JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.242.68.91

180.242.68.91 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 55%: ?

55%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.242.68.91

Whois 180.242.68.91

IP Abuse Reports for 180.242.68.91:

This IP address has been reported a total of 13 times from 9 distinct sources. 180.242.68.91 was first reported on March 30th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-05 08:36:20 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 180.242.68.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 180.242.68.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 04:36:16.315296 2026] [security2:error] [pid 30178:tid 30178] [client 180.242.68.91:25166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jessicalevant.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jessicalevant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akoXgGLooKCmdi3kiDKaPAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-05 05:38:09 (3 days ago)	(wordpress) Failed wordpress login from 180.242.68.91 (ID/Indonesia/-)	Brute-Force
🇩🇪 4server	2026-07-05 02:34:52 (3 days ago)	[SunJul0504:34:47.2189372026][security2:error][pid2263487:tid2263549][client180.242.68.91:0]ModSecur ... show more [SunJul0504:34:47.2189372026][security2:error][pid2263487:tid2263549][client180.242.68.91:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"craniosacraltherapy.ch\"][uri\"/xmlrpc.php\"][unique_id\"aknCxzQ9d_pwgiw0UDs3pAAAAFU\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-07-03 10:39:26 (4 days ago)	Unauthorized access to webpage admin	Web App Attack
🇮🇪 Jim Keir	2026-07-03 02:26:14 (5 days ago)	2026-07-03 02:26:14 180.242.68.91 File scanning, blocking 180.242.68.91 for 5 minutes	Web App Attack
🇩🇪 big-cloud.nl	2026-07-02 14:33:10 (5 days ago)	Try to access /xmlrpc.php	Web App Attack
🇫🇷 Kenshin869	2026-07-02 11:14:38 (5 days ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 4server	2026-07-02 10:08:22 (5 days ago)	[ThuJul0212:08:20.2455382026][security2:error][pid2820294:tid2820414][client180.242.68.91:0]ModSecur ... show more [ThuJul0212:08:20.2455382026][security2:error][pid2820294:tid2820414][client180.242.68.91:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"risanamento-pareti-umide.ch\"][uri\"/xmlrpc.php\"][unique_id\"akY4lBoKt5Snr_XupBPlsgAAAQg\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-07-02 01:38:35 (6 days ago)	Unauthorized access to webpage admin	Web App Attack
Anonymous	2026-07-01 10:45:02 (6 days ago)	Web attack blocked by Wordfence on mezzia.nl (1 hit). Reported by CRMON.	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 09:41:56 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 180.242.68.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 180.242.68.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 05:41:52.013168 2026] [security2:error] [pid 8712:tid 8712] [client 180.242.68.91:23565] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|glassclublake.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "glassclublake.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akTg4H6rWvwU6zDTmni9jQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-07-01 03:36:41 (1 week ago)	(wordpress) Failed wordpress login from 180.242.68.91 (ID/Indonesia/-): (CF_ENABLE)	Brute-Force
🇺🇸 TPI-Abuse	2024-03-30 01:24:15 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 180.242.68.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 180.242.68.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 21:24:00.037651 2024] [security2:error] [pid 17892] [client 180.242.68.91:12240] [client 180.242.68.91] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.nwtree.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nwtree.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZgdpsJ5c1VAV-hzMZxnnKwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.52

🇧🇷 2804:10f8:411c:9700:8df9:b9ca:1bbb:f994

🇺🇸 2600:1f14:af5:6701:8227:40c4:c07e:d8b0

🇬🇧 217.154.38.181

🇰🇷 211.223.107.86

🇳🇱 176.65.148.158

🇻🇳 171.244.63.18

🇹🇭 171.103.55.193

🇺🇸 170.187.165.130

🇭🇰 154.221.20.92

🇺🇸 154.92.23.249

🇺🇸 107.173.36.74

🇺🇸 107.151.201.52

🇹🇷 94.154.43.188

🇺🇸 66.132.172.138

🇧🇷 45.229.105.186

🇩🇪 43.228.157.9

🇸🇬 43.156.212.86

🇷🇴 2.57.121.112

🇰🇷 1.227.228.131