JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.180.118.90

103.180.118.90 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 36%: ?

36%

ISP	PT Persada Data Multimedia
Usage Type	Fixed Line ISP
ASN	AS149359
Domain Name	pdm.net.id
Country	🇮🇩 Indonesia
City	Surabaya, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.180.118.90

Whois 103.180.118.90

IP Abuse Reports for 103.180.118.90:

This IP address has been reported a total of 44 times from 26 distinct sources. 103.180.118.90 was first reported on April 18th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ANTI SCANNER	2026-06-24 02:44:16 (1 day ago)	Scanner : /wp-login.php	Web Spam
🇮🇩 hermawan	2026-06-19 08:05:51 (5 days ago)	[Fri Jun 19 15:05:47.956489 2026] [security2:error] [pid 646847:tid 140501989713600] [client 103.180 ... show more [Fri Jun 19 15:05:47.956489 2026] [security2:error] [pid 646847:tid 140501989713600] [client 103.180.118.90:37936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "ajT4WwEnXWLgkXMd-9N7dgAIwwA"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[646848] [fDGlwlYJLE8] [ajT4WwEnXWLgkXMd-9N7dgAIwwA] keep_alive=[1] [2026- ... show less	Email Spam Hacking
🇩🇪 pltcldvlpr	2026-06-16 02:53:55 (1 week ago)	Bogus Useragent: 103.180.118.90 - - [16/Jun/2026:04:53:55 +0200] "GET /protocol?id=st_8_97&offset=75 ... show more Bogus Useragent: 103.180.118.90 - - [16/Jun/2026:04:53:55 +0200] "GET /protocol?id=st_8_97&offset=750&seq=765 HTTP/1.1" 444 0 "-" "Opera/8.54.(X11; Linux x86_64; ce-RU) Presto/2.9.166 Version/12.00" asn=149359 org="PT Persada Data Multimedia" country=ID ... show less	Bad Web Bot
🇨🇭 Origon	2026-06-06 10:18:06 (2 weeks ago)	http-admin-interface-probing - IP: 103.180.118.90 - time="2026-06-06T12:18:05+02:00" level=info msg ... show more http-admin-interface-probing - IP: 103.180.118.90 - time="2026-06-06T12:18:05+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-admin-interface-probing by ip 103.180.118.90 (ID/149359) : 4h ban on Ip 103.180.118.90" module=db show less	Web App Attack
Anonymous	2026-05-28 01:35:42 (4 weeks ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇨🇭 Origon	2026-05-25 04:34:37 (1 month ago)	http-admin-interface-probing - IP: 103.180.118.90 - time="2026-05-25T06:34:37+02:00" level=info msg ... show more http-admin-interface-probing - IP: 103.180.118.90 - time="2026-05-25T06:34:37+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-admin-interface-probing by ip 103.180.118.90 (ID/149359) : 4h ban on Ip 103.180.118.90" module=db show less	Web App Attack
Anonymous	2026-05-25 02:51:35 (1 month ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇮🇹 VHosting	2026-05-22 00:25:44 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-05-16 03:16:37 (1 month ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇲🇹 Malta	2026-05-10 03:33:11 (1 month ago)	103.180.118.90 - - [10/May/2026:05:33:11 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 103.180.118.90 - - [10/May/2026:05:33:11 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
Anonymous	2026-04-28 01:10:44 (1 month ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
Anonymous	2026-04-27 12:11:46 (1 month ago)	2026-04-27T14:11:45.390339+02:00 gollum postfix/smtpd[3125096]: NOQUEUE: reject: RCPT from unknown[1 ... show more 2026-04-27T14:11:45.390339+02:00 gollum postfix/smtpd[3125096]: NOQUEUE: reject: RCPT from unknown[103.180.118.90]: 554 5.7.1 Service unavailable; Client host [103.180.118.90] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/103.180.118.90 / Listed by CSS, see https://check.spamhaus.org/query/ip/103.180.118.90 / Listed by PBL, see https://check.spamhaus.org/query/ip/103.180.118.90; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<planetmoteur.com> ... show less	Email Spam
🇨🇭 Origon	2026-04-27 11:35:52 (1 month ago)	NOQUEUE - IP: 103.180.118.90 - Apr 27 13:35:52 plesk postfix/smtpd[2578642]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 103.180.118.90 - Apr 27 13:35:52 plesk postfix/smtpd[2578642]: NOQUEUE: reject: RCPT from unknown[103.180.118.90]: 554 5.7.1 Service unavailable; Client host [103.180.118.90] blocked using dnsbl-1.uceprotect.net; IP 103.180.118.90 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=103.180.118.90; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<riverbankresort.net> show less	Email Spam
🇨🇭 Origon	2026-04-24 02:19:11 (2 months ago)	NOQUEUE - IP: 103.180.118.90 - Apr 24 04:19:11 plesk postfix/smtpd[1154359]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 103.180.118.90 - Apr 24 04:19:11 plesk postfix/smtpd[1154359]: NOQUEUE: reject: RCPT from unknown[103.180.118.90]: 554 5.7.1 Service unavailable; Client host [103.180.118.90] blocked using dnsbl-1.uceprotect.net; IP 103.180.118.90 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=103.180.118.90; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<dungensebelevingstuin.nl> show less	Email Spam
Anonymous	2026-04-19 09:15:41 (2 months ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.98

🇺🇸 205.210.31.95

🇬🇧 195.206.182.212

🇹🇼 111.70.29.156

🇱🇹 62.60.130.219

🇩🇪 47.254.158.193

🇭🇰 46.247.61.103

🇳🇱 45.148.10.157

🇫🇮 45.130.127.173

🇩🇪 43.228.157.8

🇻🇳 14.191.204.162

🇮🇹 2.193.196.164

🇺🇸 205.210.31.94

🇺🇸 205.210.31.91

🇷🇺 195.133.32.165

🇧🇾 178.124.82.60

🇺🇸 172.172.214.224

🇨🇳 150.255.25.70

🇮🇳 144.24.97.38

🇺🇸 134.228.22.240