JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.216.221.84

103.216.221.84 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 29%: ?

29%

ISP	Host Universal Pty Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136557
Domain Name	hostuniversal.com.au
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.216.221.84

Whois 103.216.221.84

IP Abuse Reports for 103.216.221.84:

This IP address has been reported a total of 29 times from 16 distinct sources. 103.216.221.84 was first reported on November 14th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 oncord	2026-09-23 05:04:15 (5 hours ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-09-19 03:43:15 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 103.216.221.84 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 103.216.221.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 23:43:07.230804 2026] [security2:error] [pid 21240:tid 21240] [client 103.216.221.84:45015] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rcrgalicia.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rcrgalicia.com"] [uri "/"] [unique_id "aq4Ey8RSw-uLUVsCcBbNZQAAAAI"], referer: https://padacheckerfree.website/dir/backlink-outreach-services-172788 show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 demonsword	2026-09-04 07:30:16 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: senate.gov.ph:443:443 show less	Open Proxy Port Scan
🇺🇸 kosada.com	2026-08-25 12:27:15 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 Cherryh4ck	2026-08-14 11:11:01 (1 month ago)	Blocked by UFW [25565/tcp] \| SPT: 44198 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [25565/tcp] \| SPT: 44198 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kosada.com	2026-08-05 20:23:20 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-21 21:58:45 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇦🇺 oncord	2026-07-19 08:23:45 (2 months ago)	Form spam	Web Spam
🇺🇸 kosada.com	2026-07-10 23:32:55 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-30 04:18:23 (2 months ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Heavy query parameter abuse: /communications/videoconference.html?___SID=98b0ae694dbcf54e4eb94fe0aa9dcaf8U&dir=asc&limit=24+&order=most_viewed&rating=6 \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇦🇺 oncord	2026-06-23 00:56:04 (3 months ago)	Form spam	Web Spam
Anonymous	2026-06-18 00:32:02 (3 months ago)	WEB attack	Brute-Force
🇮🇩 sockominfo	2026-06-09 07:00:52 (3 months ago)	User login to application from malicious IP 103.216.221.84.. Threat Score: 3.6/10 (LOW). Confidence: ... show more User login to application from malicious IP 103.216.221.84.. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 37%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-09 06:00:53 (3 months ago)	User login to application from malicious IP 103.216.221.84.. Threat Score: 3.7/10 (LOW). Confidence: ... show more User login to application from malicious IP 103.216.221.84.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 39%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-09 04:00:09 (3 months ago)	User login to application from malicious IP 103.216.221.84.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 103.216.221.84.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.88.192.30

🇨🇴 181.79.83.84

🇸🇬 147.90.166.97

🇳🇱 138.226.239.34

🇹🇼 114.38.11.180

🇨🇳 111.26.106.117

🇮🇷 85.185.206.227

🇪🇸 5.224.182.10

🇺🇸 207.45.30.150

🇩🇪 167.94.146.58

🇺🇸 167.89.22.99

🇺🇸 159.65.188.186

🇦🇺 158.178.141.16

🇮🇷 152.89.12.101

🇫🇷 91.231.89.64

🇫🇷 91.196.152.120

🇫🇷 85.217.140.10

🇧🇬 82.147.142.205

🇩🇪 217.181.88.93

🇺🇸 216.25.89.101