JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.189.201.13

103.189.201.13 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 20%: ?

20%

ISP	PT Indonesia Comnets Plus
Usage Type	Fixed Line ISP
ASN	AS9341
Domain Name	iconpln.net.id
Country	🇮🇩 Indonesia
City	Surabaya, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.189.201.13

Whois 103.189.201.13

IP Abuse Reports for 103.189.201.13:

This IP address has been reported a total of 19 times from 13 distinct sources. 103.189.201.13 was first reported on June 20th 2023, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-20 23:02:42 (15 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇬🇧 PeravixGroup	2026-04-27 09:19:53 (1 month ago)	Honeypot detection: OS command injection in HTTP parameters on port 5555. Severity: HIGH. Aaran.clou ... show more Honeypot detection: OS command injection in HTTP parameters on port 5555. Severity: HIGH. Aaran.cloud show less	Hacking Web App Attack
Anonymous	2026-04-27 01:17:34 (1 month ago)	Try to connect to Port_Scan_80_stealth	Port Scan
🇺🇸 xmission.com	2026-04-27 00:28:42 (1 month ago)	Blocked by UFW (TCP on 5555) Source port: 49002 TTL: 54 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 5555) Source port: 49002 TTL: 54 Packet length: 60 TOS: 0x00 This report (for 103.189.201.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-04-26 16:10:35 (1 month ago)	tcp/52869 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-03-30 21:14:27 (2 months ago)	2026-03-30 21:14:27 UTC Unauthorized activity to TCP port 445. SMB	Port Scan
🇫🇷 masterguru	2026-03-10 12:48:35 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 103.189.201.13 (ID/Indonesia/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 103.189.201.13 (ID/Indonesia/-): 1 in the last 3600 secs (0-201) show less	Hacking
🇺🇸 MPL	2025-12-31 00:59:13 (5 months ago)	tcp/1433 (2 or more attempts)	Port Scan
Anonymous	2025-11-25 20:02:26 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-11-05 08:58:44 (7 months ago)	[Wed Nov 05 15:29:08.940400 2025] [security2:error] [pid 1627775:tid 139655889491648] [client 103.18 ... show more [Wed Nov 05 15:29:08.940400 2025] [security2:error] [pid 1627775:tid 139655889491648] [client 103.189.201.13:53788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "351"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: UTF-8 request_line = GET /images/Klimatologi/Prakiraan/Peringatan_Dini/2025/01_Januari_2025/Das-I/Peta_PERINGATAN_DINI_CURAH_HUJAN_TINGGI_Provinsi_Jawa_Timur_Update_11_Januari_2025.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/Peringatan_Dini/2025/01_Januari_2025/Das-I/Peta_PERINGATAN_DINI_CURAH_HUJAN_TINGGI_Provinsi_Jawa_Timur_Update_11_Januari_2025.webp"] [unique_id "aQsK1NKx6_coXouSc40OxwADAg8"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1627812] [yqAGvtS/G10] [aQsK ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-05-12 12:48:03 (1 year ago)	[Mon May 12 18:59:11.565540 2025] [security2:error] [pid 39961:tid 140135214581440] [client 103.189. ... show more [Mon May 12 18:59:11.565540 2025] [security2:error] [pid 39961:tid 140135214581440] [client 103.189.201.13:48326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "themes" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "52"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: themes found within REQUEST_FILENAME: /TableFilter/TF_Themes/Default/TF_Default.css request_line = GET /TableFilter/TF_Themes/Default/TF_Default.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/TF_Themes/Default/TF_Default.css"] [unique_id "aCHijyAiFUTnSh0pAYlrpwABBAU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[39967] [7icrC/e2aPk] [aCHijyAiFUTnSh0pAYlrpwABBAU] keep_alive=[1] [2025-05-12 18:59:11.565550] [R:aCHijyAiFUTnSh0pAYlrpwABBAU] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Mobile ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-05-03 02:52:25 (1 year ago)	[Sat May 03 09:22:59.875853 2025] [security2:error] [pid 336215:tid 140322544998080] [client 103.189 ... show more [Sat May 03 09:22:59.875853 2025] [security2:error] [pid 336215:tid 140322544998080] [client 103.189.201.13:42762] ModSecurity: Access denied with code 403 (phase 2). Match of "rx [0-9]\\\\s\\\\'\\\\s[0-9]" against "MATCHED_VAR" required. [file "/etc/modsecurity/coreruleset-4.13.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "1747"] [id "932240"] [msg "Remote Command Execution: Unix Command Injection evasion attempt detected"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: s1746238963$o1 found within MATCHED_VAR: GS2.1.s1746238963$o1$g0$t1746238963$j60$l0$h0 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Dasarian/2025/04_April_2025/Das-III/Infografis_Dasarian_Iklim_Jawa_Timur_Update_30_April_2025-600.webp HTTP/2.0 Request URI RAW = /images/Klimatologi/Infografis/Infografis-Iklim/Dasarian/2025/04_April_2025/Das-III/Infografis_Dasarian_Iklim_Jawa_Timu..."] [severity "CRITICAL"] [ver "OWASP_CR ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-07-23 18:26:31 (1 year ago)	[Wed Jul 24 01:23:27.062315 2024] [security2:error] [pid 669984:tid 123123613566528] [client 103.189 ... show more [Wed Jul 24 01:23:27.062315 2024] [security2:error] [pid 669984:tid 123123613566528] [client 103.189.201.13:38464] [client 103.189.201.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "41"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: id-ID,id;q=0.9,en-US;q=0.8,en;q=0.7,zh-CN;q=0.6,zh;q=0.5 request_line = GET /index.php/prakiraan-cuaca-transportasi-darat-jawa-jalur-utara-dan-selatan/113-akar/meteorologi/prakiraan-meteorologi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-cuaca-transportasi-darat-jawa-jalur-utara-dan-selatan/113-akar/meteorologi/prakiraan-meteorologi"] [unique_id "Zp_1HtPKQVmpo8oes-38AAAAHgE"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim ... show less	Hacking Web App Attack
Anonymous	2024-07-23 06:51:52 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2024-06-24 23:27:48 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 43.130.131.18

🇭🇰 23.141.12.180

🇳🇱 213.177.179.80

🇬🇧 195.206.182.206

🇬🇧 193.163.125.234

🇳🇬 165.154.176.251

🇮🇳 103.133.64.121

🇱🇹 81.30.98.49

🇺🇸 64.62.156.206

🇮🇩 49.0.24.107

🇨🇳 2409:876c:2b34::59

🇰🇷 211.178.165.251

🇨🇳 112.82.200.126

🇨🇳 111.26.63.85

🇧🇩 103.179.198.19

🇺🇸 20.118.209.103

🇨🇳 222.185.255.227

🇩🇪 217.160.11.17

🇧🇪 194.32.155.113

🇧🇷 186.248.197.77