JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.244.132.190

180.244.132.190 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 37%: ?

37%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Kedungwaru, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.244.132.190

Whois 180.244.132.190

IP Abuse Reports for 180.244.132.190:

This IP address has been reported a total of 20 times from 8 distinct sources. 180.244.132.190 was first reported on April 20th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 screwlooseit.com.au	2026-06-21 15:21:33 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/-	Web App Attack
🇳🇱 wlt-blocker	2026-06-21 13:48:03 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 11:40:08 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 07:40:01.601949 2026] [security2:error] [pid 16873:tid 16873] [client 180.244.132.190:4304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.244.132.190 (+1 hits since last alert)\|dvdmasters.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dvdmasters.com"] [uri "/xmlrpc.php"] [unique_id "ajfNkSCRWHaBTztyJngy3wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-06-21 10:15:04 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 10:06:42 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 06:06:28.984423 2026] [security2:error] [pid 18628:tid 18628] [client 180.244.132.190:28703] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.244.132.190 (+1 hits since last alert)\|interiorsolutions-stuart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "interiorsolutions-stuart.com"] [uri "/xmlrpc.php"] [unique_id "aje3pITiJAx8f80wBccODgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 09:27:30 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 05:27:23.838733 2026] [security2:error] [pid 2545:tid 2545] [client 180.244.132.190:25848] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.244.132.190 (+1 hits since last alert)\|diamondtrailerserv.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "diamondtrailerserv.com"] [uri "/xmlrpc.php"] [unique_id "ajeue6DIUHz8c312SHE-eAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 07:52:04 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 03:51:57.856552 2026] [security2:error] [pid 12758:tid 12758] [client 180.244.132.190:27454] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.244.132.190 (+1 hits since last alert)\|michelehoop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "michelehoop.com"] [uri "/xmlrpc.php"] [unique_id "ajeYHVP2vLfbWf169L9JQQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 04:16:12 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 00:16:06.798759 2026] [security2:error] [pid 29792:tid 29792] [client 180.244.132.190:26342] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.244.132.190 (+1 hits since last alert)\|gacstoday.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gacstoday.com"] [uri "/xmlrpc.php"] [unique_id "ajdlhoCuz8HkuBnx5LY0uQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 17:37:11 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 13:37:03.545464 2026] [security2:error] [pid 4245:tid 4245] [client 180.244.132.190:1780] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.244.132.190 (+1 hits since last alert)\|kadinisi.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kadinisi.org"] [uri "/xmlrpc.php"] [unique_id "ajbPv5qnxmKS7W8ZRlic9gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-20 15:01:21 (1 week ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 10:25:11 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 06:25:04.970026 2026] [security2:error] [pid 29996:tid 29996] [client 180.244.132.190:23451] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.244.132.190 (+1 hits since last alert)\|geriterry.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "geriterry.com"] [uri "/xmlrpc.php"] [unique_id "ajZqgL0pV9-VtqExTtOffgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-20 08:50:39 (1 week ago)	[redacted] 180.244.132.190 - - [20/Jun/2026:10:49:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 180.244.132.190 - - [20/Jun/2026:10:49:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" [redacted] 180.244.132.190 - - [20/Jun/2026:10:50:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 180.244.132.190 - - [20/Jun/2026:10:50:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 180.244.132.190 - - [20/Jun/2026:10:50:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 180.244.132.190 - - [20/Jun/2026:10:50:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 05:26:23 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.244.132.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 01:26:14.513615 2026] [security2:error] [pid 8976:tid 8976] [client 180.244.132.190:14326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.244.132.190 (+1 hits since last alert)\|redlitephotos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "redlitephotos.com"] [uri "/xmlrpc.php"] [unique_id "ajYkdk9EICFQJAV0LV-C7AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-20 03:51:12 (1 week ago)	[redacted] 180.244.132.190 - - [20/Jun/2026:05:50:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 180.244.132.190 - - [20/Jun/2026:05:50:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 180.244.132.190 - - [20/Jun/2026:05:50:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site53924073.com" [redacted] 180.244.132.190 - - [20/Jun/2026:05:50:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 180.244.132.190 - - [20/Jun/2026:05:51:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 180.244.132.190 - - [20/Jun/2026:05:51:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" ... show less	Hacking Web App Attack
Anonymous	2026-06-20 00:06:01 (1 week ago)	[redacted] 180.244.132.190 - - [20/Jun/2026:02:05:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "W ... show more [redacted] 180.244.132.190 - - [20/Jun/2026:02:05:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" [redacted] 180.244.132.190 - - [20/Jun/2026:02:05:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack/12.1; WordPress/6.4; http://site70133178.com" [redacted] 180.244.132.190 - - [20/Jun/2026:02:05:38 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" [redacted] 180.244.132.190 - - [20/Jun/2026:02:05:49 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack/12.0; WordPress/6.1; http://site21811864.com" [redacted] 180.244.132.190 - - [20/Jun/2026:02:06:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 2a00:1450:4010:c0a::12b

🇺🇸 2001:470:1:fb5::23a

🇫🇮 147.185.133.182

🇨🇳 117.185.86.210

🇨🇳 115.190.62.211

🇩🇪 69.5.169.120

🇵🇰 58.181.99.122

🇸🇬 47.82.55.85

🇸🇬 47.79.51.175

🇸🇰 46.229.238.131

🇺🇸 45.132.115.79

🇻🇪 200.59.191.75

🇭🇰 199.45.154.120

🇹🇼 198.235.24.67

🇺🇸 185.223.152.125

🇺🇦 185.104.44.167

🇺🇬 154.227.129.21

🇨🇳 123.245.85.133

🇸🇬 104.215.148.107

🇮🇩 103.160.213.137