AbuseIPDB » 180.251.229.182

180.251.229.182 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 61%: ?

61%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
Domain Name	telkom.co.id
Country	Indonesia
City	Jakarta, Jakarta

Report 180.251.229.182

Whois 180.251.229.182

IP Abuse Reports for 180.251.229.182:

This IP address has been reported a total of 51 times from 22 distinct sources. 180.251.229.182 was first reported on November 12th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ds6.net	2024-11-21 03:50:35 (2 weeks ago)	Blocked by CSF Firewall. Reason: lfd: (mod_security) mod_security (id:920340) triggered by 180.251.2 ... show moreBlocked by CSF Firewall. Reason: lfd: (mod_security) mod_security (id:920340) triggered by 180.251.229.182 (ID/Indonesia/-): 5 in the last 3600 secs - Wed Nov 13 17:03:32 2024 show less	Hacking
rtbh.com.tr	2024-11-14 20:53:19 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
xyz.rip	2024-11-14 18:57:34 (3 weeks ago)	WAF Violation...	Hacking Web App Attack
taivas.nl	2024-11-14 05:32:33 (3 weeks ago)	Many_bad_calls	Web App Attack
Aetherweb Ark	2024-11-14 00:12:50 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 180.251.229.182 (ID/Indonesia/-): N in the last ... show more(mod_security) mod_security (id:240335) triggered by 180.251.229.182 (ID/Indonesia/-): N in the last X secs show less	Web App Attack
Anonymous	2024-11-14 00:10:40 (3 weeks ago)	Multiple unauthorized attempt to access to non-existent path	Web App Attack
Swiptly	2024-11-13 22:51:16 (3 weeks ago)	WordPress xmlrpc spam or enumeration ...	Web Spam Bad Web Bot Web App Attack
rtbh.com.tr	2024-11-13 20:53:19 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
TPI-Abuse	2024-11-13 20:41:42 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 180.251.229.182 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:210492) triggered by 180.251.229.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 15:41:28.951193 2024] [security2:error] [pid 6715:tid 6715] [client 180.251.229.182:62905] [client 180.251.229.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chicagoinquirer.com"] [uri "/.env"] [unique_id "ZzUO-NcZ36DRSAsVKj8xxQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Burayot	2024-11-13 17:51:31 (3 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 180.251.229.182 (ID/Indonesia/-): 1 ... show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 180.251.229.182 (ID/Indonesia/-): 1 in the last 3600 secs show less	Web App Attack
TPI-Abuse	2024-11-13 16:31:19 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 180.251.229.182 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:225170) triggered by 180.251.229.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 11:31:03.462562 2024] [security2:error] [pid 2113:tid 2113] [client 180.251.229.182:63872] [client 180.251.229.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|baliaccommodationpadangpadang.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "baliaccommodationpadangpadang.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZzTUR0GgLdgK-LVdEj5kyAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-13 16:04:32 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 180.251.229.182 (-): 1 in the last 300 secs; Po ... show more(mod_security) mod_security (id:225170) triggered by 180.251.229.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 11:04:16.601904 2024] [security2:error] [pid 21370:tid 21370] [client 180.251.229.182:63378] [client 180.251.229.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|persnicketyinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "persnicketyinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZzTOABGzWG9LnnNex0YPzgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
BlueWire Hosting	2024-11-13 15:10:05 (3 weeks ago)	Detected as a bad bot	Bad Web Bot
wnbhosting.dk	2024-11-13 14:30:40 (3 weeks ago)	WP xmlrpc [2024-11-13T15:30:40+01:00]	Hacking Web App Attack
Anonymous	2024-11-13 13:56:25 (3 weeks ago)		Bad Web Bot Web App Attack