180.252.134.60

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
73% Elevated
22 reports
16 reporters · latest 3 days ago
ISP
PT TELKOM INDONESIA
Usage Type
Fixed Line ISP
ASN
AS7713
Domain Name
telkom.co.id
Country
🇮🇩 Indonesia
City
Bekasi, West Java
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 11 🇩🇪 Germany 5 🇵🇱 Poland 2
Most common categories Port Scan 19 Hacking 8 Brute-Force 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 drewf.ink
[09:16] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12) - no SMB2 support signaled
Hacking
🇺🇸 xclmp
Unauthorized connection attempts consistent with that of port probing and scanning from 180.252.134.60 were detected at 2026-11-12 05:42:24 UTC. Learn More: https://fia.project-furina.com/report/24383
Port Scan
🇫🇷 Coco Bongo
1794460825 - 11/12/2026 06:20:25 Host: 180.252.134.60/180.252.134.60 Port: 445 TCP Blocked ...
Port Scan
🇫🇷 JohnAtlas
Honeypot: connection attempt to unused port(s) 445/tcp on a server where these services do not exist. Automated firewall trap.
Port Scan Hacking
🇨🇦 Luhte
Unsolicited TCP connection from 180.252.134.60 to port 0 at 2026-11-11T22:27:20Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 3 Dionaea events.
Port Scan
🇩🇪 Luhte
Unsolicited TCP connection from 180.252.134.60 to port 0 at 2026-11-11T04:25:38Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan Hacking
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)
Hacking Brute-Force
🇫🇷 noi
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
Port Scan
Anonymous
Port Scan Brute-Force
🇫🇷 noi
honeypot proto=TCP dpt=445 flags=SYN hits=1 window=1h
Port Scan
🇩🇪 IP Analyzer
Unauthorized connection attempt from IP address 180.252.134.60 on Port 445(SMB)
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
Port Scan
🇹🇷 oalver
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_smb. Sources: honeypot. First seen: 2026-11-05. Risk score: 30/100.
Hacking Brute-Force
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇭 118.193.56.229
🇳🇱 193.47.62.97
🇦🇷 181.191.223.62
🇵🇸 178.214.80.90
🇩🇪 167.94.146.58
🇧🇩 103.126.218.219
🇸🇮 102.220.161.173
🇺🇸 54.204.4.243
🇺🇸 13.57.5.37
🇯🇵 172.70.123.118
🇯🇵 172.70.123.117
🇺🇸 136.67.58.4
🇩🇪 95.179.253.176
🇺🇸 78.105.199.93
🇩🇪 69.5.169.240
🇺🇸 50.6.202.250
🇺🇸 18.145.95.214
🇻🇪 200.75.103.69
🇳🇱 193.47.62.69
🇦🇷 186.18.220.21
feedback