AbuseIPDB » 103.138.192.44

103.138.192.44 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 3%: ?

3%

ISP	ISTANAIMPIAN CORPORATION LIMITED
Usage Type	Commercial
ASN	AS136379
Hostname(s)	44.192.istanaimpian.ltd
Domain Name	istanaimpian.ltd
Country	Cambodia
City	Sandan, Kampong Thom

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 103.138.192.44

Whois 103.138.192.44

IP Abuse Reports for 103.138.192.44:

This IP address has been reported a total of 11 times from 6 distinct sources. 103.138.192.44 was first reported on June 28th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
penjaga BRIN	2025-06-10 11:02:55 (1 week ago)	A web attack returned code 200 (success).-111	Web App Attack
penjaga BRIN	2024-06-19 08:00:13 (11 months ago)	Port Scanning	Port Scan Port Scan
hermawan	2024-05-30 15:48:54 (1 year ago)	[Thu May 30 22:48:51.441281 2024] [security2:error] [pid 365878:tid 133933209486912] [client 103.138 ... show more[Thu May 30 22:48:51.441281 2024] [security2:error] [pid 365878:tid 133933209486912] [client 103.138.192.44:62627] [client 103.138.192.44] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "125"] [id "440006"] [msg "Connection Close Header"] [data "Matched Data: close found within REMOTE_ADDR: 103.138.192.44 request_line = GET / HTTP/1.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "Zlif4-1aTaBCDodwaGuGzwAAAIc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[365927] [Sza0zd31A2s] [Zlif4-1aTaBCDodwaGuGzwAAAIc] keep_alive=[0] [2024-05-30 22:48:51.441284] [R:Zlif4-1aTaBCDodwaGuGzwAAAIc] UA:'Mozilla/5.0 (Linux; U; Android 2.1-update1; de-de; HTC Desire 1.19.161.5 Build/ERE27) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
hermawan	2024-01-18 10:43:10 (1 year ago)	[Thu Jan 18 17:43:07.235983 2024] [security2:error] [pid 360645:tid 123941211342400] [client 103.138 ... show more[Thu Jan 18 17:43:07.235983 2024] [security2:error] [pid 360645:tid 123941211342400] [client 103.138.192.44:61799] [client 103.138.192.44] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "59"] [id "440006"] [msg "Connection Close Header"] [data "Matched Data: close found within REMOTE_ADDR: 103.138.192.44 request_line = GET / HTTP/1.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZakAu8VOT6-LgyQnlTrfIQAAAaI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[360735] [ZvpoB07g7y4] [ZakAu8VOT6-LgyQnlTrfIQAAAaI] keep_alive=[0] [2024-01-18 17:43:07.235986] [R:ZakAu8VOT6-LgyQnlTrfIQAAAaI] UA:'Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; LG-P870/P87020d Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
hermawan	2024-01-14 06:24:39 (1 year ago)	[Sun Jan 14 13:24:35.243444 2024] [security2:error] [pid 691035:tid 131605471430208] [client 103.138 ... show more[Sun Jan 14 13:24:35.243444 2024] [security2:error] [pid 691035:tid 131605471430208] [client 103.138.192.44:58791] [client 103.138.192.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "fasthttp" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "6"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: fasthttp found within REQUEST_HEADERS:User-Agent: fasthttp request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZaN-I_iMvQvomJg6N2rn_gAAAnQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[691135] [6EF18xmZBRc] [ZaN-I_iMvQvomJg6N2rn_gAAAnQ] keep_alive=[0] [2024-01-14 13:24:35.243447] [R:ZaN-I_iMvQvomJg6N2rn_gAAAnQ] UA:'fasthttp' Host:'staklim-jatim.bmkg.go.id' ... show less	Hacking Web App Attack
hermawan	2024-01-08 11:27:06 (1 year ago)	[Mon Jan 08 18:27:04.292640 2024] [security2:error] [pid 92643:tid 138725159863872] [client 103.138. ... show more[Mon Jan 08 18:27:04.292640 2024] [security2:error] [pid 92643:tid 138725159863872] [client 103.138.192.44:49641] [client 103.138.192.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.27.1 request_line = GET / HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZZvcCMnPf6w96tekLJxLGgAAAaI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[92733] [4XAnehW3P0k] [ZZvcCMnP ... show less	Hacking Web App Attack
hermawan	2024-01-08 05:26:56 (1 year ago)	[Mon Jan 08 12:26:52.425412 2024] [security2:error] [pid 828362:tid 140668827592256] [client 103.138 ... show more[Mon Jan 08 12:26:52.425412 2024] [security2:error] [pid 828362:tid 140668827592256] [client 103.138.192.44:57825] [client 103.138.192.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.27.1 request_line = GET / HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZZuHnG_2tB9y9SlPazbbfwAAAN0"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[828455] [UboAclD/q20] [ZZuHnG ... show less	Hacking Web App Attack
Anonymous	2023-03-27 09:41:54 (2 years ago)	Web Server Attack	Hacking
TTWebhosting	2022-10-29 03:33:37 (2 years ago)	(mod_security) mod_security (id:913113) triggered by 103.138.192.44 (KH/Cambodia/-/-/44.192.istanaim ... show more(mod_security) mod_security (id:913113) triggered by 103.138.192.44 (KH/Cambodia/-/-/44.192.istanaimpian.ltd): 1 in the last 3600 secs show less	Port Scan Hacking Brute-Force
GlobalSiteGuard	2022-10-20 14:07:38 (2 years ago)	Website login hacking attempts.	Hacking Web App Attack
BRMA	2022-06-28 07:28:14 (2 years ago)	Scanning endpoints	Port Scan Hacking Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩