JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.210.166.12

180.210.166.12 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 56%: ?

56%

ISP	Premium Connectivity Limited
Usage Type	Fixed Line ISP
ASN	AS138536
Domain Name	pmcon.net
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.210.166.12

Whois 180.210.166.12

IP Abuse Reports for 180.210.166.12:

This IP address has been reported a total of 20 times from 16 distinct sources. 180.210.166.12 was first reported on July 4th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NetVexor	2026-09-02 17:30:49 (23 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇫🇷 pwozniak	2026-09-02 12:39:29 (1 day ago)	warning: unknown[180.210.166.12]: SASL LOGIN authentication failed	Brute-Force
🇨🇦 Psycho Solutions LLC	2026-08-27 11:24:24 (1 week ago)	Active SSH brute-force detected. Logs: 2026-08-27T11:17:29.617425+00:00 AVM-144221 sshd-session[4083 ... show more Active SSH brute-force detected. Logs: 2026-08-27T11:17:29.617425+00:00 AVM-144221 sshd-session[408355]: error: kex_exchange_identification: read: Connection reset by peer 2026-08-27T11:17:51.761075+00:00 AVM-144221 sshd-session[413717]: Connection fro... show less	SSH Brute-Force
🇧🇪 fpoulet	2026-08-27 04:52:17 (1 week ago)	Blocked by Fail2Ban (Postfix BruteForce)	Brute-Force SSH
🇺🇸 kosada.com	2026-08-25 11:08:44 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 garrymenata	2026-08-23 22:42:56 (1 week ago)	180.210.166.12 - - [24/Aug/2026:01:23:00 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ... show more 180.210.166.12 - - [24/Aug/2026:01:23:00 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 180.210.166.12 - - [24/Aug/2026:01:23:01 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 180.210.166.12 - - [24/Aug/2026:01:23:04 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
Anonymous	2026-08-22 01:23:49 (1 week ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇫🇷 Zkillu	2026-08-19 20:34:25 (2 weeks ago)	UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 8443 across 38 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 8443 across 38 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 20:34:25 (2 weeks ago)	UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 8443 across 38 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 8443 across 38 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
Anonymous	2026-08-18 05:10:33 (2 weeks ago)	23/tcp (1 or more attempts)	Port Scan
🇺🇸 pixelmemory.us	2026-08-05 08:33:56 (4 weeks ago)	2026-08-05T08:32:15 180.210.166.12 GET /Photos/Vacation/2019-09%20Kauai/raw/DSC02255.ARW.xmp Mozilla ... show more 2026-08-05T08:32:15 180.210.166.12 GET /Photos/Vacation/2019-09%20Kauai/raw/DSC02255.ARW.xmp Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 ... show less	Bad Web Bot
🇩🇪 LRob	2026-08-04 02:00:03 (4 weeks ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1763506800/cat_ids~130,172,258/tag_ids~588,651,725,329,439,235,628/request_format~json/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-08-02 15:25:50 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 pltcldvlpr	2026-08-02 05:29:32 (1 month ago)	Bogus Useragent: 180.210.166.12 - - [02/Aug/2026:07:29:31 +0200] "GET /differenzierung-von-lichtbild ... show more Bogus Useragent: 180.210.166.12 - - [02/Aug/2026:07:29:31 +0200] "GET /differenzierung-von-lichtbildwerken-und-lichtbildern?do=media&image=wiki%3Ascreenshot.png&ns=portal&tab_details=view&tab_files=files HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.16 Safari/537.36" asn=138536 org="Premium Connectivity Limited" country=BD ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-25 07:26:41 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 187.40.54.131

🇷🇺 176.118.217.106

🇻🇳 171.244.201.80

🇬🇧 154.16.44.181

🇺🇸 147.185.132.84

🇺🇸 147.185.132.45

🇮🇩 128.14.233.253

🇰🇷 121.189.122.13

🇨🇳 110.42.223.195

🇺🇦 109.229.28.99

🇩🇪 91.3.38.161

🇺🇸 35.184.139.33

🇨🇦 34.47.47.1

🇷🇺 2.63.211.145

🇬🇧 193.163.125.223

🇬🇧 185.152.251.177

🇺🇸 172.236.112.145

🇺🇸 162.241.130.19

🇫🇮 147.185.133.123

🇺🇸 147.185.132.252