This IP address has been reported a total of
3
times from
3 distinct
sources.
180.252.205.1 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Wed Jun 10 17:13:14.497308 2026] [security2:error] [pid 414597:tid 140689688909504] [client 180.252 ...
show more[Wed Jun 10 17:13:14.497308 2026] [security2:error] [pid 414597:tid 140689688909504] [client 180.252.205.1:35718] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (?i)^[a-z0-9\\\\-._]+$" against "TX:referer-hardening-plugin_domain_name" required. [file "/etc/modsecurity/coreruleset-4.26.0/plugins/referer-hardening-plugin/plugins/referer-hardening-before.conf"] [line "221"] [id "9524170"] [msg "Invalid domain name within Referer header"] [data " google.com, https Matched Data ARGS charset: - Matched Data TX.1: google.com, https found within Content-Type multipart form Matched Data: https://google.com, https://staklim-jatim.bmkg.go.id/index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-hari-hujan-di-provinsi-jawa-timur-tahun-2024 found within TX:referer-hardening-plugin_domain_name: google.com, https request_line = GET /images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Distibusi_Sifat_Hujan_Bulanan/Analisis_Distibusi_Sifat_Huj..."] [severity "CRITICAL"]
...
show less
Blocked by UFW (TCP on 9101)
Source port: 49357
TTL: 112
Packet length: 52
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 9101)
Source port: 49357
TTL: 112
Packet length: 52
TOS: 0x00
This report (for 180.252.205.1) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
ip112.20 . 2025-10-13 4:46:41 79959 [Warning] Access denied for user 'root'@'180.252.205.1' (using ...
show moreip112.20 . 2025-10-13 4:46:41 79959 [Warning] Access denied for user 'root'@'180.252.205.1' (using password: NO)
...
show less
DDoS Attack
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
SSH
Showing 1 to
3
of 3 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ