JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.113.3.22

103.113.3.22 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 26%: ?

26%

ISP	DISKOMINFO TANGERANG SELATAN
Usage Type	Commercial
ASN	AS137342
Domain Name	tangerangselatankota.go.id
Country	🇮🇩 Indonesia
City	South Tangerang, Banten

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.113.3.22

Whois 103.113.3.22

IP Abuse Reports for 103.113.3.22:

This IP address has been reported a total of 92 times from 47 distinct sources. 103.113.3.22 was first reported on December 11th 2020, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Fn4ticHz	2026-05-30 15:41:13 (5 days ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇫🇷 MatStef132	2026-05-22 14:04:45 (1 week ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇸🇬 volcaryx	2026-05-17 04:30:03 (2 weeks ago)	Cloudflare detected an L7 DDoS attack (l7ddos) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 ... show more Cloudflare detected an L7 DDoS attack (l7ddos) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.4696.0 Safari/537.36 OPR/87.0.0.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇷🇴 Fn4ticHz	2026-05-09 14:13:19 (3 weeks ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇮🇩 sockominfo	2026-05-05 08:00:16 (4 weeks ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 5.4/10 (MEDIUM). Reported by TangerangKota ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 5.4/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-05 07:00:12 (4 weeks ago)	SIMASN Account Signin from Blacklisted IP.. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota ... show more SIMASN Account Signin from Blacklisted IP.. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇹 VHosting	2026-04-26 08:47:32 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇹 VHosting	2026-04-10 05:55:16 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:04:57 (1 month ago)	103.113.3.22 - - [05/Apr/2026:16:36:54 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia ... show more 103.113.3.22 - - [05/Apr/2026:16:36:54 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.113.3.22 - - [05/Apr/2026:16:37:26 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.YFqrZ.io/products" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.113.3.22 - - [05/Apr/2026:16:45:47 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.fast-app.io/news" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.113.3.22 - - [05/Apr/2026:16:50:42 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.113.3.22 - - [05/Apr/2026:17:10:16 +0200] "GET /web/login HTTP/1.1" 499 0 "https://shop.fastblog.ca/search" "Mozilla/5.0 ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 14:50:47 (1 month ago)	103.113.3.22 - - [05/Apr/2026:16:36:54 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia ... show more 103.113.3.22 - - [05/Apr/2026:16:36:54 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.wikipedia.org/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.113.3.22 - - [05/Apr/2026:16:37:26 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.YFqrZ.io/products" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.113.3.22 - - [05/Apr/2026:16:37:26 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.YFqrZ.io/products" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.113.3.22 - - [05/Apr/2026:16:45:47 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.fast-app.io/news" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 103.113.3.22 - - [05/Apr/2026:16:45:47 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.fast-app.io/news" ... show less	DDoS Attack
🇪🇸 el-brujo	2025-12-31 12:37:42 (5 months ago)	Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows N ... show more Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 Action: block Source: l7ddos ASN Description: IDNIC-KOMINFOTANGSEL-AS-ID DISKOMINFO TANGERANG SELATAN Country: ID Method: GET Timestamp: 2025-12-31T12:37:42Z ruleId: 9bc0d8e988e545dea9bd4843c4bef55c. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇧🇪 cmbplf	2025-12-17 10:00:22 (5 months ago)	685 limiting connections by zone (11m59s)	DDoS Attack
🇸🇬 Fn4ticHz	2025-12-15 18:34:42 (5 months ago)	repeated ddos targeted load.rapidreset.net -- ZeroGuard	DDoS Attack
🇸🇬 Vano Ganzzz	2025-12-10 09:17:07 (5 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 137342 (IDNIC-KOMINFOTANGSEL-AS- ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 137342 (IDNIC-KOMINFOTANGSEL-AS-ID DISKOMINFO TANGERANG SELATAN) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-12-10T09:17:07Z Ray ID: 9abba5bac8cafddf UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
Anonymous	2025-12-04 07:36:24 (6 months ago)	botnet	DDoS Attack

Showing 1 to 15 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 212.231.190.106

🇬🇧 193.163.125.181

🇺🇸 162.216.150.64

🇨🇭 104.244.74.84

🇳🇱 64.89.162.78

🇨🇳 47.115.231.183

🇺🇸 192.34.62.46

🇪🇸 46.253.45.10

🇳🇱 45.148.10.183

🇮🇹 217.26.179.104

🇺🇸 216.25.89.122

🇨🇦 209.235.136.138

🇺🇸 174.59.109.131

🇨🇳 125.47.218.230

🇮🇳 117.222.54.136

🇱🇹 81.30.98.158

🇬🇧 35.203.210.3

🇩🇪 213.209.159.227

🇳🇱 185.242.226.19

🇫🇮 170.168.31.252