JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.10.161.7

182.10.161.7 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 54%: ?

54%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Indramayu, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.10.161.7

Whois 182.10.161.7

IP Abuse Reports for 182.10.161.7:

This IP address has been reported a total of 17 times from 14 distinct sources. 182.10.161.7 was first reported on September 13th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-07-30 09:01:04 (3 hours ago)	(wordpress) Failed wordpress login from 182.10.161.7 (ID/Indonesia/West Java/Cirebon/-)	Brute-Force
🇦🇺 screwlooseit.com.au	2026-07-30 06:56:57 (5 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/-	Web App Attack
🇺🇸 IndigoRidge	2026-07-30 06:30:35 (5 hours ago)	182.10.161.7 - - [30/Jul/2026:02:28:59 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.co ... show more 182.10.161.7 - - [30/Jul/2026:02:28:59 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 182.10.161.7 - - [30/Jul/2026:02:29:09 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 182.10.161.7 - - [30/Jul/2026:02:29:31 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 182.10.161.7 - - [30/Jul/2026:02:30:24 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" 182.10.161.7 - - [30/Jul/2026:02:30:35 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
Anonymous	2026-07-29 12:13:20 (1 day ago)	[redacted] 182.10.161.7 - - [29/Jul/2026:14:12:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 182.10.161.7 - - [29/Jul/2026:14:12:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" [redacted] 182.10.161.7 - - [29/Jul/2026:14:12:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site75216742.com" [redacted] 182.10.161.7 - - [29/Jul/2026:14:12:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site40143713.com" [redacted] 182.10.161.7 - - [29/Jul/2026:14:13:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 182.10.161.7 - - [29/Jul/2026:14:13:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-29 11:11:29 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-29 07:00:00 (1 day ago)	Automated Apache web application probing in selected 24h window; attempts=668, unique_paths=1, error ... show more Automated Apache web application probing in selected 24h window; attempts=668, unique_paths=1, error_responses=668; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
Anonymous	2026-07-29 07:00:00 (1 day ago)	Apache probe; attempts=668; exact paths: /xmlrpc.php	Web App Attack
🇺🇸 kosada.com	2026-07-28 20:46:41 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 dynamix	2026-07-28 08:57:29 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 04:29:58 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 182.10.161.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 182.10.161.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 00:29:55.177593 2026] [security2:error] [pid 1206641:tid 1206641] [client 182.10.161.7:24478] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.10.161.7 (+1 hits since last alert)\|greenmountainfeeds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greenmountainfeeds.com"] [uri "/xmlrpc.php"] [unique_id "amgwQ78G77ZUfXwYPYVwvgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-12 02:01:41 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇦🇹 urnilxfgbez	2026-05-03 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 dewoda	2026-01-23 08:49:18 (6 months ago)	Blocked by UFW on htzded01 [445/tcp] Source port: 16167 TTL: 118 Packet length: 52 TOS: 0x00 This r ... show more Blocked by UFW on htzded01 [445/tcp] Source port: 16167 TTL: 118 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 RasyiidWho	2025-10-27 03:16:25 (9 months ago)	ip112.20 . 2025-10-27 10:16:23 102354 [Warning] Access denied for user 'root'@'182.10.161.7' (using ... show more ip112.20 . 2025-10-27 10:16:23 102354 [Warning] Access denied for user 'root'@'182.10.161.7' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
Anonymous	2025-09-25 01:31:33 (10 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.222

🇧🇷 205.210.31.216

🇧🇷 205.210.31.144

🇧🇪 198.235.24.222

🇫🇮 147.185.133.46

🇰🇷 118.37.214.187

🇨🇳 115.190.138.163

🇺🇸 66.132.172.182

🇳🇱 45.198.224.140

🇳🇱 45.148.10.152

🇺🇸 45.79.153.72

🇬🇧 5.181.124.40

🇰🇷 220.127.148.6

🇧🇪 198.235.24.128

🇺🇸 162.217.100.41

🇺🇸 162.216.150.241

🇳🇱 158.173.3.173

🇮🇩 157.20.144.241

🇫🇮 147.185.133.82

🇺🇸 147.185.132.243