JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.243.8.59

180.243.8.59 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 0%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.243.8.59

Whois 180.243.8.59

IP Abuse Reports for 180.243.8.59:

This IP address has been reported a total of 7 times from 5 distinct sources. 180.243.8.59 was first reported on May 11th 2022, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 RemyLebeau	2026-08-26 06:31:24 (6 days ago)		Web App Attack Port Scan
🇮🇩 sockominfo	2026-06-09 23:00:53 (2 months ago)	SIMASN Account Signin during non bussiness hour., User login to application during non-business hour ... show more SIMASN Account Signin during non bussiness hour., User login to application during non-business hours. Threat Score: 7.7/10 (HIGH). Confidence: 50%. CVSS v3.1: 6.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 97%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Fresh. Source Reputation: SUSPICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-09 22:00:54 (2 months ago)	SIMASN Account Signin during non bussiness hour., User login to application during non-business hour ... show more SIMASN Account Signin during non bussiness hour., User login to application during non-business hours. Threat Score: 7.7/10 (HIGH). Confidence: 50%. CVSS v3.1: 6.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 97%. MITRE ATT&CK: T1071 (Application Layer Protocol). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: SUSPICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
Anonymous	2025-11-16 12:08:08 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-10-14 04:09:42 (10 months ago)	[Tue Oct 14 11:07:50.343219 2025] [security2:error] [pid 1813617:tid 140350531282624] [client 180.24 ... show more [Tue Oct 14 11:07:50.343219 2025] [security2:error] [pid 1813617:tid 140350531282624] [client 180.243.8.59:47833] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=618&id=555556376%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-nopember-4-desember-2017&start=170 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=618&id=555556376%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-nopemb..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aO3MlqVll-84o ... show less	Hacking Web App Attack
Anonymous	2022-05-11 14:12:21 (4 years ago)	180.243.8.59 - - [11/May/2022:13:12:19 -0500] "POST /admin/ HTTP/1.1" 200 4014 "-" "Mozilla/5.0 (X11 ... show more 180.243.8.59 - - [11/May/2022:13:12:19 -0500] "POST /admin/ HTTP/1.1" 200 4014 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack
Anonymous	2022-05-11 13:47:54 (4 years ago)	180.243.8.59 - - [11/May/2022:12:47:52 -0500] "POST /admin/ HTTP/1.1" 200 4012 "-" "Mozilla/5.0 (X11 ... show more 180.243.8.59 - - [11/May/2022:12:47:52 -0500] "POST /admin/ HTTP/1.1" 200 4012 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.205

🇹🇼 111.70.14.135

🇺🇸 65.49.1.170

🇨🇳 58.47.137.190

🇹🇷 45.15.41.70

🇯🇵 2a01:111:f403:dc05::3

🇮🇩 180.254.65.159

🇺🇸 173.236.251.231

🇺🇸 159.89.38.12

🇨🇳 140.237.48.55

🇩🇪 131.159.24.205

🇨🇳 125.74.55.217

🇺🇸 72.217.41.239

🇻🇳 42.117.67.250

🇰🇿 217.196.26.102

🇵🇰 202.141.254.254

🇳🇱 195.178.110.137

🇨🇳 182.43.235.218

🇺🇸 172.208.127.33

🇵🇭 119.92.170.34