JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

180.252.80.87

Activity Trending Down

Abuse Confidence Score

12% Caution

68 reports

49 reporters · latest 1 week ago

ISP: PT TELKOM INDONESIA
Usage Type: Fixed Line ISP
ASN: AS7713
Domain Name: telkom.co.id
Country: 🇮🇩 Indonesia
City: Depok, West Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

68 from 49 distinct reporters

First reported

July 10th 2021

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 1 🇺🇸 United States of America 1

Most common categories Bad Web Bot 2 Hacking 1 Web App Attack 1 Exploited Host 1 DDoS Attack 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-03 21:15:03 UTC · (1 week ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/8597/form_key/dkpahvvliFocPaNR/ \| UA: Mozilla/5.0 (Windows; U; Windows NT 6.2) AppleWebKit/531.16.5 (KHTML, like Gecko) Version/4.1 Safari/531.16.5 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-10-19 19:35:56 UTC · (3 weeks ago)	HTTP application-layer DoS / botnet traffic from 180.252.80.87: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 鬼影233	2026-08-31 04:08:57 UTC · (2 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇷🇺 Agrohim	2025-12-02 00:18:56 UTC · (11 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇷🇺 Agrohim	2025-11-28 00:54:11 UTC · (11 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇹🇷 rtbh.com.tr	2025-11-23 20:10:05 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-11-22 22:29:42 UTC · (11 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/180.252.80.87	SSH
🇺🇸 bigscoots.com	2025-11-22 06:20:30 UTC · (11 months ago)	(sshd) Failed SSH login from 180.252.80.87 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 22 00:04:46 16321 sshd[21522]: Invalid user leonardo from 180.252.80.87 port 53642 Nov 22 00:04:48 16321 sshd[21 ... show more (sshd) Failed SSH login from 180.252.80.87 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 22 00:04:46 16321 sshd[21522]: Invalid user leonardo from 180.252.80.87 port 53642 Nov 22 00:04:48 16321 sshd[21522]: Failed password for invalid user leonardo from 180.252.80.87 port 53642 ssh2 Nov 22 00:19:53 16321 sshd[24291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.80.87 user=root Nov 22 00:19:55 16321 sshd[24291]: Failed password for root from 180.252.80.87 port 56500 ssh2 Nov 22 00:20:12 16321 sshd[24369]: Invalid user dolphinscheduler from 180.252.80.87 port 35802 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-22 05:17:09 UTC · (11 months ago)	180.252.80.87 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 21 13:26:53 12283 sshd[28788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more 180.252.80.87 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 21 13:26:53 12283 sshd[28788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.247.41 user=root Nov 21 13:26:55 12283 sshd[28788]: Failed password for root from 49.207.247.41 port 41740 ssh2 Nov 21 16:06:33 12283 sshd[8268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.80.27.149 user=root Nov 21 16:06:35 12283 sshd[8268]: Failed password for root from 3.80.27.149 port 48956 ssh2 Nov 21 16:13:35 12283 sshd[8779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.80.87 user=root IP Addresses Blocked: 49.207.247.41 (IN/India/broadband.actcorp.in) 3.80.27.149 (US/United States/ec2-3-80-27-149.compute-1.amazonaws.com) show less	Brute-Force SSH
🇩🇪 Ad0lar	2025-11-22 04:41:38 UTC · (11 months ago)	ports, 22/24H:1/7D:1	Port Scan
🇺🇸 bigscoots.com	2025-11-22 03:59:37 UTC · (11 months ago)	(sshd) Failed SSH login from 180.252.80.87 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 21 21:46:30 16361 sshd[10178]: Invalid user deploy from 180.252.80.87 port 55472 Nov 21 21:46:31 16361 sshd[1017 ... show more (sshd) Failed SSH login from 180.252.80.87 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 21 21:46:30 16361 sshd[10178]: Invalid user deploy from 180.252.80.87 port 55472 Nov 21 21:46:31 16361 sshd[10178]: Failed password for invalid user deploy from 180.252.80.87 port 55472 ssh2 Nov 21 21:51:52 16361 sshd[10683]: Did not receive identification string from 180.252.80.87 port 49728 Nov 21 21:59:17 16361 sshd[11321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.80.87 user=root Nov 21 21:59:18 16361 sshd[11321]: Failed password for root from 180.252.80.87 port 34408 ssh2 show less	Brute-Force SSH
Anonymous	2025-11-22 03:46:45 UTC · (11 months ago)	Nov 22 03:46:44 f2b auth.info sshd[43917]: Invalid user deploy from 180.252.80.87 port 47492 Nov 22 03:46:44 f2b auth.info sshd[43917]: Failed password for invalid user deploy from 180.252.80.87 port 47492 ssh2 Nov 22 03:46:44 f2b auth.info sshd[4391 ... show more Nov 22 03:46:44 f2b auth.info sshd[43917]: Invalid user deploy from 180.252.80.87 port 47492 Nov 22 03:46:44 f2b auth.info sshd[43917]: Failed password for invalid user deploy from 180.252.80.87 port 47492 ssh2 Nov 22 03:46:44 f2b auth.info sshd[43917]: Disconnected from invalid user deploy 180.252.80.87 port 47492 [preauth] ... show less	Brute-Force SSH
🇩🇪 djc82k	2025-11-22 03:33:32 UTC · (11 months ago)	2025-11-22T04:19:51.071984+01:00 ns402 sshd[448946]: Disconnected from authenticating user root 180.252.80.87 port 42434 [preauth] 2025-11-22T04:24:38.046673+01:00 ns402 sshd[449930]: Connection reset by 180.252.80.87 port 54776 [preauth] 2025-11-22T ... show more 2025-11-22T04:19:51.071984+01:00 ns402 sshd[448946]: Disconnected from authenticating user root 180.252.80.87 port 42434 [preauth] 2025-11-22T04:24:38.046673+01:00 ns402 sshd[449930]: Connection reset by 180.252.80.87 port 54776 [preauth] 2025-11-22T04:25:13.125126+01:00 ns402 sshd[450072]: Connection closed by 180.252.80.87 port 59484 [preauth] 2025-11-22T04:25:42.104148+01:00 ns402 sshd[450164]: error: kex_exchange_identification: read: Connection reset by peer 2025-11-22T04:25:42.104561+01:00 ns402 sshd[450164]: Connection reset by 180.252.80.87 port 52726 2025-11-22T04:27:09.599997+01:00 ns402 sshd[450432]: Connection reset by 180.252.80.87 port 60416 [preauth] 2025-11-22T04:27:39.025648+01:00 ns402 sshd[450532]: Connection reset by 180.252.80.87 port 54392 [preauth] 2025-11-22T04:29:10.050083+01:00 ns402 sshd[450852]: Connection reset by 180.252.80.87 port 51134 [preauth] 2025-11-22T04:31:33.108570+01:00 ns402 sshd[451340]: Connection reset by 180.252.80.87 port 42598 [preauth] 20 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-22 03:26:30 UTC · (11 months ago)	180.252.80.87 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 21 21:26:15 18024 sshd[11140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more 180.252.80.87 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 21 21:26:15 18024 sshd[11140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.184.51.110 user=root Nov 21 21:23:35 18024 sshd[10908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.80.87 user=root Nov 21 21:23:37 18024 sshd[10908]: Failed password for root from 180.252.80.87 port 46346 ssh2 Nov 21 21:21:25 18024 sshd[10750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.150.103.210 user=root Nov 21 21:21:27 18024 sshd[10750]: Failed password for root from 107.150.103.210 port 57670 ssh2 IP Addresses Blocked: 180.184.51.110 (CN/China/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-22 03:06:03 UTC · (11 months ago)	(sshd) Failed SSH login from 180.252.80.87 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 21 20:56:35 19276 sshd[26348]: Invalid user ubuntu from 180.252.80.87 port 58014 Nov 21 20:56:37 19276 sshd[2634 ... show more (sshd) Failed SSH login from 180.252.80.87 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Nov 21 20:56:35 19276 sshd[26348]: Invalid user ubuntu from 180.252.80.87 port 58014 Nov 21 20:56:37 19276 sshd[26348]: Failed password for invalid user ubuntu from 180.252.80.87 port 58014 ssh2 Nov 21 20:59:57 19276 sshd[26599]: Invalid user deepesh from 180.252.80.87 port 32936 Nov 21 20:59:59 19276 sshd[26599]: Failed password for invalid user deepesh from 180.252.80.87 port 32936 ssh2 Nov 21 21:05:52 19276 sshd[27114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.80.87 user=root show less	Brute-Force SSH

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 157.10.90.5

🇷🇺 146.158.110.158

🇮🇳 103.191.204.229

🇺🇸 100.29.192.113

🇺🇸 66.132.172.124

🇩🇪 23.132.164.184

🇨🇳 222.210.35.197

🇻🇳 210.245.30.140

🇮🇩 202.58.73.162

🇺🇸 195.184.76.82

🇺🇸 195.184.76.70

🇮🇩 182.253.79.194

🇳🇱 169.150.196.20

🇨🇳 121.29.149.14

🇦🇺 103.150.248.150

🇮🇳 103.100.7.229

🇧🇬 79.124.62.230

🇲🇾 60.53.35.213

🇹🇳 41.230.170.241

🇺🇸 195.184.76.205