-OSA-AS-ID PT Oreo Smart Access towards host panel.sill ... show more Malicious activity detected from 149681 IDNIC-OSA-AS-ID PT Oreo Smart Access towards host panel.sillydev.co.uk (GET HTTP/1.1) @ 2025-09-06T13:42:07Z (3 occurrences) show less	DDoS Attack Exploited Host

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.102.21.104

🇺🇸 162.217.165.61

🇺🇸 107.172.250.235

🇳🇱 89.21.67.173

🇪🇹 196.188.116.40

🇱🇹 194.165.16.164

🇺🇸 192.155.81.124

🇭🇰 185.239.84.249

🇳🇱 178.62.192.173

🇺🇦 91.226.34.247

🇮🇹 85.18.115.154

🇳🇱 204.76.203.206

🇨🇳 182.242.168.211

🇺🇸 172.202.117.221

🇺🇸 162.216.150.239

🇨🇳 123.184.25.5

🇨🇳 121.225.55.129

🇹🇭 83.118.107.37

🇺🇸 34.158.9.7

🇺🇸 20.169.105.72