JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.3.222.130

103.3.222.130 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 31%: ?

31%

ISP	PT XLSMART Telecom Sejahtera Tbk
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xlsmart.co.id
Country	🇮🇩 Indonesia
City	Soreang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.3.222.130

Whois 103.3.222.130

IP Abuse Reports for 103.3.222.130:

This IP address has been reported a total of 33 times from 24 distinct sources. 103.3.222.130 was first reported on March 15th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-26 09:27:23 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-24 11:48:18 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 103.3.222.130 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.3.222.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 07:48:13.540009 2026] [security2:error] [pid 2987:tid 3007] [client 103.3.222.130:22268] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.3.222.130 (+1 hits since last alert)\|vancekelly.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vancekelly.com"] [uri "/xmlrpc.php"] [unique_id "aowvfa2GOyfrdxks29y7EwAAAEw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-24 11:44:27 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 15:20:41 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 103.3.222.130 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.3.222.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:20:35.823695 2026] [security2:error] [pid 10642:tid 10642] [client 103.3.222.130:26307] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.3.222.130 (+1 hits since last alert)\|globalsolutions.technology\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "globalsolutions.technology"] [uri "/xmlrpc.php"] [unique_id "aosPwwuIO4oDGSTW88SWTAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-06 10:47:54 (3 weeks ago)	Blocked by UFW (TCP on 60973) Source port: 27522 TTL: 108 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 60973) Source port: 27522 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 103.3.222.130) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 sockominfo	2026-07-08 08:00:53 (1 month ago)	User login to application from malicious IP 103.3.222.130.. Threat Score: 4.2/10 (MEDIUM). Confidenc ... show more User login to application from malicious IP 103.3.222.130.. Threat Score: 4.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 68%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-08 07:00:54 (1 month ago)	User login to application from malicious IP 103.3.222.130.. Threat Score: 4.3/10 (MEDIUM). Confidenc ... show more User login to application from malicious IP 103.3.222.130.. Threat Score: 4.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 68%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-08 06:00:09 (1 month ago)	User login to application from malicious IP 103.3.222.130.. Threat Score: 0/10 (INFORMATIONAL). Repo ... show more User login to application from malicious IP 103.3.222.130.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇰🇷 zlhIcd	2026-06-26 12:20:18 (2 months ago)	103.3.222.130 - - [16/Jun/2026:10:34:43 +0900] "GET /pcwiki/index.php?days=14&from=20251223220453&hi ... show more 103.3.222.130 - - [16/Jun/2026:10:34:43 +0900] "GET /pcwiki/index.php?days=14&from=20251223220453&hideanons=1&hideminor=1&hidemyself=1&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.72 Safari/537.36" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-06-18 23:00:09 (2 months ago)	User login to application from malicious IP 103.3.222.130.. Threat Score: 0/10 (INFORMATIONAL). Repo ... show more User login to application from malicious IP 103.3.222.130.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇪🇸 librebit	2026-03-18 07:05:14 (5 months ago)	Brute force	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-17 20:12:07 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-16 20:12:05 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 Papy Abuse	2026-03-16 14:47:33 (5 months ago)	postfix-sasl	Brute-Force
Anonymous	2026-03-16 09:44:12 (5 months ago)	$f2bV_matches	Email Spam Brute-Force

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.172.71.245

🇧🇩 172.68.231.202

🇧🇩 172.68.132.130

🇧🇷 168.181.113.224

🇭🇰 152.32.254.178

🇮🇳 116.74.164.106

🇸🇬 112.140.184.197

🇮🇩 103.168.190.137

🇺🇸 91.230.168.120

🇫🇷 91.196.152.217

🇷🇸 77.46.202.87

🇪🇸 58.97.236.34

🇺🇸 45.135.3.52

🇺🇸 45.132.187.215

🇺🇸 35.237.32.156

🇺🇸 32.198.120.238

🇰🇷 14.39.125.83

🇸🇬 13.215.45.225

🇺🇸 8.34.210.42

🇮🇪 3.249.216.192