Identicon of IP address 103.189.201.144

103.189.201.144

IP Risk Score: 81 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 103.189.201.144
Country: Indonesia flag Indonesia (ID)
Region Name: East Java (JI)
City: Malang
ISP: PT INDONESIA COMNETS PLUS
Threat level: 81 / 100
Conf. level: 100 / 100
Properties
ASN: AS9341
AS Name: PT INDONESIA COMNETS PLUS
Timezone: Asia/Jakarta
Status: Critical

Observed Client Profile
  • OS: Android (100%)
  • Device Type: Mobile (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP shows signs of automated behavior with a mobile user-agent that lacks JavaScript support. The request to an unusual path raises concerns about potential probing or scraping activity. The absence of RDNS further complicates the assessment.

The supernet (103.189.0.0/16), which this IP belongs to, exhibits coordinated behavior indicative of automated scraping, with multiple IPs using identical user agents and engaging in repetitive low-interaction visits. The presence of DNS mismatches and high-frequency POST requests suggests potential misuse of legitimate infrastructure.

πŸ•ΈοΈ
Botnet Node
JavaScript Support
⚠️ No
User-Agent Samples
  • Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.8769.1514 Mobile Safari/537.36

IP Location

Region: East Java, Indonesia

City: Malang

Local time: 2026-06-28 13:48:17