JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

182.10.129.224

Recent Activity

Abuse confidence score ?

19% Caution

23 reports

17 reporters · latest 4 days ago

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Bandung, West Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 182.10.129.224

This IP address has been reported a total of 23 times from 17 distinct sources. 182.10.129.224 was first reported on December 15th 2025, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: United States of America with 2 reports; Estonia with 1 report; Spain with 1 report. The most common categories in these recent reports were: Bad Web Bot 2 times; DDoS Attack 2 times; Brute-Force 1 time; Hacking 1 time; Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-09-23 02:57:05 (4 days ago)	Brute force	Brute-Force
🇪🇪 Tsumugi Kotobuki	2026-09-16 12:48:59 (1 week ago)	Port Scan on Honeypot \| Ports: 445/SMB \| Proto: TCP(1) \| Flags: all SYN \| TTL: 109 \| Len: 52B \| Win: ... show more Port Scan on Honeypot \| Ports: 445/SMB \| Proto: TCP(1) \| Flags: all SYN \| TTL: 109 \| Len: 52B \| Win: 8192(1) \| F2B/ufw-honeypot@2026-09-16T12:48:58Z show less	Port Scan Hacking
🇺🇸 kosada.com	2026-08-27 00:30:24 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-06 05:30:44 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-09 21:36:47 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-28 12:27:36 (2 months ago)	[Sun Jun 28 19:27:32.710566 2026] [security2:error] [pid 367456:tid 140332130883264] [client 182.10. ... show more [Sun Jun 28 19:27:32.710566 2026] [security2:error] [pid 367456:tid 140332130883264] [client 182.10.129.224:31433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-tahunan"] [unique_id "akETNNAXuxChCizff2grZwABjQE"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[367479] [zZRLd49xqLI] [akETNNAXuxChCizff2grZwABjQE] keep_alive=[1] [2026-06-28 19:27:32.710572] [R:akETNNAXuxChCizff2grZwABjQE] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/ ... show less	Email Spam Hacking
🇩🇪 Vegascosmetics	2026-06-17 06:14:08 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 Hazzard	2026-03-26 03:55:56 (6 months ago)	182.10.129.224 (ID/Indonesia/West Java/Bandung/-/[redacted]	Brute-Force
🇺🇸 TPI-Abuse	2026-03-12 02:53:26 (6 months ago)	(mod_security) mod_security (id:211030) triggered by 182.10.129.224 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:211030) triggered by 182.10.129.224 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 22:53:21.716509 2026] [security2:error] [pid 10782:tid 10782] [client 182.10.129.224:56661] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack\|\|www.carbonless.net\|F\|2"] [data "Matched Data: )>(/! found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.carbonless.net"] [uri "/carbcart/index.php"] [unique_id "abIqoaVsYCBK7pP-UeCn0QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-03-01 08:04:46 (6 months ago)	Cloudflare WAF: Request Path: / Request Query: ?cat=-1%2F%2A%2150000AND%2A%2FJSON_KEYS%28%28%2F%2A%2 ... show more Cloudflare WAF: Request Path: / Request Query: ?cat=-1%2F%2A%2150000AND%2A%2FJSON_KEYS%28%28%2F%2A%2150000SELECT%2A%2F%2F%2A%2150000CONVERT%2A%2F%28%28%2F%2A%2150000SELECT%2A%2F%2F%2A%2150000CONCAT%2A%2F%28%2527~%2527%2C%28%2F%2A%2150000SELECT%2A%2F%28ELT%282549%3D2549%2C1%29%29%29%2C%2527~%2527%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23+WhBdUtEp Host: hwagm.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Action: block Source: firewallManaged ASN Description: TELKOMSEL-ASN-ID PT. Telekomunikasi Selular Country: ID Method: GET Timestamp: 2026-03-01T08:04:46Z ruleId: 8629bb58defe4193ab4d493c7bd2d8fa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇹🇷 rtbh.com.tr	2026-01-31 04:11:18 (7 months ago)	list.rtbh.com.tr report: tcp/1433, tcp/445	Brute-Force
🇨🇭 Origon	2026-01-26 10:57:08 (8 months ago)	http-admin-interface-probing - IP: 182.10.129.224 - time="2026-01-26T11:57:08+01:00" level=info msg ... show more http-admin-interface-probing - IP: 182.10.129.224 - time="2026-01-26T11:57:08+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-admin-interface-probing by ip 182.10.129.224 (ID/23693) : 4h ban on Ip 182.10.129.224" module=db show less	Web App Attack
🇹🇷 rtbh.com.tr	2026-01-22 08:11:08 (8 months ago)	list.rtbh.com.tr report: tcp/1433, tcp/445	Brute-Force
🇩🇪 HoneyPot-FrPri	2026-01-22 06:58:51 (8 months ago)	1769065130 - 01/22/2026 07:58:50 Host: 182.10.129.224/182.10.129.224 Port: 139 TCP Blocked ...	Port Scan
🇳🇱 mha.fi	2026-01-17 21:19:59 (8 months ago)	Unauthorized connection attempt detected from IP address 182.10.129.224 to port 139 (DNS-NL) [P]	Brute-Force Exploited Host

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 2409:8c54:3810:d:203:0:200:120

🇨🇳 223.243.179.70

🇭🇰 199.45.154.185

🇺🇸 192.119.35.248

🇩🇪 167.94.145.22

🇹🇭 147.50.103.212

🇺🇸 136.144.35.44

🇻🇳 116.110.14.209

🇮🇩 114.12.17.98

🇹🇭 113.53.62.169

🇻🇳 103.53.158.121

🇰🇷 59.23.3.146

🇮🇳 20.235.128.111

🇻🇳 14.161.43.148

🇨🇳 218.28.18.2

🇹🇷 213.250.150.240

🇫🇷 207.180.244.237

🇪🇸 149.71.98.18

🇵🇾 143.202.209.172

🇨🇳 124.31.105.204