JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.130.18.61

103.130.18.61 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 100%: ?

100%

ISP	PT. Eka Mas Republik
Usage Type	Fixed Line ISP
ASN	AS63859
Hostname(s)	host-103-130-18-61.myrepublic.co.id
Domain Name	myrepublic.co.id
Country	🇮🇩 Indonesia
City	Depok, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.130.18.61

Whois 103.130.18.61

IP Abuse Reports for 103.130.18.61:

This IP address has been reported a total of 128 times from 69 distinct sources. 103.130.18.61 was first reported on March 16th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-08-23 15:57:52 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Roderic	2026-08-23 15:25:00 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇵🇱 Budyn	2026-08-23 14:08:26 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.pro \| URI: /wp-admin/admin-ajax.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120 Safari/537.36 \| BODY: action=nf_fu_get_new_nonce&field_id=7&form_id=7 show less	Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-08-23 13:35:32 (2 days ago)	103.130.18.61 (ID/Indonesia/Jakarta/West Jakarta/host-103-130-18-61.myrepublic.co.id), more than 30 ... show more 103.130.18.61 (ID/Indonesia/Jakarta/West Jakarta/host-103-130-18-61.myrepublic.co.id), more than 30 Apache 403 hits show less	Hacking
Anonymous	2026-08-23 11:57:42 (2 days ago)	[ssd5.kdns.gr] httpd-cms-exploit: sites=www.tsokastzakia.gr; logs=/var/log/httpd/domains/tsokastzaki ... show more [ssd5.kdns.gr] httpd-cms-exploit: sites=www.tsokastzakia.gr; logs=/var/log/httpd/domains/tsokastzakia.gr.log; samples=/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Hacking Web App Attack
🇬🇧 blik2108	2026-08-23 07:05:47 (2 days ago)	103.130.18.61 - - [23/Aug/2026:07:05:27 +0000] "HEAD /components/com_icagenda/icagenda.php HTTP/1.1" ... show more 103.130.18.61 - - [23/Aug/2026:07:05:27 +0000] "HEAD /components/com_icagenda/icagenda.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" 103.130.18.61 - - [23/Aug/2026:07:05:27 +0000] "HEAD /media/com_icagenda/css/icagenda.css HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" 103.130.18.61 - - [23/Aug/2026:07:05:44 +0000] "POST /index.php?option=com_icagenda&task=registration.submit HTTP/1.1" 404 3437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" 103.130.18.61 - - [23/Aug/2026:07:05:45 +0000] "POST /index.php?option=com_icagenda&task=registration.submit HTTP/1.1" 404 3437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" 103.130.18.61 - - [23/Aug/2026:07:05:45 +0000] "POST /index.php?option=com_icagenda&task=registration.submit HTTP/1.1" 404 3437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" 103.130.18.61 - - [23/Aug/2026:07:05:45 +0000] " ... show less	Web App Attack
🇧🇪 Saec	2026-08-23 04:21:12 (2 days ago)	Honeypot caught: /wp-admin/admin-ajax.php via mobil.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Honeypot caught: /wp-admin/admin-ajax.php via mobil.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120 Safari/537.36. show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇧🇪 Saec	2026-08-23 03:07:13 (2 days ago)	Jarvis auto-ban: Honeypot /wp-admin/admin-ajax.php via 2.saec.me [ID] ASN:PT. Eka Mas Republik	Port Scan Web App Attack
🇩🇪 FeG Deutschland	2026-08-22 20:57:44 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇧🇪 cmbplf	2026-08-22 20:11:03 (2 days ago)	2.045 requests from abuseipdb.com blacklisted IP (1yr10mos3w)	Brute-Force Bad Web Bot
🇩🇪 conseilgouz	2026-08-22 14:46:00 (3 days ago)	coe- 404 : Too many 404 errors	Brute-Force
🇩🇪 4server	2026-08-22 12:34:43 (3 days ago)	[SatAug2214:34:40.3527392026][security2:error][pid2457874:tid2457956][client103.130.18.61:0]ModSecur ... show more [SatAug2214:34:40.3527392026][security2:error][pid2457874:tid2457956][client103.130.18.61:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"ppinvestment.ch\"][uri\"/index.php\"][unique_id\"aomXYHswtzBpp13LX7IDVAAAAJQ\"] show less	Port Scan Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-08-22 03:08:09 (3 days ago)	[22/Aug/2026:06:08:09 +0300] -- 103.130.18.61 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp- ... show more [22/Aug/2026:06:08:09 +0300] -- 103.130.18.61 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp-admin/admin-ajax.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-08-22 02:48:18 (3 days ago)	(bot_kill_mega) Aggressive Bot Blocked: python 103.130.18.61 (ID/Indonesia/host-103-130-18-61.myrepu ... show more (bot_kill_mega) Aggressive Bot Blocked: python 103.130.18.61 (ID/Indonesia/host-103-130-18-61.myrepublic.co.id): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 103.130.18.61 - - [22/Aug/2026:05:48:13 +0300] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 403 146 "-" "python-requests/2.34.0" show less	Port Scan
🇬🇧 consul.to	2026-08-22 01:41:46 (3 days ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 172.71.131.124

🇺🇸 222.167.109.167

🇱🇹 213.176.26.62

🇺🇸 205.210.31.87

🇺🇿 144.124.196.120

🇺🇸 137.184.229.128

🇨🇳 119.165.140.102

🇨🇳 119.98.213.99

🇺🇸 74.114.29.17

🇺🇸 64.225.30.2

🇳🇱 45.148.10.157

🇹🇼 35.221.173.161

🇫🇷 2400:cb00:987:1000:c205:6137:421b:2d1

🇹🇷 213.232.0.205

🇧🇷 189.56.0.19

🇺🇸 165.154.36.177

🇨🇳 116.179.37.176

🇨🇳 106.75.146.57

🇷🇺 94.103.3.108

🇳🇱 91.221.191.8