JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

180.252.91.201

Activity Trending Down

Abuse Confidence Score

35% Elevated

25 reports

22 reporters · latest 1 week ago

ISP: PT TELKOM INDONESIA
Usage Type: Fixed Line ISP
ASN: AS7713
Domain Name: telkom.co.id
Country: 🇮🇩 Indonesia
City: Depok, West Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

25 from 22 distinct reporters

First reported

June 16th 2022

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇫🇷 France 5 🇳🇱 Netherlands 2

Most common categories Web App Attack 16 Brute-Force 12 Bad Web Bot 4 Hacking 4

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-05 01:15:04 UTC · (1 week ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Catalog Search Fake Parameter Blocked: /catalogsearch/result/?mode=list&product_vc_type=99&q=nec+np403&screensize=20%2C24%2C46 \| UA: Mozilla/5.0 (Windows NT 5.2) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/43.0.894.0 Safari/535.1 \| (Magento Site) show less	Hacking Bad Web Bot
🇫🇮 abdubhai	2026-09-26 11:25:16 UTC · (1 month ago)	180.252.91.201 - - [26/Sep/2026: ...	Brute-Force
🇩🇪 grassau.com	2026-09-26 07:25:11 UTC · (1 month ago)	(wordpress) Failed wordpress login from 180.252.91.201 (ID/Indonesia/West Java/Bogor/-)	Brute-Force
🇫🇷 dynamix	2026-09-25 13:34:46 UTC · (1 month ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-09-25 04:59:25 UTC · (1 month ago)	(wordpress) Failed wordpress login from 180.252.91.201 (ID/Indonesia/-)	Brute-Force
🇳🇱 debestelapp	2026-09-25 01:45:09 UTC · (1 month ago)		Web App Attack
🇫🇷 Kenshin869	2026-09-24 23:40:54 UTC · (1 month ago)	Wordpress unauthorized access attempt	Brute-Force
Anonymous	2026-09-24 14:01:41 UTC · (1 month ago)	[redacted] 180.252.91.201 - - [24/Sep/2026:16:00:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 180.252.91.201 - - [24/Sep/2026:16:00:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/13. ... show more [redacted] 180.252.91.201 - - [24/Sep/2026:16:00:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 180.252.91.201 - - [24/Sep/2026:16:00:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/13.0; WordPress/6.2; http://site25326519.com" [redacted] 180.252.91.201 - - [24/Sep/2026:16:00:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 180.252.91.201 - - [24/Sep/2026:16:01:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 180.252.91.201 - - [24/Sep/2026:16:01:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" [redacted] 180.252.91.201 - - [24/Sep/2026:16:01:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 180.252.91.201 - - [24/Sep/2026:16:01:20 +0200] "POST /xm ... show less	Hacking Web App Attack
🇪🇸 robotstxt	2026-09-24 07:07:52 UTC · (1 month ago)	180.252.91.201 - - [24/Sep/2026:07:06:19 +0000] "GET /xmlrpc.php HTTP/1.1" 403 73914 "-" "Jetpack/12.1; WordPress/6.3; http://site81956392.com" "-" edge="180.252.91.201" 180.252.91.201 - - [24/Sep/2026:07:06:24 +0000] "GET /xmlrpc.php HTTP/1.1" 403 7 ... show more 180.252.91.201 - - [24/Sep/2026:07:06:19 +0000] "GET /xmlrpc.php HTTP/1.1" 403 73914 "-" "Jetpack/12.1; WordPress/6.3; http://site81956392.com" "-" edge="180.252.91.201" 180.252.91.201 - - [24/Sep/2026:07:06:24 +0000] "GET /xmlrpc.php HTTP/1.1" 403 73914 "-" "WordPress.com; https://wordpress.com" "-" edge="180.252.91.201" 180.252.91.201 - - [24/Sep/2026:07:06:50 +0000] "GET /xmlrpc.php HTTP/1.1" 403 73914 "-" "Jetpack by WordPress.com" "-" edge="180.252.91.201" 180.252.91.201 - - [24/Sep/2026:07:06:53 +0000] "GET /xmlrpc.php HTTP/1.1" 403 73914 "-" "Jetpack by WordPress.com" "-" edge="180.252.91.201" 180.252.91.201 - - [24/Sep/2026:07:07:18 +0000] "GET /xmlrpc.php HTTP/1.1" 403 73914 "-" "WordPress.com; https://wordpress.com" "-" edge="180.252.91.201" ... show less	Web App Attack
🇧🇪 madeit	2026-09-24 05:15:21 UTC · (1 month ago)		Web App Attack
🇫🇷 dynamix	2026-09-23 11:11:59 UTC · (1 month ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 rh24	2026-09-23 11:11:57 UTC · (1 month ago)	(xmlrpc_405) XMLRPC-Bot 405 180.252.91.201 (ID/Indonesia/-)	Hacking
Anonymous	2026-09-23 07:58:09 UTC · (1 month ago)	[osotir.org] httpd-xmlrpc-post: sites=www.ear-books.com; logs=/var/log/httpd/domains/ear-books.com.log; samples=/xmlrpc.php	Brute-Force Web App Attack
🇳🇱 Alt255	2026-09-23 06:17:54 UTC · (1 month ago)	[ti-12al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Example: 180.252.91.201 - - \[23/Sep/2026:08:17:27 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 5898 "-" "Jetpack by WordPress.com \(Jetpack 13.0\; WordPress 6. ... show more [ti-12al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Example: 180.252.91.201 - - \[23/Sep/2026:08:17:27 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 5898 "-" "Jetpack by WordPress.com \(Jetpack 13.0\; WordPress 6.2\)" 180.252.91.201 - - \[23/Sep/2026:08:17:30 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 5895 "-" "Jetpack by WordPress.com" 180.252.91.201 - - \[23/Sep/2026:08:17:32 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 5933 "-" "WordPress.com\; https://wordpress.com" 180.252.91.201 - - \[23/Sep/2026:08:17:34 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 5895 "-" "Jetpack/12.5\; WordPress/6.1\; http://site16698262.com" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-09-23 00:50:48 UTC · (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 2806:261:48d:909f:6e15:dbff:fe2d:a612

🇦🇿 212.47.150.132

🇫🇮 157.22.47.219

🇺🇸 147.185.132.114

🇰🇷 118.193.69.59

🇫🇷 109.123.248.116

🇷🇴 92.118.39.63

🇺🇸 2600:8804:2010:3900:9d92:12d0:f81:7cce

🇦🇪 217.165.24.5

🇷🇴 193.32.162.15

🇸🇾 91.144.21.210

🇹🇼 49.158.37.29

🇵🇭 45.114.134.186

🇹🇭 203.156.108.110

🇳🇱 195.178.110.30

🇫🇮 147.185.133.120

🇰🇷 119.199.176.30

🇹🇳 102.152.62.5

🇺🇸 100.29.192.89

🇺🇸 91.230.168.237