JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.101.179.109

165.101.179.109 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	PT Metadata Teknovasi Nusantara
Usage Type	Fixed Line ISP
ASN	AS154056
Domain Name	metadatanetwork.com
Country	🇮🇩 Indonesia
City	Sidoarjo, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.101.179.109

Whois 165.101.179.109

IP Abuse Reports for 165.101.179.109:

This IP address has been reported a total of 51 times from 36 distinct sources. 165.101.179.109 was first reported on October 6th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 francelink.fr	2026-10-24 01:08:27 (3 days ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-23T02:52:05.000Z.	Web App Attack
🇮🇩 solusi247.com	2026-10-23 17:29:22 (3 days ago)	Wazuh rule 140045: wp2shell (CVE-2026-63030): WordPress REST API batch endpoint accessed - possible ... show more Wazuh rule 140045: wp2shell (CVE-2026-63030): WordPress REST API batch endpoint accessed - possible handler desync/SQLi chain from 165.101.179.109 show less	Hacking Web App Attack
🇩🇪 JCB	2026-10-23 08:31:00 (3 days ago)	165.101.179.109 - - [23/Oct/2026:07:34:04 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 196 "-" "Mozi ... show more 165.101.179.109 - - [23/Oct/2026:07:34:04 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 DrLex0	2026-10-23 06:20:10 (4 days ago)	wp2shell and related WordPress poking 165.101.179.109 443 - [23/Oct/2026:06:20:08 +0000] "POST /?re ... show more wp2shell and related WordPress poking 165.101.179.109 443 - [23/Oct/2026:06:20:08 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 400 4520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 165.101.179.109 443 - [23/Oct/2026:06:20:09 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 400 4521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 165.101.179.109 443 - [23/Oct/2026:06:20:10 +0000] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 400 4520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 MarkGGN	2026-10-23 05:47:08 (4 days ago)	Web attack. 165.101.179.109 - - [23/Oct/2026:07:47:06 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" ... show more Web attack. 165.101.179.109 - - [23/Oct/2026:07:47:06 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 715 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 165.101.179.109 - - [23/Oct/2026:07:47:07 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 545 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 165.101.179.109 - - [23/Oct/2026:07:47:07 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 545 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇫🇷 mrcrassi	2026-10-23 03:46:59 (4 days ago)	Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇲🇾 Rizzy	2026-10-23 03:17:33 (4 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 yvoictra	2026-10-23 02:57:09 (4 days ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-cve-probing	Web App Attack
🇺🇸 1gz	2026-10-23 01:35:06 (4 days ago)	Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /index.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 1gz	2026-10-23 01:35:06 (4 days ago)	Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-json/batch/v1 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇷🇸 pexodelic	2026-10-23 01:05:02 (4 days ago)	Automated report from web, SSH and FTP server logs: 6 requests probing for exposed secrets (.env, .g ... show more Automated report from web, SSH and FTP server logs: 6 requests probing for exposed secrets (.env, .git, config files). First reported 2026-10-23 02:05 UTC, last reported 2026-10-23 03:05 UTC; counts cover the current log rotation window. show less	Web App Attack
🇺🇸 francelink.fr	2026-10-23 00:03:27 (4 days ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-22T02:18:50.000Z.	Web App Attack
🇧🇷 radardatelecom	2026-10-22 14:18:04 (4 days ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
Anonymous	2026-10-22 13:45:07 (4 days ago)	Observed scanned 3 known-sensitive endpoint(s), e.g.: /, /index.php, /wp-json/batch/v1	Bad Web Bot Web App Attack
🇺🇸 JCB	2026-10-22 12:42:00 (4 days ago)	165.101.179.109 - - [22/Oct/2026:11:50:02 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 245 "-" "Mozi ... show more 165.101.179.109 - - [22/Oct/2026:11:50:02 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇺🇸 50.6.202.5

🇷🇺 31.148.174.107

🇬🇧 5.252.83.200

🇺🇸 205.210.31.32

🇺🇸 162.216.150.125

🇺🇸 137.184.206.38

🇺🇸 136.109.225.215

🇺🇸 136.66.238.150

🇵🇱 89.65.104.59

🇺🇿 84.54.70.14

🇬🇧 54.36.166.50

🇧🇪 35.233.99.27

🇬🇧 217.146.80.119

🇺🇸 205.210.31.110

🇳🇱 185.136.15.111

🇨🇳 171.114.225.34

🇨🇦 148.113.148.211

🇺🇸 147.185.132.97

🇺🇸 147.135.7.63