JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.186.30.21

103.186.30.21 was found in our database!

This IP was reported 321 times. Confidence of Abuse is 96%: ?

96%

ISP	SMK Adi Sanggoro
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141892
Domain Name	adisanggoro.sch.id
Country	🇮🇩 Indonesia
City	Ciherang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.186.30.21

Whois 103.186.30.21

IP Abuse Reports for 103.186.30.21:

This IP address has been reported a total of 321 times from 150 distinct sources. 103.186.30.21 was first reported on April 4th 2024, and the most recent report was 38 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 lancernz	2026-09-01 10:15:16 (38 minutes ago)	Auto-detected: 93 hits on driversafety.co.nz within 100 log lines. Blocked by Cowork server monitori ... show more Auto-detected: 93 hits on driversafety.co.nz within 100 log lines. Blocked by Cowork server monitoring. show less	Web App Attack
🇸🇬 lancernz	2026-09-01 08:15:17 (2 hours ago)	Auto-detected: 96 hits on driversafety.co.nz within 100 log lines. Blocked by Cowork server monitori ... show more Auto-detected: 96 hits on driversafety.co.nz within 100 log lines. Blocked by Cowork server monitoring. show less	Web App Attack
🇺🇸 RidgeStar	2026-09-01 07:12:00 (3 hours ago)	2026-09-01T00:09:49-07:00: ../../../../../etc/passwd 2026-09-01T00:09:49-07:00: ../../../../../etc/p ... show more 2026-09-01T00:09:49-07:00: ../../../../../etc/passwd 2026-09-01T00:09:49-07:00: ../../../../../etc/passwd 2026-09-01T00:09:49-07:00: ../../../../../etc/passwd 2026-09-01T00:09:49-07:00: ../../../../../etc/passwd 2026-09-01T00:09:49-07:00: ../../../../../etc/passwd 2026-09-01T00:09:49-07:00: ../../../../../etc/passwd 2026-09-01T00:09:49-07:00: ../../../../../etc/passwd 2026-09-01T00:09:49-07:00: ../../../../../etc/passwd 2026-09-01T00:07:26-07:00: ../../../etc/passwd 2026-09-01T00:07:26-07:00: ../../../etc/passwd 2026-09-01T00:07:26-07:00: ../../../etc/passwd 2026-09-01T00:07:26-07:00: ../../../etc/passwd 2026-09-01T00:07:26-07:00: ../../../etc/passwd 2026-09-01T00:07:26-07:00: ../../../etc/passwd 2026-09-01T00:07:25-07:00: ../../../etc/passwd 2026-09-01T00:07:25-07:00: ../../../etc/passwd 2026-09-01T00:04:51-07:00: ../../../../../etc/passwd 2026-09-01T00:04:18-07:00: ../../../../../etc/passwd 2026-09-01T00:04:16-07:00: ../../../../../etc/passwd 2026-09-01T00:04:16-07:00: ../../../../../etc/passwd show less	Port Scan Hacking
🇺🇸 RidgeStar	2026-09-01 06:55:14 (3 hours ago)		Hacking Web App Attack
🇩🇪 webanyone	2026-09-01 06:46:43 (4 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 LRob	2026-08-31 16:15:19 (18 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /core/.env (+9 more) \| 2026-08-31 16:15 UTC show less	Hacking Web App Attack
🇸🇪 vaia.cloud	2026-08-31 15:35:01 (19 hours ago)	crowdsecurity/http-wordpress_wpconfig	Brute-Force Web App Attack
🇪🇸 alferez	2026-08-31 15:22:56 (19 hours ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇵🇱 itsvic.dev	2026-08-31 14:45:22 (20 hours ago)	103.186.30.21 - - [31/Aug/2026:14:45:20 +0000] "109.122.28.203" "GET /nonexistent-295691003.php?_=CE ... show more 103.186.30.21 - - [31/Aug/2026:14:45:20 +0000] "109.122.28.203" "GET /nonexistent-295691003.php?_=CE30jjoM HTTP/1.1" 404 1590 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1" 103.186.30.21 - - [31/Aug/2026:14:45:21 +0000] "109.122.28.203" "GET /.env?v=KqRrD&_=4DfFwse1 HTTP/1.1" 404 1590 "https://google.com/search?q=site:example.com" "Mozilla/5.0 (Linux; Android 14; SM-S928B) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/24.0 Chrome/117.0.0.0 Mobile Safari/537.36" 103.186.30.21 - - [31/Aug/2026:14:45:22 +0000] "109.122.28.203" "GET /.env.local?v=VLLuQ&_=QFKYs3RQ HTTP/1.1" 404 1589 "https://google.com/search?q=site:example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" ... show less	Brute-Force Web App Attack
🇮🇩 penjaga BRIN	2026-08-31 11:58:10 (22 hours ago)	Suspicious malicious activity	Hacking
🇮🇩 Burayot	2026-08-31 11:31:54 (23 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.186.30.21 (ID/Indonesia/-): 2 in ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 103.186.30.21 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 sockominfo	2026-08-31 11:00:28 (23 hours ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇵🇱 lns.bz	2026-08-31 10:37:10 (1 day ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇬🇧 venus.launch.bz	2026-08-31 09:50:02 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 103.186.30.21 (ID/Indonesia/-)	SQL Injection
🇦🇺 Terrier	2026-08-31 08:00:00 (1 day ago)	Blocked for HTTP vulnerability scanning (excessive 40x)	Web App Attack

Showing 1 to 15 of 321 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 196.204.210.11

🇮🇩 172.232.240.152

🇩🇪 167.94.145.17

🇯🇵 136.110.103.64

🇸🇬 114.119.130.167

🇩🇪 91.59.82.86

🇱🇹 62.60.130.201

🇺🇸 2607:f8b0:4023:1004::128

🇧🇪 207.175.206.248

🇨🇳 180.100.212.177

🇺🇸 129.121.75.215

🇷🇴 80.94.92.234

🇿🇼 74.244.195.157

🇨🇳 43.248.139.2

🇺🇸 34.138.252.132

🇲🇽 187.190.147.223

🇧🇷 177.72.82.3

🇻🇳 171.231.197.4

🇧🇩 160.30.238.40

🇧🇩 118.179.121.236