JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.121.213.203

Neutral Activity

Abuse confidence score ?

0% Low Risk

13 reports

2 reporters · latest 4 years ago

ISP	PT. DUTA EMPAT SAUDARA
Usage Type	Fixed Line ISP
ASN	AS58495
Domain Name	4bnet.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.121.213.203 has been reported 13 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 103.121.213.203

Export CSV

This IP address has been reported a total of 13 times from 2 distinct sources. 103.121.213.203 was first reported on November 22nd 2020, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2021-10-31 00:52:16 (4 years ago)	[Sun Oct 31 11:52:13.430715 2021] [:error] [pid 2760:tid 140504108869376] [client 103.121.213.203:33 ... show more [Sun Oct 31 11:52:13.430715 2021] [:error] [pid 2760:tid 140504108869376] [client 103.121.213.203:33634] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555559083-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-novem ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-10-20 11:33:44 (4 years ago)	[Wed Oct 20 22:33:40.696152 2021] [:error] [pid 5368:tid 139864855009024] [client 103.121.213.203:48 ... show more [Wed Oct 20 22:33:40.696152 2021] [:error] [pid 5368:tid 139864855009024] [client 103.121.213.203:48144] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "150"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/publik/pengumuman"] [unique_id "YXA21K9CsjO8EzoGMDHirgAAAEY"] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-06-01 12:28:45 (5 years ago)	[Tue Jun 01 23:28:43.521441 2021] [:error] [pid 8625:tid 140060508366592] [client 103.121.213.203:41 ... show more [Tue Jun 01 23:28:43.521441 2021] [:error] [pid 8625:tid 140060508366592] [client 103.121.213.203:41032] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555558755-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-j ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-05-26 15:19:12 (5 years ago)	[Thu May 27 02:19:07.360097 2021] [:error] [pid 6871:tid 139623568959232] [client 103.121.213.203:45 ... show more [Thu May 27 02:19:07.360097 2021] [:error] [pid 6871:tid 139623568959232] [client 103.121.213.203:45158] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-bulanan/analisis-hari-tanpa-hujan-berturut-turut-maksimum/555558742-analisis-bulanan-hari-tanpa-hujan-berturut-turut-maksimum-di-provinsi-j ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-03-06 02:41:55 (5 years ago)	[Sat Mar 06 14:41:56.403374 2021] [:error] [pid 2279:tid 140140990543616] [client 103.121.213.203:49 ... show more [Sat Mar 06 14:41:56.403374 2021] [:error] [pid 2279:tid 140140990543616] [client 103.121.213.203:49482] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim/555558587-infografis-bulanan-iklim-ekstrim-bulan-februari-tahun-2021-di-provin ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-03-01 21:07:48 (5 years ago)	[Tue Mar 02 09:07:50.428850 2021] [:error] [pid 8612:tid 139950636922624] [client 103.121.213.203:55 ... show more [Tue Mar 02 09:07:50.428850 2021] [:error] [pid 8612:tid 139950636922624] [client 103.121.213.203:55956] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/555558578-infografis-dasarian-informasi-iklim-jatim-update-28-februari-2021"] [unique_id "YD2d9rTRhthXVGWYnv1y ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-03-01 13:21:23 (5 years ago)	[Tue Mar 02 01:21:24.681112 2021] [:error] [pid 8007:tid 140020786116352] [client 103.121.213.203:38 ... show more [Tue Mar 02 01:21:24.681112 2021] [:error] [pid 8007:tid 140020786116352] [client 103.121.213.203:38850] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-deterministik-curah-hujan-dasarian-provinsi-jawa-timur/555558582-prakiraan-dasarian-deterministik-curah-hujan-dasarian ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-02-28 22:34:33 (5 years ago)	[Mon Mar 01 10:34:34.900863 2021] [:error] [pid 8928:tid 140214485538560] [client 103.121.213.203:48 ... show more [Mon Mar 01 10:34:34.900863 2021] [:error] [pid 8928:tid 140214485538560] [client 103.121.213.203:48340] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555558576-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-m ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-02-23 04:15:45 (5 years ago)	[Tue Feb 23 16:15:46.474712 2021] [:error] [pid 865:tid 139706241173248] [client 103.121.213.203:362 ... show more [Tue Feb 23 16:15:46.474712 2021] [:error] [pid 865:tid 139706241173248] [client 103.121.213.203:36294] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/555558571-prakiraan-bulanan-curah-hujan-bulan-mei-tahun-2021-update-dari-analisis-bulan-januari-tahu ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-02-21 08:05:53 (5 years ago)	...	Hacking Web App Attack
🇬🇧 TURKISH.CO.UK	2021-02-10 23:29:34 (5 years ago)	server logs...	Web Spam
🇮🇩 hermawan	2021-02-10 07:40:22 (5 years ago)	[Wed Feb 10 19:40:21.002164 2021] [:error] [pid 4865:tid 139828490397440] [client 103.121.213.203:33 ... show more [Wed Feb 10 19:40:21.002164 2021] [:error] [pid 4865:tid 139828490397440] [client 103.121.213.203:33086] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555558536-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-f ... show less	Hacking Web App Attack
🇮🇩 hermawan	2020-11-22 08:24:35 (5 years ago)	[Sun Nov 22 20:24:28.733100 2020] [:error] [pid 18538:tid 139915774531328] [client 103.121.213.203:3 ... show more [Sun Nov 22 20:24:28.733100 2020] [:error] [pid 18538:tid 139915774531328] [client 103.121.213.203:37376] [client 103.121.213.203] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/3.6"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/555558387-infografis-dasarian-informasi-iklim-jatim-update-20-november-2020"] [unique_id "X7pmjKeLr1RZXBARsOjpygA ... show less	Hacking Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 193.24.123.120

🇬🇪 185.115.6.130

🇻🇳 183.91.186.36

🇷🇺 178.34.150.32

🇧🇩 160.191.115.172

🇨🇳 121.228.43.8

🇸🇬 101.47.156.21

🇬🇧 81.19.219.200

🇩🇪 45.130.203.130

🇺🇸 172.70.111.224

🇦🇺 118.209.227.24

🇻🇳 103.200.25.198

🇷🇴 92.118.39.77

🇨🇦 85.217.149.62

🇺🇸 66.80.39.135

🇬🇧 64.205.72.191

🇺🇸 45.61.184.110

🇺🇸 2a13:f40:b238:f581:f16d:1a40:9802:b61a

🇺🇿 213.230.93.178

🇹🇭 203.154.158.195