JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.130.167.198

103.130.167.198 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 61%: ?

61%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Hostname(s)	host-103-130-167-198.myrepublic.co.id
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Sidoarjo, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.130.167.198

Whois 103.130.167.198

IP Abuse Reports for 103.130.167.198:

This IP address has been reported a total of 52 times from 33 distinct sources. 103.130.167.198 was first reported on April 12th 2023, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-07-27 07:15:29 (20 hours ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 12:16:10 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepubli ... show more (mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 08:16:06.354107 2026] [security2:error] [pid 1282392:tid 1282392] [client 103.130.167.198:54485] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.130.167.198 (+1 hits since last alert)\|bergopro.co.uk\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bergopro.co.uk"] [uri "/xmlrpc.php"] [unique_id "amSpBqffZVc6xMr0wJSQpQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 09:34:20 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepubli ... show more (mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:34:13.049965 2026] [security2:error] [pid 7109:tid 7109] [client 103.130.167.198:50907] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.130.167.198 (+1 hits since last alert)\|doublenaughtspycar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "doublenaughtspycar.com"] [uri "/xmlrpc.php"] [unique_id "amSDFYTCYQ7XfO3TOQ2zHwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-25 04:10:45 (2 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/host-103-130-167-198.myrepublic.co.id	Web App Attack
🇲🇾 Rizzy	2026-07-24 21:35:14 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-07-24 20:35:04 (3 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇫🇷 applemooz	2026-07-24 14:35:46 (3 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 12:28:43 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 103.130.167.198 (host-103-130-167-198.myrepubli ... show more (mod_security) mod_security (id:225170) triggered by 103.130.167.198 (host-103-130-167-198.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:28:37.734528 2026] [security2:error] [pid 929201:tid 929249] [client 103.130.167.198:58002] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thecraftsycat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thecraftsycat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amNadSwbEMJg5iWeh3vBPQAAAMo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-21 09:48:50 (6 days ago)	103.130.167.198 - - [21/Jul/2026:05:46:47 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5545 "-" "WordPress ... show more 103.130.167.198 - - [21/Jul/2026:05:46:47 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5545 "-" "WordPress.com; https://wordpress.com" 103.130.167.198 - - [21/Jul/2026:05:47:00 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5545 "-" "WordPress.com; https://wordpress.com" 103.130.167.198 - - [21/Jul/2026:05:47:11 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5545 "-" "WordPress.com; https://wordpress.com" 103.130.167.198 - - [21/Jul/2026:05:48:38 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5545 "-" "WordPress.com; https://wordpress.com" 103.130.167.198 - - [21/Jul/2026:05:48:49 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5545 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 09:43:54 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepubli ... show more (mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:43:47.141546 2026] [security2:error] [pid 14938:tid 14938] [client 103.130.167.198:61630] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.130.167.198 (+1 hits since last alert)\|midwayisland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "midwayisland.com"] [uri "/xmlrpc.php"] [unique_id "al8_U0pk3n25HjXQhZmoRAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-18 15:57:18 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/host-103-130-167-198.myrepublic.co.id	Web App Attack
🇧🇪 cmbplf	2026-06-27 14:39:18 (1 month ago)	3.942 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-27 13:24:48 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepubli ... show more (mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 09:24:44.090188 2026] [security2:error] [pid 1425:tid 1425] [client 103.130.167.198:49525] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.130.167.198 (+1 hits since last alert)\|waterspell.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "waterspell.net"] [uri "/xmlrpc.php"] [unique_id "aj_PHLInVAeZlFlCD4gzqwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-27 06:56:49 (1 month ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 05:06:19 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepubli ... show more (mod_security) mod_security (id:240335) triggered by 103.130.167.198 (host-103-130-167-198.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 01:06:14.524636 2026] [security2:error] [pid 8115:tid 8115] [client 103.130.167.198:51051] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.130.167.198 (+1 hits since last alert)\|xhumanlikerobots.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "xhumanlikerobots.com"] [uri "/xmlrpc.php"] [unique_id "aj9aRp-wFC5sYarDjOK0owAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.152.33.181

🇻🇳 116.99.169.172

🇷🇴 92.118.39.62

🇳🇱 45.148.10.151

🇬🇧 35.203.210.209

🇰🇷 221.161.235.168

🇬🇧 213.166.84.46

🇱🇻 185.145.245.130

🇺🇸 184.105.247.200

🇺🇸 134.209.120.216

🇩🇪 49.13.171.76

🇫🇷 45.39.255.82

🇨🇦 20.220.150.193

🇺🇸 3.133.104.134

🇺🇸 2602:80d:1008::4d

🇺🇸 2001:19f0:ac01:1ad7:5400:6ff:fe72:b8f2

🇬🇧 193.176.29.7

🇩🇪 167.94.146.32

🇨🇳 120.48.115.68

🇳🇴 81.191.19.201