JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.243.255.173

180.243.255.173 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Tasikmalaya, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.243.255.173

Whois 180.243.255.173

IP Abuse Reports for 180.243.255.173:

This IP address has been reported a total of 31 times from 21 distinct sources. 180.243.255.173 was first reported on July 27th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-08-31 14:03:23 (16 hours ago)	Web application attack detected	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-08-31 10:22:32 (20 hours ago)	[31/Aug/2026:13:22:32 +0300] -- 180.243.255.173 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [31/Aug/2026:13:22:32 +0300] -- 180.243.255.173 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /.env/.env.bak HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 09:12:28 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 180.243.255.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 180.243.255.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 05:12:22.045832 2026] [security2:error] [pid 15476:tid 15476] [client 180.243.255.173:15597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anywherecamera.com"] [uri "/.env/.env.bak"] [unique_id "apVFdkn8L88gh1Platv6LAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Anytech	2026-08-31 09:08:25 (21 hours ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
Anonymous	2026-08-31 08:26:49 (22 hours ago)	"GET /phpinfo.php HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 08:16:11 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 180.243.255.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 180.243.255.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:16:04.579783 2026] [security2:error] [pid 16105:tid 16105] [client 180.243.255.173:6819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aeongames.com"] [uri "/.env/.env.bak"] [unique_id "apU4REEahwdt0FJ-6S06BgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-08-31 04:52:34 (1 day ago)	Multiple WAF Violations	Web App Attack
🇵🇱 Budyn	2026-08-31 03:39:28 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.sweetpuddingtrap.xyz \| URI: /phpinfo.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 billyw0nka	2026-08-30 23:43:40 (1 day ago)	pattern: phpinfo	Hacking
🇨🇦 polycoda	2026-08-30 22:06:46 (1 day ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)	Hacking Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-30 22:00:53 (1 day ago)	Auto-ban: >3000 req/min op 2026-08-30	Web App Attack SSH Hacking
Anonymous	2026-08-30 21:26:52 (1 day ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇵🇱 Budyn	2026-08-30 21:14:30 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.astropot.website \| URI: /phpinfo.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-30 19:50:28 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 16:28:19 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 180.243.255.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 180.243.255.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 12:28:14.515730 2026] [security2:error] [pid 16429:tid 16445] [client 180.243.255.173:9486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "9044449074.com"] [uri "/.env/.env.bak"] [unique_id "apRaHjYKqciDeppV-BLsPAAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.105

🇹🇼 198.235.24.101

🇻🇪 190.89.30.99

🇧🇷 189.62.44.218

🇵🇰 182.181.55.15

🇷🇺 176.211.42.202

🇩🇪 167.94.145.30

🇨🇳 124.114.79.217

🇨🇳 123.163.114.100

🇺🇸 71.217.172.187

🇭🇰 35.220.229.250

🇺🇸 15.204.249.142

🇺🇸 15.204.225.154

🇺🇸 12.156.67.18

🇩🇪 2.58.113.71

🇨🇳 220.197.85.130

🇧🇷 205.210.31.172

🇧🇷 186.194.157.197

🇦🇷 186.39.93.231

🇺🇸 174.35.25.181