JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.84.193.221

103.84.193.221 was found in our database!

This IP was reported 147 times. Confidence of Abuse is 45%: ?

45%

ISP	PT Klik Media Netindo
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59147
Domain Name	klikmedia.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.84.193.221

Whois 103.84.193.221

IP Abuse Reports for 103.84.193.221:

This IP address has been reported a total of 147 times from 66 distinct sources. 103.84.193.221 was first reported on November 17th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇰 castipo	2026-08-25 19:07:58 (1 day ago)	nginx-bad-ua :: 103.84.193.221 - - [19/Aug/2026:23:23:51 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python- ... show more nginx-bad-ua :: 103.84.193.221 - - [19/Aug/2026:23:23:51 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a2da8151fe3afdee-SIN" 103.84.193.221 - - [21/Aug/2026:06:34:49 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a2e535fc7e990a9d-SIN" 103.84.193.221 - - [24/Aug/2026:01:17:56 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a2fc1def7d119de7-SIN" 103.84.193.221 - - [26/Aug/2026:02:07:58 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a30ce1f60adb0a9d-SIN" show less	Bad Web Bot
🇮🇩 bps-statistics	2026-08-24 16:34:02 (2 days ago)	Web Application Attacks	Web App Attack
🇩🇰 castipo	2026-08-23 18:17:57 (3 days ago)	nginx-bad-ua :: 103.84.193.221 - - [19/Aug/2026:23:23:51 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python- ... show more nginx-bad-ua :: 103.84.193.221 - - [19/Aug/2026:23:23:51 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a2da8151fe3afdee-SIN" 103.84.193.221 - - [21/Aug/2026:06:34:49 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a2e535fc7e990a9d-SIN" 103.84.193.221 - - [24/Aug/2026:01:17:56 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a2fc1def7d119de7-SIN" show less	Bad Web Bot
🇯🇵 Valhalla	2026-08-22 03:03:48 (4 days ago)	~ suspicious post ~	Hacking Web App Attack
Anonymous	2026-08-22 01:59:50 (4 days ago)	Automated web probe/scanner blocked at the edge (WorldTree fleet). Signature: scanner_ua. Example re ... show more Automated web probe/scanner blocked at the edge (WorldTree fleet). Signature: scanner_ua. Example request: / on apr.ai show less	Bad Web Bot Web App Attack
🇩🇰 castipo	2026-08-20 23:34:49 (5 days ago)	nginx-bad-ua :: 103.84.193.221 - - [19/Aug/2026:23:23:51 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python- ... show more nginx-bad-ua :: 103.84.193.221 - - [19/Aug/2026:23:23:51 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a2da8151fe3afdee-SIN" 103.84.193.221 - - [21/Aug/2026:06:34:49 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a2e535fc7e990a9d-SIN" show less	Bad Web Bot
🇩🇰 castipo	2026-08-19 16:23:52 (1 week ago)	nginx-bad-ua :: 103.84.193.221 - - [19/Aug/2026:23:23:51 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python- ... show more nginx-bad-ua :: 103.84.193.221 - - [19/Aug/2026:23:23:51 +0700] "HEAD / HTTP/2.0" 301 0 "-" "python-requests/2.34.2" host="[user].[host]" cfip="103.84.193.221" cfray="a2da8151fe3afdee-SIN" show less	Bad Web Bot
🇹🇷 neron	2026-08-15 15:06:48 (1 week ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇬🇧 consul.to	2026-08-13 00:29:53 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇸🇬 azminawwar	2026-08-10 00:20:18 (2 weeks ago)	103.84.193.221 Probing for vulnerable code from 2026-07-27 18:09:16 WIB, evidence: tienabled\|0\|0\|0\|a ... show more 103.84.193.221 Probing for vulnerable code from 2026-07-27 18:09:16 WIB, evidence: tienabled\|0\|0\|0\|azmi.my.id/kcfinder/upload.php show less	Web App Attack Hacking
🇹🇷 neron	2026-08-01 12:11:00 (3 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-07-24 08:52:42 (1 month ago)	Aggressive web scan	Web App Attack
🇮🇩 David Koswari	2026-07-24 05:15:00 (1 month ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇮🇩 Burayot	2026-07-21 17:15:00 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.84.193.221 (ID/Indonesia/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.84.193.221 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 15:39:13 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 103.84.193.221 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.84.193.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 11:39:06.136672 2026] [security2:error] [pid 7710:tid 7725] [client 103.84.193.221:58722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dcs.co.id"] [uri "/.env"] [unique_id "al-SmhWzx3tVmaDz3zSUWQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 147 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 209.97.169.114

🇫🇮 147.185.133.219

🇦🇪 129.151.135.13

🇷🇴 92.118.39.50

🇱🇹 92.62.139.168

🇦🇹 84.115.228.165

🇺🇸 66.132.195.107

🇨🇳 39.130.240.253

🇺🇸 2607:f8b0:4001:c1b::122

🇪🇹 196.189.255.58

🇧🇷 189.85.172.14

🇳🇱 185.93.89.39

🇺🇸 172.174.17.234

🇯🇵 107.155.15.8

🇻🇳 103.159.54.61

🇷🇴 92.118.39.77

🇱🇹 213.176.26.19

🇲🇽 201.141.27.121

🇻🇳 163.227.231.84

🇸🇬 103.189.234.85