JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.130.18.255

103.130.18.255 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 100%: ?

100%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.130.18.255

Whois 103.130.18.255

IP Abuse Reports for 103.130.18.255:

This IP address has been reported a total of 43 times from 33 distinct sources. 103.130.18.255 was first reported on February 20th 2026, and the most recent report was 55 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 Subnet Phantom Veil	2026-10-17 09:12:37 (55 minutes ago)	[Security Alert] Brute-force authentication attempt detected; IP address blocked after multiple fail ... show more [Security Alert] Brute-force authentication attempt detected; IP address blocked after multiple failed login attempts. [Method]: => GET. [Request]: => /signin; IP address blocked after multiple failed login attempts. [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15. [OS]: Unknown. [IP Address]: 103.130.18.255. [IoA Datetime]: 2026-10-16 21:20:06 UTC. show less	Bad Web Bot Brute-Force Hacking Port Scan SQL Injection Web App Attack
🇿🇦 vanderhost	2026-10-16 04:58:19 (1 day ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.lo ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.log via rule: /storage/logs show less	Web App Attack Bad Web Bot
🇩🇪 MusicLibrary	2026-10-16 02:01:34 (1 day ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-15 23:42:36 (1 day ago)	[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 103.130.18.255 - - [16/Oct/2026:01:42:35 +0200] "GET /.env HTTP/1.1" 404 6913 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-15 22:06:01 (1 day ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-15 06:35:02 (2 days ago)	CrowdSec detection: crowdsecurity/http-admin-interface-probing, crowdsecurity/http-probing, crowdsec ... show more CrowdSec detection: crowdsecurity/http-admin-interface-probing, crowdsecurity/http-probing, crowdsecurity/http-sensitive-files, crowdsecurity/http-technology-probing show less	Hacking Web App Attack
🇳🇱 Alt255	2026-10-15 05:43:38 (2 days ago)	[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ... show more [ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 103.130.18.255 - - [15/Oct/2026:07:43:24 +0200] "GET /portal HTTP/1.1" 404 13666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 103.130.18.255 - - [15/Oct/2026:07:43:24 +0200] "GET /panel HTTP/1.1" 404 13666 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 103.130.18.255 - - [15/Oct/2026:07:43:24 +0200] "GET /portal HTTP/1.1" 404 13666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 103.130.18.255 - - [15/Oct/2026:07:43:24 +0200] "GET /member HTTP/1.1" 404 13666 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Bad Web Bot Web App Attack
🇳🇱 MyGlobalFlowers	2026-10-14 11:24:28 (2 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Séfora Srl	2026-10-14 00:27:30 (3 days ago)	crowdsecurity/http-probing detected by CrowdSec	Web App Attack
🇩🇪 LRob	2026-10-13 08:18:38 (4 days ago)	Shop search flood (L7 DDoS) \| path: /111-bons-plan-vtt \| query: order=product.name.asc&q=Taille-L/Fa ... show more Shop search flood (L7 DDoS) \| path: /111-bons-plan-vtt \| query: order=product.name.asc&q=Taille-L/Famille-Overvolt-Patron-Pulsium \| src_port: 33439 show less	DDoS Attack Web App Attack
🇩🇪 MusicLibrary	2026-10-12 23:52:37 (4 days ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-10-12 18:19:29 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-12 14:52:06 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 103.130.18.255 (host-103-130-18-255.myrepublic. ... show more (mod_security) mod_security (id:210492) triggered by 103.130.18.255 (host-103-130-18-255.myrepublic.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 10:52:00.683628 2026] [security2:error] [pid 6400:tid 6400] [client 103.130.18.255:60350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daveweisman.com"] [uri "/.env.backup"] [unique_id "asz0EPrMnbOu-SfIO4zMTAAAADk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Wobak	2026-10-12 10:14:23 (4 days ago)	CrowdSec (apache logs): 2026-10-12 04:42 CEST. CVE probing /_ignition/execute-solution plus /admin / ... show more CrowdSec (apache logs): 2026-10-12 04:42 CEST. CVE probing /_ignition/execute-solution plus /admin /portal /panel /login enumeration. All 404. show less	Hacking Web App Attack
🇿🇦 vanderhost	2026-10-11 22:48:20 (5 days ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.lo ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.log via rule: /storage show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 95.214.53.157

🇽🇰 84.22.49.110

🇺🇸 20.55.90.133

🇹🇭 203.170.192.251

🇧🇩 203.99.144.226

🇸🇦 175.110.175.174

🇳🇱 109.160.32.107

🇮🇩 103.131.61.163

🇷🇴 92.118.39.77

🇮🇩 36.67.236.171

🇯🇵 34.146.67.59

🇺🇸 24.23.220.201

🇺🇸 216.25.89.87

🇳🇱 204.76.203.4

🇺🇸 192.34.164.13

🇺🇸 136.36.189.65

🇨🇳 119.249.100.244

🇨🇳 119.249.100.109

🇰🇷 119.192.128.163

🇨🇳 119.96.158.87