JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.10.130.176

182.10.130.176 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 38%: ?

38%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Bandung, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.10.130.176

Whois 182.10.130.176

IP Abuse Reports for 182.10.130.176:

This IP address has been reported a total of 12 times from 12 distinct sources. 182.10.130.176 was first reported on October 8th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-08-25 11:21:35 (3 days ago)	🔑 Wordpress login brute force attempt	Hacking Web App Attack
🇨🇭 4server	2026-08-24 06:15:48 (5 days ago)	[MonAug2408:15:41.3886562026][security2:error][pid2299731:tid2299972][client182.10.130.176:0]ModSecu ... show more [MonAug2408:15:41.3886562026][security2:error][pid2299731:tid2299972][client182.10.130.176:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"minondou-togo.ch\"][uri\"/xmlrpc.php\"][unique_id\"aovhjZ0BYxepwW1FNsz5pgAAAMo\"] show less	Hacking Web App Attack
Anonymous	2026-08-24 02:04:50 (5 days ago)	[redacted] 182.10.130.176 - - [24/Aug/2026:04:04:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 523 "-" " ... show more [redacted] 182.10.130.176 - - [24/Aug/2026:04:04:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 523 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" [redacted] 182.10.130.176 - - [24/Aug/2026:04:04:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/75.0.0.0 Safari/537.36" [redacted] 182.10.130.176 - - [24/Aug/2026:04:04:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 523 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" [redacted] 182.10.130.176 - - [24/Aug/2026:04:04:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36" [redacted] 182.10.130.176 - - [24/Aug/2026:04:04:28 +0200] "PO ... show less	Hacking Web App Attack
Anonymous	2026-08-21 01:22:34 (1 week ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇩🇪 banankicks	2026-08-12 22:12:40 (2 weeks ago)	Unauthorized connection attempt detected from IP address 182.10.130.176 to port 23 (banankicks-serve ... show more Unauthorized connection attempt detected from IP address 182.10.130.176 to port 23 (banankicks-server) [W] show less	Brute-Force Exploited Host
🇺🇸 kosada.com	2026-07-10 07:53:18 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-06 10:06:19 (1 month ago)	(mod_security) mod_security (id:211190) triggered by 182.10.130.176 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:211190) triggered by 182.10.130.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:06:11.865361 2026] [security2:error] [pid 2081:tid 2081] [client 182.10.130.176:24476] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|www.kumoh.ac.kr\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cms/fileOpen.do?path=%2F_res%2Fko%2Fetc%2F2014audit_result.pdf"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kumoh.ac.kr"] [uri "/cms/fileOpen.do"] [unique_id "akt-E4Pk1eADfjaqoeAsuAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-30 03:39:19 (2 months ago)	Attack Signature Blocked: /wishlist/index/add/product/9280/form_key/hSFAz5teNbIvtOhz/124-1243095_ind ... show more Attack Signature Blocked: /wishlist/index/add/product/9280/form_key/hSFAz5teNbIvtOhz/124-1243095_indonesia-provinces-blank-peta-indonesia-vector-png.png \| UA: Opera/9.25.(Windows NT 11.0; nso-ZA) Presto/2.9.164 Version/10.00 \| (Magento Site) (Botnet act... show less	Web App Attack Bad Web Bot
🇮🇩 Burayot	2026-05-02 12:07:59 (3 months ago)	LF_CPANEL: (cpanel) Failed cPanel login from 182.10.130.176 (ID/Indonesia/-): 1 in the last 3600 sec ... show more LF_CPANEL: (cpanel) Failed cPanel login from 182.10.130.176 (ID/Indonesia/-): 1 in the last 3600 secs show less	Brute-Force
🇬🇧 Birdo	2026-04-27 12:21:42 (4 months ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇩🇪 check-the-sum.fr	2026-02-21 11:22:08 (6 months ago)	Port Scanning	Port Scan
🇨🇭 ALPHANET	2025-10-08 18:35:14 (10 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:533:1000:1e8c:49c:f5dd:2d26

🇧🇷 190.115.64.171

🇦🇷 186.152.126.36

🇳🇱 176.65.148.216

🇺🇸 163.245.223.96

🇺🇸 147.185.132.131

🇧🇬 131.123.42.114

🇺🇸 91.230.168.122

🇺🇦 45.129.98.227

🇺🇸 216.25.89.90

🇮🇩 202.145.0.61

🇺🇦 194.156.249.154

🇺🇸 143.198.150.150

🇻🇳 113.173.152.157

🇮🇳 103.44.55.154

🇬🇧 82.16.221.216

🇨🇳 49.64.169.153

🇳🇱 45.148.10.152

🇷🇴 2.57.122.150

🇻🇳 2405:4802:a3a4:7820:b00d:7c4f:7db9:7d20