JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.252.238.99

180.252.238.99 was found in our database!

This IP was reported 369 times. Confidence of Abuse is 7%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.252.238.99

Whois 180.252.238.99

IP Abuse Reports for 180.252.238.99:

This IP address has been reported a total of 369 times from 185 distinct sources. 180.252.238.99 was first reported on September 13th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-05-13 04:00:43 (1 month ago)	User login to application from malicious IP 180.252.238.99.. Threat Score: 4.1/10 (MEDIUM). Confiden ... show more User login to application from malicious IP 180.252.238.99.. Threat Score: 4.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 75%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-13 03:00:39 (1 month ago)	User login to application from malicious IP 180.252.238.99.. Threat Score: 4.3/10 (MEDIUM). Confiden ... show more User login to application from malicious IP 180.252.238.99.. Threat Score: 4.3/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 80%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-13 02:00:39 (1 month ago)	User login to application from malicious IP 180.252.238.99.. Threat Score: 4.4/10 (MEDIUM). Confiden ... show more User login to application from malicious IP 180.252.238.99.. Threat Score: 4.4/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 80%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-13 01:00:44 (1 month ago)	User login to application from malicious IP 180.252.238.99.. Threat Score: 4.5/10 (MEDIUM). Confiden ... show more User login to application from malicious IP 180.252.238.99.. Threat Score: 4.5/10 (MEDIUM). Confidence: 55%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 80%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-13 00:00:13 (1 month ago)	User login to application from malicious IP 180.252.238.99.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 180.252.238.99.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-12 02:00:40 (1 month ago)	User login to application from malicious IP 180.252.238.99.. Threat Score: 3.7/10 (LOW). Confidence: ... show more User login to application from malicious IP 180.252.238.99.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-12 01:00:41 (1 month ago)	User login to application from malicious IP 180.252.238.99.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 180.252.238.99.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-12 00:00:47 (1 month ago)	User login to application from malicious IP 180.252.238.99.. Threat Score: 3.9/10 (LOW). Confidence: ... show more User login to application from malicious IP 180.252.238.99.. Threat Score: 3.9/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-05 16:08:31 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx02]	Brute-Force SSH
🇨🇦 nickto	2025-11-11 15:51:41 (7 months ago)		Brute-Force SSH
🇮🇳 92kmees	2025-10-07 19:17:52 (8 months ago)	Fail2Ban ban from SSH jail	Brute-Force SSH
🇩🇪 sf-noh.de	2025-10-05 20:54:07 (8 months ago)	Sep 15 10:14:20 email sshd[634422]: Invalid user oracle from 180.252.238.99 port 36846 Sep 15 10:19: ... show more Sep 15 10:14:20 email sshd[634422]: Invalid user oracle from 180.252.238.99 port 36846 Sep 15 10:19:37 email sshd[634993]: Invalid user myuser from 180.252.238.99 port 33458 Sep 15 10:24:47 email sshd[635509]: Invalid user srojas from 180.252.238.99 port 41476 ... show less	Brute-Force SSH
🇩🇪 qli.de	2025-10-05 20:54:06 (8 months ago)	Sep 15 10:14:20 email sshd[634422]: Invalid user oracle from 180.252.238.99 port 36846 Sep 15 10:19: ... show more Sep 15 10:14:20 email sshd[634422]: Invalid user oracle from 180.252.238.99 port 36846 Sep 15 10:19:37 email sshd[634993]: Invalid user myuser from 180.252.238.99 port 33458 Sep 15 10:24:47 email sshd[635509]: Invalid user srojas from 180.252.238.99 port 41476 ... show less	Brute-Force SSH
🇩🇪 sf-noh.de	2025-10-04 10:20:55 (8 months ago)	Sep 15 10:14:20 email sshd[634422]: Invalid user oracle from 180.252.238.99 port 36846 Sep 15 10:19: ... show more Sep 15 10:14:20 email sshd[634422]: Invalid user oracle from 180.252.238.99 port 36846 Sep 15 10:19:37 email sshd[634993]: Invalid user myuser from 180.252.238.99 port 33458 Sep 15 10:24:47 email sshd[635509]: Invalid user srojas from 180.252.238.99 port 41476 ... show less	Brute-Force SSH
🇩🇪 qli.de	2025-10-04 10:20:54 (8 months ago)	Sep 15 10:14:20 email sshd[634422]: Invalid user oracle from 180.252.238.99 port 36846 Sep 15 10:19: ... show more Sep 15 10:14:20 email sshd[634422]: Invalid user oracle from 180.252.238.99 port 36846 Sep 15 10:19:37 email sshd[634993]: Invalid user myuser from 180.252.238.99 port 33458 Sep 15 10:24:47 email sshd[635509]: Invalid user srojas from 180.252.238.99 port 41476 ... show less	Brute-Force SSH

Showing 1 to 15 of 369 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 124.31.105.50

🇮🇩 103.97.101.25

🇮🇱 95.35.29.192

🇫🇷 91.231.89.9

🇳🇱 91.92.40.237

🇬🇧 35.203.210.231

🇵🇰 223.123.21.191

🇭🇰 199.45.155.105

🇸🇬 172.217.43.150

🇩🇰 152.115.152.218

🇳🇱 81.19.216.67

🇧🇷 45.161.241.144

🇳🇱 35.204.174.69

🇻🇳 203.113.174.15

🇧🇪 198.235.24.217

🇳🇱 176.65.139.181

🇺🇸 162.216.149.243

🇺🇸 91.230.168.233

🇵🇱 87.251.64.141

🇨🇳 14.103.118.145