JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.254.71.173

180.254.71.173 was found in our database!

This IP was reported 336 times. Confidence of Abuse is 0%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Tangerang, Banten

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.254.71.173

Whois 180.254.71.173

IP Abuse Reports for 180.254.71.173:

This IP address has been reported a total of 336 times from 182 distinct sources. 180.254.71.173 was first reported on October 6th 2022, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-05-21 22:00:47 (3 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-21 21:00:11 (3 months ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
Anonymous	2026-03-31 05:06:32 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇩 sockominfo	2026-03-16 18:00:09 (5 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-14 22:00:09 (5 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-31 19:00:02 (7 months ago)	CRITICAL: Privileged access during non-business hours - Jakarta timezone (WIB). Threat Score: 7.9/10 ... show more CRITICAL: Privileged access during non-business hours - Jakarta timezone (WIB). Threat Score: 7.9/10 (HIGH). CVSS: 7/10 (High). Bayesian: 86%. MITRE: T1190. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-31 18:00:17 (7 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-31 17:00:02 (7 months ago)	CRITICAL: Privileged access during non-business hours - Jakarta timezone (WIB). Threat Score: 7.9/10 ... show more CRITICAL: Privileged access during non-business hours - Jakarta timezone (WIB). Threat Score: 7.9/10 (HIGH). CVSS: 7/10 (High). Bayesian: 84%. MITRE: T1190. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 mawan	2025-01-09 07:05:51 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇹🇷 rtbh.com.tr	2024-12-14 20:52:43 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2024-12-13 23:19:47 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/180.254.71.173	SSH
🇩🇪 nohacefaltapapel-et.net	2024-12-13 10:52:11 (1 year ago)	2024-12-13T10:47:03.297956front1 sshd[18215]: Invalid user sql from 180.254.71.173 port 34968 2024-1 ... show more 2024-12-13T10:47:03.297956front1 sshd[18215]: Invalid user sql from 180.254.71.173 port 34968 2024-12-13T10:50:00.064050front1 sshd[25104]: Invalid user sftpuser from 180.254.71.173 port 48496 2024-12-13T10:52:10.971697front1 sshd[30275]: Invalid user proxyuser from 180.254.71.173 port 55490 ... show less	Brute-Force SSH
🇪🇸 robotstxt	2024-12-13 10:51:29 (1 year ago)	2024-12-13T10:45:28.678758+00:00 dev-general sshd[3185584]: Invalid user sql from 180.254.71.173 por ... show more 2024-12-13T10:45:28.678758+00:00 dev-general sshd[3185584]: Invalid user sql from 180.254.71.173 port 44078 2024-12-13T10:49:18.436834+00:00 dev-general sshd[3185733]: Invalid user sftpuser from 180.254.71.173 port 37330 2024-12-13T10:51:28.854771+00:00 dev-general sshd[3185838]: Invalid user proxyuser from 180.254.71.173 port 44324 ... show less	Brute-Force
🇩🇪 herz-der-gamer.de	2024-12-13 10:51:25 (1 year ago)	2024-12-13T11:45:21.483053+01:00 marvibiene sshd[1076298]: Failed password for invalid user sql from ... show more 2024-12-13T11:45:21.483053+01:00 marvibiene sshd[1076298]: Failed password for invalid user sql from 180.254.71.173 port 36300 ssh2 2024-12-13T11:49:14.611972+01:00 marvibiene sshd[1077320]: Invalid user sftpuser from 180.254.71.173 port 58670 2024-12-13T11:49:14.614469+01:00 marvibiene sshd[1077320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.254.71.173 2024-12-13T11:49:16.376437+01:00 marvibiene sshd[1077320]: Failed password for invalid user sftpuser from 180.254.71.173 port 58670 ssh2 2024-12-13T11:51:24.886809+01:00 marvibiene sshd[1077828]: Invalid user proxyuser from 180.254.71.173 port 37432 show less	Brute-Force SSH
🇳🇱 yvoictra	2024-12-13 09:55:17 (1 year ago)	Dec 13 10:55:17 phoeve sshd[3270204]: Invalid user hadoopuser from 180.254.71.173 port 45398 ...	Brute-Force SSH

Showing 1 to 15 of 336 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.136.15.11

🇳🇱 185.21.60.17

🇸🇬 139.59.104.232

🇺🇸 74.128.96.114

🇺🇸 44.194.134.53

🇫🇮 193.32.204.199

🇰🇷 58.140.32.99

🇸🇦 50.60.250.107

🇺🇸 20.102.44.20

🇧🇷 205.210.31.251

🇺🇦 46.172.77.194

🇬🇧 35.203.210.75

🇨🇦 20.220.227.7

🇦🇹 212.56.161.17

🇩🇪 147.90.209.113

🇨🇳 113.140.95.2

🇻🇳 113.22.171.217

🇵🇹 94.132.0.254

🇺🇦 46.150.72.114

🇹🇷 45.94.5.182