JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.190.46.22

103.190.46.22 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 4%: ?

ISP	PT Indonesia Comnets Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.190.46.22

Whois 103.190.46.22

IP Abuse Reports for 103.190.46.22:

This IP address has been reported a total of 97 times from 41 distinct sources. 103.190.46.22 was first reported on March 7th 2023, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-06-29 11:44:57 (21 hours ago)	Wordpress login attempts	Brute-Force
🇮🇩 hermawan	2026-04-07 05:44:51 (2 months ago)	04/07/2026-12:44:51.129442 [Drop] [] [1:2100000521:0] Suricata match TLS JA4 scan Uniq Zeek no 52 ... show more 04/07/2026-12:44:51.129442 [Drop] [] [1:2100000521:0] Suricata match TLS JA4 scan Uniq Zeek no 521 with hash_t13d1812h1_85036bcba153_d41ae481755e [**] [Classification: (null)] [Priority: 3] {TCP} 103.190.46.22:46010 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇮🇩 sockominfo	2026-03-26 17:00:34 (3 months ago)	User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. C ... show more User login to application during non-business hours. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇦🇺 MAGIC	2025-12-21 03:12:15 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-11-15 01:57:02 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇫🇷 polido	2025-11-13 17:19:25 (7 months ago)	Unauthorized connection attempt to port 443 from 103.190.46.22	Port Scan
🇮🇩 hermawan	2025-10-08 19:28:47 (8 months ago)	[Wed Oct 08 23:27:59.940582 2025] [security2:error] [pid 1720280:tid 140371257452224] [client 103.19 ... show more [Wed Oct 08 23:27:59.940582 2025] [security2:error] [pid 1720280:tid 140371257452224] [client 103.190.46.22:53088] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=620&id=555555592%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-4-10-april-2017&start=180 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=620&id=555555592%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-4-10-april-2017&start..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOaRDyor9-VZ ... show less	Hacking Web App Attack
🇨🇭 backslash	2025-10-06 10:52:12 (8 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇳🇱 exxos	2025-08-01 02:38:23 (10 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-31 01:46:50 (10 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-30 02:42:32 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-27 21:17:29 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-24 17:07:31 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇺🇸 VSM Networks	2025-07-08 03:26:59 (11 months ago)	Credential Stuffing	Brute-Force
Anonymous	2025-06-25 16:08:33 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇩 154.100.24.79

🇮🇳 137.59.54.34

🇧🇩 37.111.211.251

🇺🇸 34.228.104.231

🇫🇷 207.180.219.120

🇳🇬 197.159.74.227

🇺🇸 147.185.132.38

🇨🇳 122.96.31.166

🇨🇳 117.36.157.158

🇺🇸 104.43.131.157

🇵🇹 95.136.105.94

🇮🇳 92.4.95.197

🇫🇷 85.217.140.7

🇮🇹 85.35.177.181

🇳🇱 45.148.10.120

🇸🇦 34.166.28.66

🇧🇴 200.105.167.206

🇬🇹 190.151.130.5

🇫🇷 176.165.42.127

🇳🇱 176.65.139.247