JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.252.139.193

180.252.139.193 was found in our database!

This IP was reported 120 times. Confidence of Abuse is 0%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Cikarang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.252.139.193

Whois 180.252.139.193

IP Abuse Reports for 180.252.139.193:

This IP address has been reported a total of 120 times from 67 distinct sources. 180.252.139.193 was first reported on December 31st 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-10-12 19:48:00 (8 months ago)	$f2bV_matches	Brute-Force
🇬🇧 myintarweb	2025-10-11 03:15:04 (8 months ago)	180.252.139.193 - - [05/Oct/2025:15:56:52 +0100] 443 "GET /.git/ HTTP/1.1" 301 5493 "-" "Mozilla/5.0 ... show more 180.252.139.193 - - [05/Oct/2025:15:56:52 +0100] 443 "GET /.git/ HTTP/1.1" 301 5493 "-" "Mozilla/5.0 (X11; Linux x86_64)" ... show less	Hacking Bad Web Bot Web App Attack
🇪🇸 tutaim.com	2025-10-06 22:00:12 (8 months ago)	⛔ [07/10/25] This IP has been detected performing multiple attacks on websites (6 attempts blocked). ... show more ⛔ [07/10/25] This IP has been detected performing multiple attacks on websites (6 attempts blocked). Potential malicious activity. show less	FTP Brute-Force Brute-Force Web App Attack SSH
🇩🇪 hbrks	2025-10-06 14:07:47 (8 months ago)	2 attack(s) detected, such as these: {"event":"nginx_block","ip":"180.252.139.193","host":"wsh.nc.ma ... show more 2 attack(s) detected, such as these: {"event":"nginx_block","ip":"180.252.139.193","host":"wsh.nc.marche-be.com","request":"GET /.git/HEAD HTTP/1.1","user_agent":"Mozilla/5.0 (X11; Linux x86_64)","reason":"request:malformed","timestamp":"2025-10-06T14:07:47 00:00","logentry":"wsh.nc.marche-be.com 180.252.139.193 - - [06/Oct/2025:14:07:47 0000] GET /.git/HEAD HTTP/1.1 403 153 - Mozilla/5.0 (X11; Linux x86_64) - matched:request:malformed"} * Report Details : https://p4u.xyz/I2QUDJVQK29/1 IP Details *: https://p4u.xyz/I2QUDJVQK29/2 show less	Web Spam Hacking Bad Web Bot
🇳🇱 Site.eu	2025-10-06 13:46:41 (8 months ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 Mendip_Defender	2025-10-06 11:16:03 (8 months ago)	[06/Oct/2025:12:16:01.593545 +0100] aOOk8ewH2jMwdixlxczNKgAAAA8 180.252.139.193 38322 188.246.206.60 ... show more [06/Oct/2025:12:16:01.593545 +0100] aOOk8ewH2jMwdixlxczNKgAAAA8 180.252.139.193 38322 188.246.206.60 7081 [06/Oct/2025:12:16:02.298395 +0100] aOOk8uwH2jMwdixlxczNKwAAAAg 180.252.139.193 38330 188.246.206.60 7081 ... show less	Brute-Force
🇫🇮 Jordy	2025-10-06 11:06:20 (8 months ago)	06/Oct/2025:13:08:42.172525 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 06/Oct/2025:13:08:42.172525 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 180.252.139.193] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "vps.familievandemaat.nl"] [uri "/.git/"] [unique_id "aOOjOm0l40HBByeszpGszAAAAAM"] 06/Oct/2025:13:08:42.172525 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 180.252.139.193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVAL ... show less	Web App Attack
🇺🇸 RCS	2025-10-06 09:50:19 (8 months ago)	fail2ban apache-modsecurity ...	Bad Web Bot Web App Attack
🇪🇸 tutaim.com	2025-10-06 09:00:02 (8 months ago)	⛔ [06/10/25] This IP has been detected performing multiple attacks on websites (6 attempts blocked). ... show more ⛔ [06/10/25] This IP has been detected performing multiple attacks on websites (6 attempts blocked). Potential malicious activity. show less	FTP Brute-Force Brute-Force Web App Attack SSH
🇬🇧 Swiptly	2025-10-06 07:25:41 (8 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇫🇷 ✨	2025-10-06 07:10:02 (8 months ago)	Domain : todoparatuboda.com Rule : config 2025-10-06 07:08:48 152.53.151.170 GET /.git/ - 443 - 104. ... show more Domain : todoparatuboda.com Rule : config 2025-10-06 07:08:48 152.53.151.170 GET /.git/ - 443 - 104.23.175.223 HTTP/2 Mozilla/5.0 (X11; Linux x86_64) - todoparatuboda.com 404 8 0 5004 340 579 - 180.252.139.193 show less	Hacking SQL Injection
🇺🇸 octageeks.com	2025-10-06 04:08:29 (8 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇺🇸 kosada.com	2025-10-06 03:18:52 (8 months ago)	Web vulnerability probing: /.git/	Web App Attack
🇺🇸 thefoofighter	2025-10-06 02:02:29 (8 months ago)	[Mon Oct 06 02:02:28.823129 2025] [:error] [pid 2534438] [client 180.252.139.193:47386] [client 180. ... show more [Mon Oct 06 02:02:28.823129 2025] [:error] [pid 2534438] [client 180.252.139.193:47386] [client 180.252.139.193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sourcemodding.com"] [uri "/.git/"] [unique_id "aOMjNGMZCImH5jaU6nBu8AAAACA"] [Mon Oct 06 02:02:29.555993 2025] [:error] [pid 2534429] [client 180.252.139.193:55597] [client 180.252.139.193] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP ... show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2025-10-05 21:59:03 (8 months ago)	Auto-ban: >500 bad req/min on 2025-10-04	Hacking Web App Attack SSH

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 43.159.140.236

🇧🇪 185.132.187.242

🇮🇹 147.45.51.138

🇮🇳 115.243.248.82

🇮🇩 114.141.59.195

🇲🇩 91.208.197.64

🇷🇺 31.173.67.115

🇨🇴 200.10.29.235

🇻🇳 180.93.249.92

🇩🇪 178.105.172.206

🇸🇬 172.217.43.157

🇺🇸 97.211.156.184

🇬🇷 79.129.165.192

🇺🇸 66.132.195.121

🇰🇷 210.217.96.217

🇩🇪 194.187.176.189

🇭🇺 185.203.185.108

🇺🇸 172.68.175.104

🇺🇸 162.216.150.229

🇭🇰 118.26.39.178