JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.186.30.22

103.186.30.22 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 100%: ?

100%

ISP	SMK Adi Sanggoro
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141892
Domain Name	adisanggoro.sch.id
Country	🇮🇩 Indonesia
City	Ciherang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.186.30.22

Whois 103.186.30.22

IP Abuse Reports for 103.186.30.22:

This IP address has been reported a total of 47 times from 31 distinct sources. 103.186.30.22 was first reported on July 9th 2026, and the most recent report was 58 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 conseilgouz	2026-07-16 18:31:39 (58 minutes ago)	ame-21 : Rogue PHP files=>/manifestations/programme-2021/shell.php(shell)	Hacking
🇳🇱 Site.eu	2026-07-15 13:46:52 (1 day ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-07-15 09:57:37 (1 day ago)		Web App Attack
🇲🇾 Rizzy	2026-07-15 09:18:31 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 m2jest1c	2026-07-15 09:12:17 (1 day ago)	2026-07-15T05:12:16.791824 rhel-20gb-ash-1 sshd[2874732]: error: kex_exchange_identification: client ... show more 2026-07-15T05:12:16.791824 rhel-20gb-ash-1 sshd[2874732]: error: kex_exchange_identification: client sent invalid protocol identifier "POST /admin/ajax/ping.php HTTP/1.1" 2026-07-15T05:12:16.791874 rhel-20gb-ash-1 sshd[2874732]: banner exchange: Connection from 103.186.30.22 port 57185: invalid format ... show less	Brute-Force SSH
🇮🇳 evicky2002	2026-07-15 06:00:00 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-15 00:01:08 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 103.186.30.22 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 103.186.30.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 20:01:01.419003 2026] [security2:error] [pid 25917:tid 25917] [client 103.186.30.22:60582] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|actability.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "actability.com"] [uri "/defunct.dat"] [unique_id "albNvTdEzPqRzrAdfRC3lQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 lns.bz	2026-07-14 23:09:37 (1 day ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇺🇸 Lee Daniel	2026-07-14 22:41:30 (1 day ago)	103.186.30.22 - - [14/Jul/2026:18:41:22 -0400] "GET /1337.json HTTP/1.1" 404 28903 "-" "Mozilla/5.0 ... show more 103.186.30.22 - - [14/Jul/2026:18:41:22 -0400] "GET /1337.json HTTP/1.1" 404 28903 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 103.186.30.22 - - [14/Jul/2026:18:41:24 -0400] "GET /1337.php HTTP/1.1" 404 28897 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 103.186.30.22 - - [14/Jul/2026:18:41:25 -0400] "GET /1337.php.json HTTP/1.1" 404 28907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0.0.0 Safari/537.36" 103.186.30.22 - - [14/Jul/2026:18:41:27 -0400] "GET /1337p.php HTTP/1.1" 404 28903 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 103.186.30.22 - - [14/Jul/2026:18:41:29 -0400] "GET /1337p.php HTTP/1.1" 404 28903 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7) AppleWebKit/605.1.15 Version/18.1 Safari/605.1.15" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-14 21:43:12 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇳🇱 DrLex0	2026-07-14 21:40:11 (1 day ago)	Probing for crap 103.186.30.22 443 - [14/Jul/2026:21:40:10 +0000] "POST /index.php?option=com_ajax& ... show more Probing for crap 103.186.30.22 443 - [14/Jul/2026:21:40:10 +0000] "POST /index.php?option=com_ajax&plugin=helix3&format=json HTTP/1.1" 404 7441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 103.186.30.22 443 - [14/Jul/2026:21:40:10 +0000] "POST /index.php?option=com_ajax&plugin=helix3&format=json HTTP/1.1" 404 7441 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7) AppleWebKit/605.1.15 Version/18.1 Safari/605.1.15" 103.186.30.22 443 - [14/Jul/2026:21:40:11 +0000] "POST /index.php?option=com_ajax&plugin=helix3&format=json HTTP/1.1" 404 7441 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 103.186.30.22 443 - [14/Jul/2026:21:40:11 +0000] "POST /index.php?option=com_ajax&plugin=helix3&format=json HTTP/1.1" 404 7441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-14 17:03:18 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-07-14 16:47:00 (2 days ago)	[14/Jul/2026:19:46:56 +0300] 17840476163.343188 103.186.30.22 50799 148.251.76.218 443 [14/Jul/2026: ... show more [14/Jul/2026:19:46:56 +0300] 17840476163.343188 103.186.30.22 50799 148.251.76.218 443 [14/Jul/2026:19:46:59 +0300] 178404761948.474888 103.186.30.22 50309 148.251.76.218 443 show less	Web App Attack
🇹🇭 MWA SOC	2026-07-14 16:17:03 (2 days ago)		Hacking
🇩🇪 rh24	2026-07-14 15:04:54 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 103.186.30.22 (ID/Indonesia/-)	SQL Injection

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.101

🇭🇰 123.58.213.128

🇨🇳 117.173.136.174

🇩🇪 69.5.169.167

🇬🇧 35.203.211.67

🇮🇩 31.58.244.174

🇺🇸 2607:f8b0:4001:c1f::129

🇳🇬 152.32.140.218

🇨🇳 121.24.30.107

🇫🇷 91.196.152.185

🇳🇱 91.92.241.196

🇬🇧 5.226.140.123

🇬🇧 195.96.139.29

🇬🇧 195.96.139.17

🇦🇴 193.163.125.142

🇵🇱 176.53.159.198

🇹🇷 94.154.43.243

🇺🇸 70.184.65.81

🇳🇱 192.253.248.67

🇺🇸 192.3.245.140