AbuseIPDB » 180.252.85.74
180.252.85.74
This IP was reported 9 times. Confidence of
Abuse
is 7% : ?
ISP
PT TELKOM INDONESIA
Usage Type
Fixed Line ISP
ASN
AS7713
Domain Name
telkom.co.id
Country
🇮🇩
Indonesia
City
Depok, West Java
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 180.252.85.74 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
180.252.85.74 was first reported on
August 29th 2021 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
kosada.com
2026-07-19 11:50:43
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
securejdprop
2026-06-29 03:34:28
(1 month ago)
This IP was detected by CrowdSec triggering custom/vpatch-block-old-chrome. WAF block: custom/vpatch ...
show more
This IP was detected by CrowdSec triggering custom/vpatch-block-old-chrome. WAF block: custom/vpatch-block-old-chrome from 180.252.85.74 (172.18.0.5)
show less
Hacking
🇩🇪
Packets-Decreaser.NET
2025-09-11 13:23:53
(11 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-08-21 16:42:30
(1 year ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
2025-08-20 09:42:13
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇮🇩
hermawan
2024-02-06 09:33:33
(2 years ago)
[Tue Feb 06 16:33:29.935986 2024] [security2:error] [pid 923836:tid 131491256337984] [client 180.252 ...
show more
[Tue Feb 06 16:33:29.935986 2024] [security2:error] [pid 923836:tid 131491256337984] [client 180.252.85.74:57749] [client 180.252.85.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)<[^0-9<>A-Z_a-z]*(?:[^\\\\s\\\\v\\"'<>]*:)?[^0-9<>A-Z_a-z]*[^0-9A-Z_a-z]*?(?:s[^0-9A-Z_a-z]*?(?:c[^0-9A-Z_a-z]*?r[^0-9A-Z_a-z]*?i[^0-9A-Z_a-z]*?p[^0-9A-Z_a-z]*?t|t[^0-9A-Z_a-z]*?y[^0-9A-Z_a-z]*?l[^0-9A-Z_a-z]*?e|v[^0-9A-Z_a-z]*?g|e[^0-9A-Z_a-z]*?t[^0-9> ..." at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "332"] [id "941161"] [msg "NoScript XSS InjectionChecker: HTML Injection"] [data "Matched Data: <link found within REQUEST_FILENAME: /index.php/component/tags/tag/<link rel= request_line = GET /index.php/component/tags/tag/%3Clink%20rel= HTTP/2.0"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0-rc2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "paranoia-level/1"]
...
show less
Hacking
Web App Attack
🇩🇪
www.blocklist.de
2021-09-10 11:01:59
(4 years ago)
Lines containing failures of 180.252.85.74 (max 1000)
........
----------------------------------- ...
show more
Lines containing failures of 180.252.85.74 (max 1000)
........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=180.252.85.74
show less
FTP Brute-Force
Hacking
🇬🇧
oppidans.net
2021-08-31 11:13:46
(4 years ago)
Aug 31 15:13:44 ns3092206 kernel: [2821170.083440] [IPTABLES REFUSED] IN=eno1 OUT= MAC=a4:bf:01:23:8 ...
show more
Aug 31 15:13:44 ns3092206 kernel: [2821170.083440] [IPTABLES REFUSED] IN=eno1 OUT= MAC=a4:bf:01:23:86:16:40:ce:24:b2:7f:7c:08:00 SRC=180.252.85.74 DST=145.239.253.26 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=32522 DF PROTO=TCP SPT=50056 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
show less
Port Scan
Hacking
🇬🇧
pccs.uk
2021-08-29 11:45:57
(4 years ago)
180.252.85.74 IP detected, Autoreporting now..
Port Scan
Hacking
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: