JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

180.252.80.161

Neutral Activity

Abuse Confidence Score

0% Low Risk

101 reports

56 reporters · latest 2 months ago

ISP: PT TELKOM INDONESIA
Usage Type: Fixed Line ISP
ASN: AS7713
Domain Name: telkom.co.id
Country: 🇮🇩 Indonesia
City: Depok, West Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

180.252.80.161 has been reported 101 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

101 from 56 distinct reporters

First reported

March 26th 2022

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 David Koswari	2026-08-24 05:27:00 UTC · (2 months ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 kosada.com	2026-07-21 06:27:15 UTC · (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇦 KIsmay	2026-02-25 14:18:12 UTC · (8 months ago)	Feb 25 08:45:35 www4 WPAudit[1865626]: 180.252.80.161 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" vhsport:Vhsport@[_host_] FAIL Feb 25 08:46:30 www4 WPAudit[1865624]: 18 ... show more Feb 25 08:45:35 www4 WPAudit[1865626]: 180.252.80.161 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" vhsport:Vhsport@[_host_] FAIL Feb 25 08:46:30 www4 WPAudit[1865624]: 180.252.80.161 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" vhsport:vhsport2020 FAIL Feb 25 08:53:39 www4 WPAudit[1865624]: 180.252.80.161 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" vhsport:vhsport_ FAIL Feb 25 09:08:51 www4 WPAudit[1867256]: 180.252.80.161 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" client:client FAIL Feb 25 09:18:12 www4 WPAudit[1867821]: 180.252.80.161 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" testuser: ... show less	Brute-Force Web App Attack
🇩🇪 outputblog.de	2026-02-25 03:39:05 UTC · (8 months ago)	apache-wp-probephp	Port Scan Hacking Brute-Force
🇺🇸 Rip	2026-02-25 01:34:32 UTC · (8 months ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇺🇸 mind5t0rm	2026-02-24 23:03:13 UTC · (8 months ago)	(WPLOGIN,XMLRPC) Login failure/trigger from 180.252.80.161 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 180.252.80.161 - - [25/Feb/2026:05:29:00 +0700] "GET /wp-login.php HTTP/2.0" 200 2356 "-" "Mo ... show more (WPLOGIN,XMLRPC) Login failure/trigger from 180.252.80.161 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 180.252.80.161 - - [25/Feb/2026:05:29:00 +0700] "GET /wp-login.php HTTP/2.0" 200 2356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 180.252.80.161 - - [25/Feb/2026:05:55:01 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 180.252.80.161 - - [25/Feb/2026:06:03:12 +0700] "GET /wp-login.php HTTP/2.0" 200 2356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Port Scan
🇺🇸 mind5t0rm	2026-02-24 21:58:15 UTC · (8 months ago)	(WPLOGIN) WP Login Attack 180.252.80.161 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 180.252.80.161 - - [25/Feb/2026:04:27:07 +0700] "GET /wp-login.php HTTP/2.0" 200 2356 "-" "Mozilla/5.0 (Windows ... show more (WPLOGIN) WP Login Attack 180.252.80.161 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 180.252.80.161 - - [25/Feb/2026:04:27:07 +0700] "GET /wp-login.php HTTP/2.0" 200 2356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 180.252.80.161 - - [25/Feb/2026:04:28:21 +0700] "GET /wp-login.php HTTP/2.0" 200 3211 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 180.252.80.161 - - [25/Feb/2026:04:58:09 +0700] "GET /wp-login.php HTTP/2.0" 200 2356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Port Scan
🇨🇿 ddw	2026-02-24 20:44:20 UTC · (8 months ago)	WordPress Brute Force Attack.	Hacking Brute-Force Web App Attack
🇩🇪 stinpriza	2026-02-24 13:19:19 UTC · (8 months ago)	Web App Attack	Web App Attack
🇩🇪 Ba-Yu	2026-02-24 12:59:41 UTC · (8 months ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇪🇸 masterguru	2026-02-24 08:25:35 UTC · (8 months ago)	(wplogin) Failed WordPress login from 180.252.80.161 (ID/Indonesia/-): 5 in the last 3600 secs (0-122)	Hacking
🇩🇪 todix	2026-02-24 06:52:11 UTC · (8 months ago)	Wordpress brute force or spam attempt from 180.252.80.161	Brute-Force
🇩🇪 Marc	2026-02-24 03:23:16 UTC · (8 months ago)		Brute-Force
Anonymous	2026-02-24 03:18:59 UTC · (8 months ago)	[Tue Feb 24 01:58:37.492598 2026] [authz_core:error] [pid 265258:tid 265310] [client 180.252.80.161:60748] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Tue Feb 24 03:15:19.570082 2026] [authz_core:error] [pid ... show more [Tue Feb 24 01:58:37.492598 2026] [authz_core:error] [pid 265258:tid 265310] [client 180.252.80.161:60748] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Tue Feb 24 03:15:19.570082 2026] [authz_core:error] [pid 265258:tid 265290] [client 180.252.80.161:52038] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Tue Feb 24 03:34:57.602958 2026] [authz_core:error] [pid 265258:tid 265305] [client 180.252.80.161:50800] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Tue Feb 24 04:18:57.605355 2026] [authz_core:error] [pid 265258:tid 265292] [client 180.252.80.161:42294] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php ... show less	Brute-Force Web App Attack
🇺🇸 mind5t0rm	2026-02-24 03:05:39 UTC · (8 months ago)	(XMLRPC,WPLOGIN) Login failure/trigger from 180.252.80.161 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 180.252.80.161 - - [24/Feb/2026:09:20:06 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozi ... show more (XMLRPC,WPLOGIN) Login failure/trigger from 180.252.80.161 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 180.252.80.161 - - [24/Feb/2026:09:20:06 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 180.252.80.161 - - [24/Feb/2026:10:02:45 +0700] "GET /wp-login.php HTTP/2.0" 200 2259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 180.252.80.161 - - [24/Feb/2026:10:05:35 +0700] "GET /wp-login.php HTTP/2.0" 200 2259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Port Scan

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 186.250.240.55

🇳🇱 185.223.235.45

🇺🇸 147.185.132.44

🇺🇸 144.225.124.188

🇺🇸 103.4.248.73

🇷🇺 31.135.231.246

🇳🇱 204.76.203.214

🇳🇱 185.242.226.97

🇳🇱 185.242.226.87

🇻🇳 160.191.89.208

🇩🇪 64.89.161.160

🇮🇱 51.4.97.106

🇳🇱 45.148.10.141

🇨🇦 40.233.122.58

🇱🇧 213.204.70.62

🇩🇪 194.187.176.223

🇬🇧 193.163.125.92

🇸🇦 188.48.208.36

🇬🇧 185.247.137.142

🇨🇴 181.78.238.133