JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.252.89.69

180.252.89.69 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 4%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Ciampea, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.252.89.69

Whois 180.252.89.69

IP Abuse Reports for 180.252.89.69:

This IP address has been reported a total of 21 times from 14 distinct sources. 180.252.89.69 was first reported on February 16th 2022, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 securejdprop	2026-07-13 08:53:31 (23 hours ago)	This IP was detected by CrowdSec triggering custom/vpatch-block-email-protection-uri. WAF block: cus ... show more This IP was detected by CrowdSec triggering custom/vpatch-block-email-protection-uri. WAF block: custom/vpatch-block-email-protection-uri from 180.252.89.69 (172.18.0.4) show less	Hacking
🇨🇿 lp	2025-10-16 07:50:33 (8 months ago)	SSH Brute force: 4 attempts were recorded from 180.252.89.69 2025-10-16T08:48:31+02:00 Invalid user ... show more SSH Brute force: 4 attempts were recorded from 180.252.89.69 2025-10-16T08:48:31+02:00 Invalid user proxyuser from 180.252.89.69 port 55450 2025-10-16T08:51:50+02:00 User backup from 180.252.89.69 not allowed because none of user's groups are listed in AllowGroups 2025-10-16T08:55:08+02:00 Invalid user ahmed from 180.252.89.69 port 49594 2025-10-16T08:58:24+02:00 Invalid user administrator from 180.252.89.69 port 36318 show less	Brute-Force SSH
Anonymous	2025-10-16 07:00:01 (8 months ago)	Oct 16 08:49:59 dell sshd[32535]: Failed password for backup from 180.252.89.69 port 39730 ssh2	SSH
🇩🇪 mp-development.de	2025-10-16 07:00:00 (8 months ago)	Oct 16 08:56:43 main-angler sshd[2126246]: Invalid user administrator from 180.252.89.69 port 57928 ... show more Oct 16 08:56:43 main-angler sshd[2126246]: Invalid user administrator from 180.252.89.69 port 57928 Oct 16 08:56:45 main-angler sshd[2126246]: Failed password for invalid user administrator from 180.252.89.69 port 57928 ssh2 Oct 16 09:00:00 main-angler sshd[2128528]: Invalid user administrator from 180.252.89.69 port 39878 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2025-10-16 06:57:04 (8 months ago)	Oct 16 00:57:00 b146-51 sshd[1096141]: Invalid user roberto from 180.252.89.69 port 56912 Oct 16 00: ... show more Oct 16 00:57:00 b146-51 sshd[1096141]: Invalid user roberto from 180.252.89.69 port 56912 Oct 16 00:57:00 b146-51 sshd[1096141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.89.69 Oct 16 00:57:02 b146-51 sshd[1096141]: Failed password for invalid user roberto from 180.252.89.69 port 56912 ssh2 ... show less	Brute-Force SSH
🇩🇪 Arsh	2025-10-16 06:55:01 (8 months ago)	2025-10-16T06:51:46.837539+00:00 v2202502255267314709 sshd[2412574]: pam_unix(sshd:auth): authentica ... show more 2025-10-16T06:51:46.837539+00:00 v2202502255267314709 sshd[2412574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.89.69 user=root 2025-10-16T06:51:48.330956+00:00 v2202502255267314709 sshd[2412574]: Failed password for root from 180.252.89.69 port 42824 ssh2 2025-10-16T06:54:59.725810+00:00 v2202502255267314709 sshd[2419347]: Invalid user roberto from 180.252.89.69 port 37664 2025-10-16T06:54:59.729261+00:00 v2202502255267314709 sshd[2419347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.89.69 2025-10-16T06:55:01.381786+00:00 v2202502255267314709 sshd[2419347]: Failed password for invalid user roberto from 180.252.89.69 port 37664 ssh2 ... show less	Brute-Force SSH
🇩🇪 Ariazonaa	2025-10-16 06:53:50 (8 months ago)	SSH brute-force attempt detected on NTP	Brute-Force SSH
🇨🇦 hpg	2025-10-16 06:52:23 (8 months ago)	Oct 16 19:51:08 buh sshd-session[2915436]: Invalid user surya from 180.252.89.69 port 42176	Brute-Force SSH
🇩🇪 formality	2025-10-16 06:50:48 (8 months ago)	Invalid user odoo12 from 180.252.89.69 port 56794	Brute-Force SSH
🇺🇸 amit177	2025-10-16 06:50:31 (8 months ago)		Brute-Force SSH
🇺🇸 bigscoots.com	2025-10-16 06:47:29 (8 months ago)	180.252.89.69 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 180.252.89.69 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 16 01:34:11 13832 sshd[28073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.89.225 user=root Oct 16 01:34:13 13832 sshd[28073]: Failed password for root from 180.252.89.225 port 39238 ssh2 Oct 16 01:47:08 13832 sshd[29015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.89.69 user=root Oct 16 01:47:09 13832 sshd[29015]: Failed password for root from 180.252.89.69 port 53034 ssh2 Oct 16 01:43:54 13832 sshd[28720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.252.89.225 user=root IP Addresses Blocked: 180.252.89.225 (ID/Indonesia/-) show less	Brute-Force SSH
🇪🇸 DXC-0	2025-06-13 03:03:12 (1 year ago)	Multiple attacks on Honeypot servers	Web Spam Hacking Brute-Force Web App Attack
🇪🇸 DXC-0	2025-06-12 03:02:50 (1 year ago)	Multiple attacks on Honeypot servers	Web Spam Hacking Brute-Force Web App Attack
🇪🇸 DXC-0	2025-06-11 03:02:33 (1 year ago)	Multiple attacks on Honeypot servers	Web Spam Hacking Brute-Force Web App Attack
🇪🇸 DXC-0	2025-06-10 03:02:23 (1 year ago)	Multiple attacks on Honeypot servers	Web Spam Hacking Brute-Force Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 203.55.131.5

🇨🇱 179.57.170.71

🇨🇳 124.92.80.242

🇺🇸 91.230.168.191

🇺🇸 52.176.211.73

🇺🇸 216.218.206.69

🇺🇸 152.32.207.42

🇷🇺 87.250.9.98

🇫🇷 85.217.140.9

🇺🇸 81.30.98.66

🇷🇸 212.200.182.62

🇨🇳 183.128.216.179

🇺🇸 162.216.150.31

🇩🇪 139.59.146.150

🇲🇾 115.135.197.29

🇹🇷 95.9.220.99

🇲🇽 68.167.136.56

🇺🇸 23.98.142.190

🇩🇪 150.241.113.163

🇨🇳 120.211.138.165