JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.18.34.150

103.18.34.150 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 22%: ?

22%

ISP	PT Indonesia Comnet Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.18.34.150

Whois 103.18.34.150

IP Abuse Reports for 103.18.34.150:

This IP address has been reported a total of 20 times from 13 distinct sources. 103.18.34.150 was first reported on July 30th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-21 12:54:39 (1 hour ago)	[Sun Jun 21 19:54:37.466858 2026] [security2:error] [pid 1532703:tid 140109299029696] [client 103.18 ... show more [Sun Jun 21 19:54:37.466858 2026] [security2:error] [pid 1532703:tid 140109299029696] [client 103.18.34.150:39374] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (?i)^[a-z0-9\\\\-._]+$" against "TX:referer-hardening-plugin_domain_name" required. [file "/etc/modsecurity/coreruleset-4.26.0/plugins/referer-hardening-plugin/plugins/referer-hardening-before.conf"] [line "221"] [id "9524170"] [msg "Invalid domain name within Referer header"] [data " google.com, https Matched Data ARGS charset: - Matched Data TX.1: google.com, https found within Content-Type multipart form Matched Data: https://google.com, https://staklim-malang.info/index.php/profil/meteorologi/list-of-all-tags/358 found within TX:referer-hardening-plugin_domain_name: google.com, https request_line = GET /images/Profil_Pegawai/biru/SONNYA_SENDY_ERVINNA_RANGKANG_biru.webp HTTP/1.1 Request URI RAW = /images/Profil_Pegawai/biru/SONNYA_SENDY_ERVINNA_RANGKANG_biru.webp Request Basename..."] [severity "CRITICAL" ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-17 00:49:57 (4 days ago)	[Wed Jun 17 07:49:53.805833 2026] [security2:error] [pid 1298154:tid 139771245446848] [client 103.18 ... show more [Wed Jun 17 07:49:53.805833 2026] [security2:error] [pid 1298154:tid 139771245446848] [client 103.18.34.150:55291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "ajHvMfgPcRH4YfJ2N0q5ugAAmAo"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1298165] [ly8OcCiZiDw] [ajHvMfgPcRH4YfJ2N0q5ugAAmAo] keep_alive=[1] [2026-06-17 07:49:53.805838] [R:ajHvMfgPcRH4YfJ2N0q5ugAAmAo] UA:'Mozilla/5.0 (Linux; Android ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-14 16:35:09 (6 days ago)	[Sun Jun 14 23:35:05.167655 2026] [security2:error] [pid 256522:tid 139672807163584] [client 103.18. ... show more [Sun Jun 14 23:35:05.167655 2026] [security2:error] [pid 256522:tid 139672807163584] [client 103.18.34.150:56878] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "117"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: host,user-agent,from,accept-language,cache-control,pragma,priority,sec-fetch-site,sec-fetch-mode,upgrade-insecure-requests,accept,accept-encoding found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /Prakicu_Harian_Kab_Malang-v1.html HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/Prakicu_Harian_Kab_Malang-v1.html"] [unique_id "ai7YObtCvglpakT5L6mE8AAAAMA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[256555] [Ds/NSvl/r0M] [ai7YObtCvglpakT5L6mE8AAAAMA] keep_alive=[0] [2026-06-14 23:35:05.167662] [R:ai7YObtCvglpakT5L6mE8AAAAM ... show less	Email Spam Hacking
🇮🇩 sockominfo	2026-06-05 19:00:39 (2 weeks ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-05 18:00:11 (2 weeks ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇳🇱 EGP Abuse Dept	2026-05-27 06:45:42 (3 weeks ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
Anonymous	2026-04-29 04:38:28 (1 month ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2026-04-19 03:22:01 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇷🇴 INTEQ	2026-04-13 12:40:11 (2 months ago)	Web attack from 103.18.34.150	Web App Attack
🇱🇻 garmtech.com	2026-02-18 23:45:07 (4 months ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection
🇮🇩 hermawan	2026-01-12 14:25:36 (5 months ago)	[Mon Jan 12 21:25:33.026378 2026] [security2:error] [pid 42248:tid 140215206479552] [client 103.18.3 ... show more [Mon Jan 12 21:25:33.026378 2026] [security2:error] [pid 42248:tid 140215206479552] [client 103.18.34.150:46329] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=623&id=1326%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-17-23-januari-2017&start=200 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=623&id=1326%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-17-23-januari-2017&start=200..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aWUEXXRuiicbof ... show less	Hacking Web App Attack
🇮🇹 VHosting	2025-12-23 14:00:18 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-04 12:54:51 (6 months ago)	botnet	DDoS Attack
🇩🇪 SMARTNET	2025-11-30 18:38:00 (6 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
🇩🇪 SMARTNET	2025-11-30 18:38:00 (6 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2620:171:b5:f003:9999::178

🇰🇷 218.156.93.206

🇨🇱 216.155.93.75

🇻🇪 201.249.205.94

🇦🇷 190.229.67.85

🇷🇺 176.57.76.206

🇧🇩 103.183.62.1

🇸🇰 95.105.192.186

🇳🇱 91.92.40.11

🇩🇪 43.157.98.118

🇪🇬 41.128.181.199

🇳🇱 213.152.161.54

🇰🇪 197.231.178.56

🇩🇪 194.88.98.121

🇧🇷 191.5.31.61

🇧🇷 187.62.87.27

🇧🇷 187.8.120.90

🇭🇰 156.251.179.157

🇯🇵 118.193.61.170

🇮🇱 2.54.99.50