JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.153.131.130

103.153.131.130 was found in our database!

This IP was reported 180 times. Confidence of Abuse is 9%: ?

ISP	Sekolah Tinggi Teknologi Kedirgantaraan Yogyakarta
Usage Type	University/College/School
ASN	AS140463
Domain Name	sttkd.ac.id
Country	🇮🇩 Indonesia
City	Yogyakarta, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.153.131.130

Whois 103.153.131.130

IP Abuse Reports for 103.153.131.130:

This IP address has been reported a total of 180 times from 58 distinct sources. 103.153.131.130 was first reported on February 2nd 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Kolobrzeg	2026-10-05 11:10:53 (2 weeks ago)	Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense cou ... show more Failed login attempts against MikroTik RouterOS router, blocked after repeated failures. Offense count: 7. Last seen 2026-10-05 11:10 UTC, first seen 2026-06-12 UTC. Automated detection. Follow-up: attacks continued after our previous reports (2 earlier, latest 2026-09-21 19:51 UTC). AS140463 Sekolah Tinggi Teknologi Kedirgantaraan Yogyakarta. show less	Brute-Force
🇪🇸 raiolanetworks.com	2026-09-21 22:41:04 (1 month ago)	Honeypot detection: credential brute-force. 2 events observed. 1 login attempts. Reported automatica ... show more Honeypot detection: credential brute-force. 2 events observed. 1 login attempts. Reported automatically from a honeypot sensor. show less	Brute-Force
🇵🇱 Kolobrzeg	2026-09-21 19:32:18 (1 month ago)	MikroTik RouterOS brute-force: 6 failed login attempts (service). Last seen 2026-09-21 19:32 UTC, fi ... show more MikroTik RouterOS brute-force: 6 failed login attempts (service). Last seen 2026-09-21 19:32 UTC, first seen 2026-06-12 UTC. Automated detection. Follow-up: attacks continued after our previous report (1 earlier, latest 2026-09-11 00:38 UTC). AS140463 Sekolah Tinggi Teknologi Kedirgantaraan Yogyakarta. show less	Brute-Force Port Scan
🇵🇱 Kolobrzeg	2026-09-10 23:48:11 (1 month ago)	MikroTik RouterOS brute-force: 5 failed login attempts (service). Last seen 2026-09-10 23:48 UTC, fi ... show more MikroTik RouterOS brute-force: 5 failed login attempts (service). Last seen 2026-09-10 23:48 UTC, first seen 2026-06-12 UTC. Automated detection. AS140463 Sekolah Tinggi Teknologi Kedirgantaraan Yogyakarta. show less	Brute-Force Port Scan
🇬🇧 PeravixGroup	2026-06-08 13:03:17 (4 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-05-12 11:08:57 (5 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇮🇹 VHosting	2026-04-16 04:02:44 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇬🇧 jwp	2026-03-05 12:04:00 (7 months ago)	Dovecot Fake Login	Brute-Force
🇯🇵 Kinsei Engineering Inc.	2026-03-03 22:26:45 (7 months ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Brute-Force Email Spam
🇩🇪 filstal.org	2026-03-02 23:44:15 (7 months ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
🇩🇪 filstal.org	2026-02-28 21:26:24 (7 months ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
🇨🇭 Origon	2026-02-28 19:44:37 (7 months ago)	NOQUEUE - IP: 103.153.131.130 - Feb 28 20:44:37 plesk postfix/smtpd[2777]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 103.153.131.130 - Feb 28 20:44:37 plesk postfix/smtpd[2777]: NOQUEUE: reject: RCPT from unknown[103.153.131.130]: 554 5.7.1 Service unavailable; Client host [103.153.131.130] blocked using dnsbl-1.uceprotect.net; IP 103.153.131.130 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=103.153.131.130; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<103.153.131.130> show less	Email Spam
🇵🇱 positron.pl	2026-02-20 18:56:33 (8 months ago)	Feb 20 19:56:27 debian sshd[193852]: Failed password for root from 103.153.131.130 port 46437 ssh2 F ... show more Feb 20 19:56:27 debian sshd[193852]: Failed password for root from 103.153.131.130 port 46437 ssh2 Feb 20 19:56:31 debian sshd[193852]: Failed password for root from 103.153.131.130 port 46437 ssh2 ... show less	Brute-Force SSH
🇨🇳 Bro Charlie	2026-02-20 10:29:52 (8 months ago)	2026-02-20T18:29:48.771493+08:00 localhost sshd[1112971]: pam_unix(sshd:auth): authentication failur ... show more 2026-02-20T18:29:48.771493+08:00 localhost sshd[1112971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.153.131.130 user=root 2026-02-20T18:29:50.854542+08:00 localhost sshd[1112971]: Failed password for root from 103.153.131.130 port 41637 ssh2 ... show less	Brute-Force SSH
🇸🇰 EVISION	2026-02-12 05:42:00 (8 months ago)	No-reply.	Phishing Email Spam Spoofing

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇰 185.193.240.246

🇮🇪 108.131.117.85

🇨🇦 50.71.83.201

🇺🇸 192.161.49.2

🇳🇬 169.255.236.74

🇺🇸 104.23.187.237

🇩🇪 64.89.163.178

🇳🇱 45.148.10.151

🇭🇰 42.200.66.164

🇰🇷 34.50.24.67

🇨🇳 221.221.28.66

🇧🇷 201.13.176.212

🇧🇷 189.46.1.149

🇨🇳 139.155.126.223

🇮🇳 113.11.231.104

🇺🇸 104.23.187.236

🇮🇩 103.157.78.61

🇳🇱 78.142.230.31

🇸🇬 47.128.61.181

🇨🇦 34.19.179.78