AbuseIPDB » 180.251.182.196
180.251.182.196
This IP was reported 11 times. Confidence of
Abuse
is 0% : ?
ISP
PT TELKOM INDONESIA
Usage Type
Fixed Line ISP
ASN
AS7713
Domain Name
telkom.co.id
Country
🇮🇩
Indonesia
City
Jakarta, Jakarta
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 180.251.182.196 :
This IP address has been reported a total of
11
times from
9 distinct
sources.
180.251.182.196 was first reported on
August 18th 2024 , and the most recent report was
2 months ago
Old Reports:
The most recent abuse report for this IP address is from
2 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇱
EGP Abuse Dept
2026-04-21 14:45:48
(2 months ago)
Unsolicited connection to port 5900
Port Scan
Hacking
🇮🇩
schedules.run
2026-04-05 08:17:09
(2 months ago)
Web Spam
2024-11-07 20:28:54
(1 year ago)
DNS Compromise
DDoS Attack
🇮🇩
Burayot
2024-08-18 22:33:49
(1 year ago)
LF_APACHE_403: 180.251.182.196 (ID/Indonesia/-), more than 10 Apache 403 hits in the last 3600 secs
Web App Attack
🇺🇸
TPI-Abuse
2024-08-18 15:45:26
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 180.251.182.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 180.251.182.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 18 11:45:08.854941 2024] [security2:error] [pid 18677:tid 18677] [client 180.251.182.196:28749] [client 180.251.182.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srich.com"] [uri "/.env"] [unique_id "ZsIXBFwcE8jo42A6ySeIUAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2024-08-18 15:29:52
(1 year ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2024-08-18 13:07:38
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 180.251.182.196 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 180.251.182.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 18 09:07:22.845734 2024] [security2:error] [pid 25548:tid 25548] [client 180.251.182.196:7953] [client 180.251.182.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanmetermailing.com"] [uri "/.env"] [unique_id "ZsHyCqiwbZImSKT3wNOWegAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2024-08-18 11:20:20
(1 year ago)
739 requests to *.env
Brute-Force
Bad Web Bot
🇮🇩
Burayot
2024-08-18 10:54:36
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 180.251.182.196 (ID/Indonesia/-): 2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 180.251.182.196 (ID/Indonesia/-): 2 in the last 3600 secs
show less
Web App Attack
🇩🇪
piticu iuli
2024-08-18 10:41:06
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 180.251.182.196 (ID/Indonesia/-)
SQL Injection
2024-08-18 10:30:55
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: