JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.234.34.18

103.234.34.18 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 0%: ?

ISP	PT EXABIT GROUP NETWORK
Usage Type	Fixed Line ISP
ASN	AS151521
Domain Name	exabit.id
Country	🇮🇩 Indonesia
City	Jember, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.234.34.18

Whois 103.234.34.18

IP Abuse Reports for 103.234.34.18:

This IP address has been reported a total of 52 times from 22 distinct sources. 103.234.34.18 was first reported on May 29th 2024, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Hippoline	2025-08-07 06:33:08 (11 months ago)	Aug 7 08:32:02 local wp(XXXX-B)[24361]: Authentication attempt for unknown user admin from ::ffff:1 ... show more Aug 7 08:32:02 local wp(XXXX-B)[24361]: Authentication attempt for unknown user admin from ::ffff:103.234.34.18 ... show less	Brute-Force Web App Attack
🇫🇷 Hippoline	2025-01-30 02:21:26 (1 year ago)	Jan 30 03:18:47 local wp(XXXX-B)[19223]: Authentication attempt for unknown user admin from ::ffff:1 ... show more Jan 30 03:18:47 local wp(XXXX-B)[19223]: Authentication attempt for unknown user admin from ::ffff:103.234.34.18 ... show less	Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2024-09-06 18:24:18 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2024-09-03 13:19:30 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 CommanderRoot	2024-08-26 08:53:51 (1 year ago)	HTTP request flood	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2024-08-16 15:26:18 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2024-07-25 02:05:45 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.234.34.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.234.34.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 24 22:05:39.030156 2024] [security2:error] [pid 4318:tid 4318] [client 103.234.34.18:56488] [client 103.234.34.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 31.3.152.100 (0+1 hits since last alert)\|michaelkivisto.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "michaelkivisto.com"] [uri "/xmlrpc.php"] [unique_id "ZqGy82HFGmUFIRZF4awpugAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2024-07-24 08:41:52 (1 year ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2024-07-23 08:01:42 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.234.34.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.234.34.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 23 04:01:37.672979 2024] [security2:error] [pid 1871136:tid 1871136] [client 103.234.34.18:57946] [client 103.234.34.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.234.34.18 (+1 hits since last alert)\|www.visionremota.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.visionremota.info"] [uri "/xmlrpc.php"] [unique_id "Zp9jYVrSdM1A3RgZwMdTEwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Hippoline	2024-07-23 02:17:21 (1 year ago)	Jul 23 04:13:05 local wp(XXXX-A)[6404]: Authentication attempt for unknown user admin from ::ffff:10 ... show more Jul 23 04:13:05 local wp(XXXX-A)[6404]: Authentication attempt for unknown user admin from ::ffff:103.234.34.18 ... show less	Brute-Force Web App Attack
🇺🇸 WeekendWeb	2024-07-22 18:14:28 (1 year ago)	Wordpress Vunerability attack	Web App Attack
🇲🇹 Malta	2024-07-22 01:13:53 (1 year ago)	103.234.34.18 - - [22/Jul/2024:03:13:52 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 103.234.34.18 - - [22/Jul/2024:03:13:52 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2024-07-21 17:24:29 (1 year ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇦🇺 MAGIC	2024-07-21 11:01:49 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇲🇹 Malta	2024-07-16 13:17:22 (1 year ago)	103.234.34.18 - - [16/Jul/2024:15:17:21 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 103.234.34.18 - - [16/Jul/2024:15:17:21 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.66.237.186

🇺🇸 63.135.169.175

🇰🇷 210.204.139.38

🇺🇸 173.239.211.39

🇩🇪 157.230.103.35

🇨🇱 138.84.33.216

🇮🇩 103.165.227.178

🇨🇦 4.239.240.98

🇷🇴 193.46.255.86

🇧🇷 179.42.142.128

🇺🇸 172.236.96.130

🇺🇸 147.185.132.25

🇻🇳 103.78.1.33

🇫🇷 46.105.42.96

🇵🇱 95.214.52.228

🇷🇴 92.118.39.71

🇫🇮 77.105.161.120

🇳🇱 77.83.39.92

🇧🇷 45.7.19.108

🇸🇪 216.58.201.170