JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.243.5.158

180.243.5.158 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 51%: ?

51%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	South Tangerang, Banten

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.243.5.158

Whois 180.243.5.158

IP Abuse Reports for 180.243.5.158:

This IP address has been reported a total of 35 times from 16 distinct sources. 180.243.5.158 was first reported on January 4th 2022, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 IndigoRidge	2026-07-29 08:16:16 (7 hours ago)	180.243.5.158 - - [29/Jul/2026:04:14:29 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.c ... show more 180.243.5.158 - - [29/Jul/2026:04:14:29 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 180.243.5.158 - - [29/Jul/2026:04:15:01 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 180.243.5.158 - - [29/Jul/2026:04:15:12 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 180.243.5.158 - - [29/Jul/2026:04:16:05 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 180.243.5.158 - - [29/Jul/2026:04:16:16 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇫🇮 YF	2026-07-29 08:00:31 (7 hours ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
Anonymous	2026-07-29 07:00:00 (8 hours ago)	Automated Apache web application probing in selected 24h window; attempts=117, unique_paths=1, error ... show more Automated Apache web application probing in selected 24h window; attempts=117, unique_paths=1, error_responses=117; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
Anonymous	2026-07-29 07:00:00 (8 hours ago)	Apache probe; attempts=342; exact paths: /xmlrpc.php	Web App Attack
🇺🇸 Dave Hansen	2026-07-29 02:24:52 (13 hours ago)	(wordpress) Failed wordpress login from 180.243.5.158 (ID/Indonesia/-)	Brute-Force
🇪🇸 alferez	2026-07-27 07:21:31 (2 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 05:23:40 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 180.243.5.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 180.243.5.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:23:33.219796 2026] [security2:error] [pid 2888885:tid 2888885] [client 180.243.5.158:64227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.243.5.158 (+1 hits since last alert)\|thepercussionworks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thepercussionworks.com"] [uri "/xmlrpc.php"] [unique_id "ambrVWkpH5iNnLrGa_aoGQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-27 03:35:45 (2 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇺🇸 xmission.com	2026-06-28 09:31:19 (1 month ago)	Blocked by UFW (TCP on 63150) Source port: 58862 TTL: 109 Packet length: 40 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 63150) Source port: 58862 TTL: 109 Packet length: 40 TOS: 0x08 This report (for 180.243.5.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-27 21:19:19 (1 month ago)	Blocked by UFW (TCP on 63150) Source port: 54647 TTL: 242 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 63150) Source port: 54647 TTL: 242 Packet length: 44 TOS: 0x08 This report (for 180.243.5.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-27 09:08:24 (1 month ago)	Blocked by UFW (TCP on 63150) Source port: 62910 TTL: 109 Packet length: 40 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 63150) Source port: 62910 TTL: 109 Packet length: 40 TOS: 0x08 This report (for 180.243.5.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-26 21:05:31 (1 month ago)	Blocked by UFW (TCP on 63150) Source port: 22177 TTL: 109 Packet length: 40 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 63150) Source port: 22177 TTL: 109 Packet length: 40 TOS: 0x08 This report (for 180.243.5.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-26 09:04:30 (1 month ago)	Blocked by UFW (TCP on 63150) Source port: 50250 TTL: 109 Packet length: 40 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 63150) Source port: 50250 TTL: 109 Packet length: 40 TOS: 0x08 This report (for 180.243.5.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-25 20:58:40 (1 month ago)	Blocked by UFW (TCP on 63150) Source port: 15978 TTL: 110 Packet length: 40 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 63150) Source port: 15978 TTL: 110 Packet length: 40 TOS: 0x08 This report (for 180.243.5.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-25 08:55:37 (1 month ago)	Blocked by UFW (TCP on 63150) Source port: 52059 TTL: 108 Packet length: 40 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 63150) Source port: 52059 TTL: 108 Packet length: 40 TOS: 0x08 This report (for 180.243.5.158) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2402:3a80:4633:68b7:9029:53c2:279d:689c

🇩🇪 194.187.176.245

🇺🇦 194.44.163.190

🇹🇷 178.233.21.105

🇮🇩 157.10.182.14

🇺🇸 136.144.33.60

🇩🇪 118.193.59.10

🇷🇴 92.118.39.14

🇺🇸 66.132.172.197

🇨🇦 51.161.8.211

🇳🇱 45.148.10.147

🇺🇸 20.64.104.237

🇨🇳 221.212.34.132

🇮🇷 185.116.161.214

🇵🇭 103.247.39.55

🇪🇨 45.4.203.48

🇺🇸 35.199.43.28

🇧🇷 190.89.156.157

🇵🇰 154.192.8.203

🇳🇱 109.72.84.10