JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.3.221.46

103.3.221.46 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 12%: ?

12%

ISP	PT XLSMART Telecom Sejahtera Tbk
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xlsmart.co.id
Country	🇮🇩 Indonesia
City	Takokak, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.3.221.46

Whois 103.3.221.46

IP Abuse Reports for 103.3.221.46:

This IP address has been reported a total of 33 times from 23 distinct sources. 103.3.221.46 was first reported on June 5th 2021, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-09-23 02:40:00 (8 hours ago)	[Wed Sep 23 09:39:56.443702 2026] [security2:error] [pid 52149:tid 140714151220928] [client 103.3.22 ... show more [Wed Sep 23 09:39:56.443702 2026] [security2:error] [pid 52149:tid 140714151220928] [client 103.3.221.46:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "208"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=488&id=819%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-desember-2015&start=40 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=488&id=819%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-desember-2015&start=40 ..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "arM7_M9VR8azeX ... show less	Email Spam Hacking
🇮🇩 sockominfo	2026-08-29 23:00:53 (3 weeks ago)	Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: ... show more Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: 6.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 86%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-29 22:00:11 (3 weeks ago)	Weekend login - Suspicious for Government. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota- ... show more Weekend login - Suspicious for Government. Threat Score: 6.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-29 21:00:53 (3 weeks ago)	Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: ... show more Weekend login - Suspicious for Government. Threat Score: 7.3/10 (HIGH). Confidence: 50%. CVSS v3.1: 6.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-29 20:00:09 (3 weeks ago)	Weekend login - Suspicious for Government. Threat Score: 6.7/10 (MEDIUM). Reported by TangerangKota- ... show more Weekend login - Suspicious for Government. Threat Score: 6.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-07-20 13:51:09 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇧🇷 ICS Labs	2026-07-10 18:51:13 (2 months ago)	ICS Labs identified 103.3.221.46 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇫🇷 sthoyer.de	2026-07-09 11:49:16 (2 months ago)	Jul 9 13:49:16 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 9 13:49:16 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.3.221.46 DST=173.212.223.67 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=21228 DF PROTO=TCP SPT=6897 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-07-09 11:00:28 (2 months ago)	Jul 9 13:00:27 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 9 13:00:27 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.3.221.46 DST=173.212.223.67 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=2447 DF PROTO=TCP SPT=5127 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇭🇰 mutebot.net	2026-07-09 08:40:57 (2 months ago)	SRC=103.3.221.46, PROTO=TCP, SPT=24749, DPT=445	Port Scan
🇫🇷 thecocasio	2026-07-08 07:28:10 (2 months ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-07-08T07:27:24Z. show less	Port Scan
🇮🇩 sockominfo	2026-05-05 22:00:48 (4 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇨🇦 polycoda	2026-05-04 10:47:04 (4 months ago)	📄 Probes for tons of inexistent files and/or PHP scripts	Hacking Web App Attack
🇮🇩 zam	2026-05-03 21:47:59 (4 months ago)	103.3.221.46 - - [03/May/2026:21:47:54 +0000] "GET /local/moodle_webshell/webshell.php?action=exec\u ... show more 103.3.221.46 - - [03/May/2026:21:47:54 +0000] "GET /local/moodle_webshell/webshell.php?action=exec\u0026cmd=id HTTP/1.1" 301 332 show less	Web App Attack
🇬🇧 PeravixGroup	2026-04-30 01:48:45 (4 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.160.254.206

🇬🇧 193.163.125.160

🇧🇷 191.243.198.94

🇻🇳 123.58.198.35

🇨🇳 122.96.28.235

🇳🇱 109.160.32.13

🇺🇸 45.42.214.211

🇺🇸 20.65.169.148

🇻🇳 14.225.239.154

🇧🇷 186.214.77.253

🇺🇸 184.168.21.211

🇧🇷 179.185.227.77

🇩🇪 172.104.146.169

🇫🇷 91.231.89.253

🇰🇿 89.218.69.66

🇷🇺 62.122.195.14

🇺🇦 46.164.148.190

🇳🇱 45.148.10.240

🇨🇦 45.136.154.250

🇨🇳 36.6.139.138