JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.132.40.18

103.132.40.18 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	PT Kalimasada Inti Sarana
Usage Type	Fixed Line ISP
ASN	AS150970
Domain Name	kalimasada.id
Country	🇮🇩 Indonesia
City	Wonosobo, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.132.40.18

Whois 103.132.40.18

IP Abuse Reports for 103.132.40.18:

This IP address has been reported a total of 40 times from 24 distinct sources. 103.132.40.18 was first reported on May 12th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-05 00:41:35 (5 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-07-04 15:44:54 (14 hours ago)	103.132.40.18 - - [04/Jul/2026:17:44:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "WordPress.co ... show more 103.132.40.18 - - [04/Jul/2026:17:44:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "WordPress.com; https://wordpress.com" 103.132.40.18 - - [04/Jul/2026:17:44:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "WordPress.com; https://wordpress.com" 103.132.40.18 - - [04/Jul/2026:17:44:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-04 15:29:24 (14 hours ago)	103.132.40.18 - - [04/Jul/2026:17:29:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "WordPress.co ... show more 103.132.40.18 - - [04/Jul/2026:17:29:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "WordPress.com; https://wordpress.com" 103.132.40.18 - - [04/Jul/2026:17:29:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" 103.132.40.18 - - [04/Jul/2026:17:29:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "WordPress.com; https://wordpress.com" show less	Hacking Web App Attack
🇨🇭 Mario Bretscher	2026-07-04 02:31:12 (1 day ago)	Jul 4 04:30:59 beat-band.ch Cerber(beat-band.ch)[1268216]: Authentication failure for beat-band from ... show more Jul 4 04:30:59 beat-band.ch Cerber(beat-band.ch)[1268216]: Authentication failure for beat-band from 103.132.40.18 Jul 4 04:31:10 beat-band.ch Cerber(beat-band.ch)[1265572]: Authentication failure for beat-band from 103.132.40.18 ... show less	Web Spam
🇬🇧 [email protected]	2026-07-04 00:30:36 (1 day ago)	...	Brute-Force SSH
🇧🇪 cmbplf	2026-07-03 23:11:59 (1 day ago)	3.626 requests from abuseipdb.com blacklisted IP (1yr10mos3w)	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-07-03 22:16:07 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 Marc	2026-07-03 18:08:04 (1 day ago)	103.132.40.18 - - [03/Jul/2026:20:07:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3419 "-" "WordPress.c ... show more 103.132.40.18 - - [03/Jul/2026:20:07:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3419 "-" "WordPress.com; https://wordpress.com" 103.132.40.18 - - [03/Jul/2026:20:07:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3467 "-" "Jetpack by WordPress.com" 103.132.40.18 - - [03/Jul/2026:20:08:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3467 "-" "WordPress.com; https://wordpress.com" show less	Brute-Force Web App Attack
🇬🇧 Apache	2026-07-03 16:40:26 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.132.40.18 (ID/Indonesia/-): 5 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 103.132.40.18 (ID/Indonesia/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇨🇿 huginet	2026-07-03 05:41:36 (2 days ago)	103.132.40.18 - - [03/Jul/2026:07:41:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by W ... show more 103.132.40.18 - - [03/Jul/2026:07:41:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com" 103.132.40.18 - - [03/Jul/2026:07:41:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-02 14:29:28 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-02 14:29:04 (2 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 12:22:28 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.132.40.18 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.132.40.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 08:22:23.135185 2026] [security2:error] [pid 28783:tid 28783] [client 103.132.40.18:61530] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.132.40.18 (+1 hits since last alert)\|d-sinema.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "d-sinema.com"] [uri "/xmlrpc.php"] [unique_id "akZX_2Onz_hzTv_Du0x-LwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-02 07:56:46 (2 days ago)	103.132.40.18 - - [02/Jul/2026:09:56:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack/12. ... show more 103.132.40.18 - - [02/Jul/2026:09:56:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack/12.5; WordPress/6.1; http://site89641198.com" 103.132.40.18 - - [02/Jul/2026:09:56:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com" 103.132.40.18 - - [02/Jul/2026:09:56:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-02 07:41:19 (2 days ago)	103.132.40.18 - - [02/Jul/2026:09:40:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by ... show more 103.132.40.18 - - [02/Jul/2026:09:40:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" 103.132.40.18 - - [02/Jul/2026:09:41:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "WordPress.com; https://wordpress.com" 103.132.40.18 - - [02/Jul/2026:09:41:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com" show less	Hacking Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇮 190.212.210.66

🇰🇼 188.236.51.130

🇮🇳 103.155.2.39

🇧🇷 45.238.185.132

🇰🇿 2.134.70.114

🇺🇸 216.226.77.20

🇺🇸 205.210.31.21

🇦🇺 203.185.198.246

🇷🇺 194.28.75.238

🇧🇷 187.7.126.6

🇨🇷 186.15.101.193

🇮🇳 183.83.197.226

🇺🇸 162.216.149.215

🇳🇱 157.245.68.146

🇺🇸 135.237.126.83

🇨🇳 111.26.63.89

🇮🇳 106.202.45.95

🇺🇸 85.254.112.228

🇬🇧 51.195.215.168

🇳🇱 45.198.224.140