JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.130.18.137

103.130.18.137 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 70%: ?

70%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Hostname(s)	host-103-130-18-137.myrepublic.co.id
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.130.18.137

Whois 103.130.18.137

IP Abuse Reports for 103.130.18.137:

This IP address has been reported a total of 36 times from 28 distinct sources. 103.130.18.137 was first reported on June 8th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 IndigoRidge	2026-07-11 08:58:26 (1 week ago)	103.130.18.137 - - [11/Jul/2026:04:58:24 -0400] "GET /.env HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Linu ... show more 103.130.18.137 - - [11/Jul/2026:04:58:24 -0400] "GET /.env HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" 103.130.18.137 - - [11/Jul/2026:04:58:25 -0400] "GET /dev/.env HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" 103.130.18.137 - - [11/Jul/2026:04:58:25 -0400] "GET /api/.env HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" ... show less	Web App Attack
🇺🇸 kosada.com	2026-07-11 08:16:21 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Tilellit.PRO	2026-07-11 06:44:58 (1 week ago)	WP Armour Plugin detection	Web Spam Brute-Force
🇩🇪 FeG Deutschland	2026-07-10 21:27:30 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇫🇷 security.rdmc.fr	2026-07-10 18:19:09 (1 week ago)	Port Scan Attack proto:TCP src:22222 dst:21	Port Scan
🇪🇸 robotstxt	2026-07-10 14:41:21 (1 week ago)	103.130.18.137 - - [10/Jul/2026:14:40:31 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 49656 ... show more 103.130.18.137 - - [10/Jul/2026:14:40:31 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 49656 "-" "python-requests/2.32.5" "-" 103.130.18.137 - - [10/Jul/2026:14:40:32 +0000] "GET /wp-login.php/administrator/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" 103.130.18.137 - - [10/Jul/2026:14:40:33 +0000] "POST /wp-login.php/admin/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" ... show less	Bad Web Bot
🇺🇸 IndigoRidge	2026-07-10 13:39:52 (1 week ago)	103.130.18.137 - - [10/Jul/2026:09:39:50 -0400] "GET /.env HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Linu ... show more 103.130.18.137 - - [10/Jul/2026:09:39:50 -0400] "GET /.env HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" 103.130.18.137 - - [10/Jul/2026:09:39:51 -0400] "GET /dev/.env HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" 103.130.18.137 - - [10/Jul/2026:09:39:51 -0400] "GET /api/.env HTTP/1.1" 404 5965 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" ... show less	Web App Attack
🇪🇸 robotstxt	2026-07-10 10:46:04 (1 week ago)	103.130.18.137 - - [10/Jul/2026:10:45:18 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 49658 ... show more 103.130.18.137 - - [10/Jul/2026:10:45:18 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 49658 "-" "python-requests/2.32.5" "-" 103.130.18.137 - - [10/Jul/2026:10:45:19 +0000] "GET /wp-login.php/administrator/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" 103.130.18.137 - - [10/Jul/2026:10:45:20 +0000] "POST /wp-login.php/admin/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" 103.130.18.137 - - [10/Jul/2026:10:45:19 +0000] "GET /wp-login.php/administrator/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" ... show less	Bad Web Bot
🇨🇦 electronico	2026-07-10 06:25:57 (1 week ago)	103.130.18.137 - - [10/Jul/2026:17:25:55 +1100] "POST /wp-login.php HTTP/1.1" 301 487 "http://cttmd. ... show more 103.130.18.137 - - [10/Jul/2026:17:25:55 +1100] "POST /wp-login.php HTTP/1.1" 301 487 "http://cttmd.nc/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 103.130.18.137 - - [10/Jul/2026:17:25:56 +1100] "GET /wp-login.php HTTP/1.1" 403 5922 "http://cttmd.nc/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 103.130.18.137 - - [10/Jul/2026:17:25:56 +1100] "POST /wp-login.php HTTP/1.1" 403 5922 "http://cttmd.nc/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 london2038.com	2026-07-10 04:36:12 (1 week ago)	Attacking WordPress 103.130.18.137 - - [10/Jul/2026:06:36:08 +0200] "POST /wp-login.php HTTP/1.1" 50 ... show more Attacking WordPress 103.130.18.137 - - [10/Jul/2026:06:36:08 +0200] "POST /wp-login.php HTTP/1.1" 503 19308 "https://<REDACTED>/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Brute-Force Web App Attack
🇪🇸 robotstxt	2026-07-10 04:14:10 (1 week ago)	103.130.18.137 - - [10/Jul/2026:02:17:09 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 0 "-" ... show more 103.130.18.137 - - [10/Jul/2026:02:17:09 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 0 "-" "python-requests/2.32.5" "-" 103.130.18.137 - - [10/Jul/2026:03:22:42 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 49659 "-" "python-requests/2.32.5" "-" 103.130.18.137 - - [10/Jul/2026:03:23:02 +0000] "POST /wp-login.php/admin/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" 103.130.18.137 - - [10/Jul/2026:04:13:20 +0000] "GET /wp-login.php/wp-login.php HTTP/1.1" 404 49658 "-" "python-requests/2.32.5" "-" 103.130.18.137 - - [10/Jul/2026:04:13:21 +0000] "GET /wp-login.php/administrator/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/5310.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/5310.36" "-" ... show less	Bad Web Bot
🇨🇴 adalbertoreyes.org	2026-07-09 17:34:08 (1 week ago)	CategoryPortScan	Port Scan
🇩🇪 FeG Deutschland	2026-07-09 16:05:54 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 25	Exploited Host Web App Attack
🇺🇸 mnsf	2026-07-09 14:05:30 (1 week ago)	Too many Status 40X (13)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 12:52:27 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 103.130.18.137 (host-103-130-18-137.myrepublic. ... show more (mod_security) mod_security (id:210492) triggered by 103.130.18.137 (host-103-130-18-137.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 08:52:23.005865 2026] [security2:error] [pid 10812:tid 10812] [client 103.130.18.137:8953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saadeh.ws"] [uri "/.env"] [unique_id "ak-Zh4NoYdnfEAu2f7N6SwAAACE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 85.217.149.61

🇺🇸 136.109.232.88

🇨🇳 113.206.178.95

🇨🇭 107.189.10.124

🇮🇩 49.0.24.107

🇸🇬 43.156.82.40

🇺🇬 41.210.170.238

🇲🇴 182.93.7.194

🇫🇮 80.223.192.112

🇨🇦 24.207.66.154

🇺🇸 2607:f8b0:400c:c00::122

🇦🇷 190.244.39.224

🇩🇪 185.161.203.130

🇰🇷 183.108.233.190

🇹🇭 147.50.252.213

🇦🇿 94.20.62.126

🇧🇷 45.164.124.113

🇳🇱 45.148.10.152

🇨🇴 179.51.111.190

🇨🇦 85.217.149.38