This IP address has been reported a total of
68
times from
43 distinct
sources.
103.130.18.17 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 10
reports;
Indonesia
with 8
reports;
Australia
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
26
times;
Bad Web Bot
15
times;
Hacking
13
times;
Brute-Force
9
times;
Port Scan
6
times;
Other
21
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[02/Oct/2026:01:11:33 +0300] -- 103.130.18.17 Ban reason: Scanner [CMS_GENERIC] | Request: POST /wp- ...
show more[02/Oct/2026:01:11:33 +0300] -- 103.130.18.17 Ban reason: Scanner [CMS_GENERIC] | Request: POST /wp-admin/admin-ajax.php HTTP/1.1
show less
nee-6 : Trying access system files=>/components/com_jce/editor/extensions/filesystem/joomla.xml(joom ...
show morenee-6 : Trying access system files=>/components/com_jce/editor/extensions/filesystem/joomla.xml(joomla.xml)
show less
soe-6 : Trying access system files=>/components/com_jce/editor/extensions/filesystem/joomla.xml(joom ...
show moresoe-6 : Trying access system files=>/components/com_jce/editor/extensions/filesystem/joomla.xml(joomla.xml)
show less
Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on thegrip.fi (Directory ...
show moreAttack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on thegrip.fi (Directory traversal #1) 103.130.18.17 (ID/Indonesia/host-103-130-18-17.myrepublic.co.id): 1 in the last 3600 secs (CF_ENABLE); IP: 103.130.18.17; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER;
show less
Web App Attack
Anonymous
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ...
show moreAttacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
show less
WordPress attack 2026-09-29: 16:13:23 UTC GET /wp-json/wp/v2/pages?per_page=100&_fields=id,slug to e ...
show moreWordPress attack 2026-09-29: 16:13:23 UTC GET /wp-json/wp/v2/pages?per_page=100&_fields=id,slug to enumerate page IDs, then 16:13:24 POST /?page_id=2495&pagename=templates%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fwp-links-opml - a double-URL-encoded path traversal (templates/../../../../wp-links-opml) against the theme template resolver. Only 2 requests ever from this IP to this server, both attacks, no legitimate browsing. Attempt failed.
show less
