JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.18.79.180

103.18.79.180 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	PT Usaha Adi Sanggoro
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55701
Domain Name	as.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.18.79.180

Whois 103.18.79.180

IP Abuse Reports for 103.18.79.180:

This IP address has been reported a total of 17 times from 11 distinct sources. 103.18.79.180 was first reported on March 31st 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-04-10 05:24:42 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇺🇸 nowyouknow	2025-08-25 06:11:10 (9 months ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-08-22 23:26:58 (9 months ago)	(From [email protected])	Phishing Web Spam
🇳🇱 EGP Abuse Dept	2025-08-14 02:33:54 (9 months ago)	Port connection indicating compromised host	Port Scan Hacking Exploited Host
🇩🇰 donkzquixote	2025-08-10 13:30:13 (9 months ago)	Form submission spam detected	Web Spam
Anonymous	2025-08-07 00:54:21 (9 months ago)	Ports: 25,2525,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-07-22 09:22:22 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 103.18.79.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 103.18.79.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 22 05:22:15.164297 2025] [security2:error] [pid 14755:tid 14755] [client 103.18.79.180:46557] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|staben.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aH9YR0fe_E_M886D_4K8kAAAAAY"], referer: https://staben.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2025-07-04 13:06:32 (11 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-07-03 08:34:51 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 103.18.79.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 103.18.79.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 03 04:34:42.478975 2025] [security2:error] [pid 23610:tid 23610] [client 103.18.79.180:44000] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|interiorsolutions-stuart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "interiorsolutions-stuart.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aGZAoii6cBiYnsShWkctlAAAAAE"], referer: https://interiorsolutions-stuart.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-30 11:17:47 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.18.79.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 103.18.79.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 07:17:42.142462 2025] [security2:error] [pid 82522:tid 82522] [client 103.18.79.180:41417] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|modalsoftware.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modalsoftware.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aDmT1ufPNUx__yZ1RgegNgAAAAU"], referer: https://modalsoftware.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-05-27 02:03:00 (1 year ago)	(From [email protected])	Phishing Web Spam
🇷🇴 StarTech Team	2025-05-27 01:10:31 (1 year ago)	Bruteforce Attempt	Brute-Force
🇨🇳 ThreatBook.io	2025-05-07 01:49:03 (1 year ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.18.79.180	Brute-Force
🇬🇧 pestctrl	2025-04-20 21:08:19 (1 year ago)	Form spam	Phishing Web Spam
Anonymous	2025-04-09 17:39:46 (1 year ago)	Ports: 25,587,465; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇿🇦 196.192.181.202

🇳🇱 176.65.149.50

🇸🇪 171.25.158.47

🇩🇪 162.158.110.218

🇸🇬 152.42.240.74

🇺🇸 104.234.53.26

🇳🇱 45.148.10.152

🇮🇪 34.254.191.83

🇺🇸 186.233.184.67

🇮🇶 185.244.152.245

🇷🇺 185.71.67.69

🇧🇷 179.119.68.37

🇻🇳 103.138.113.149

🇯🇵 95.169.173.32

🇩🇪 84.154.236.26

🇦🇺 58.6.206.239

🇫🇷 51.159.114.197

🇳🇱 5.61.209.33

🇩🇪 213.209.159.238