JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.10.168.248

182.10.168.248 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 54%: ?

54%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Cirebon, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.10.168.248

Whois 182.10.168.248

IP Abuse Reports for 182.10.168.248:

This IP address has been reported a total of 10 times from 9 distinct sources. 182.10.168.248 was first reported on September 13th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-14 21:59:14 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-13. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-09-14 04:26:28 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 182.10.168.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 182.10.168.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 00:26:20.419624 2026] [security2:error] [pid 6426:tid 6426] [client 182.10.168.248:24112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kurtkaufman.com"] [uri "/.env/.env.bak"] [unique_id "aqd3bEcYvOtuH-gDRp139AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-14 03:09:44 (6 days ago)	[server.tmg.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env/.env.bak \| /.aws/cr ... show more [server.tmg.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env/.env.bak \| /.aws/credentials show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-09-13 22:21:33 (6 days ago)	[14/Sep/2026:01:21:32 +0300] -- 182.10.168.248 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [14/Sep/2026:01:21:32 +0300] -- 182.10.168.248 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /.env/.env.bak HTTP/1.1 show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-13 21:59:19 (6 days ago)	Auto-ban: >3000 req/min op 2026-09-13	Web App Attack SSH Hacking
🇩🇪 paissangroup	2026-09-13 21:57:54 (6 days ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-09-13 21:04:32 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 snhosting	2026-09-13 16:21:13 (6 days ago)	182.10.168.248 - - [13/Sep/2026:18:20:56 +0200] "GET /test.php HTTP/1.1" 404 837 "-" "Mozilla/5.0 (W ... show more 182.10.168.248 - - [13/Sep/2026:18:20:56 +0200] "GET /test.php HTTP/1.1" 404 837 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 182.10.168.248 - - [13/Sep/2026:18:21:00 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 837 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 182.10.168.248 - - [13/Sep/2026:18:21:00 +0200] "GET /.env/.env.bak HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 182.10.168.248 - - [13/Sep/2026:18:21:01 +0200] "GET /.env/.env.bak HTTP/1.1" 404 837 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 182.10.168.248 - - [13/Sep/2026:18:21:04 +0200] "GET /index.php HTTP/1.1" 404 837 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
🇷🇺 DZBOT	2026-09-13 12:16:10 (6 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-09-13 10:08:38 (6 days ago)	Web probing (5 hits in 24h) on default-vhost,limburgsekunstkring.nl: sensitive-path scans and/or 404 ... show more Web probing (5 hits in 24h) on default-vhost,limburgsekunstkring.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON. show less	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.235

🇺🇿 188.113.199.34

🇳🇱 185.226.197.42

🇨🇳 183.195.135.222

🇨🇳 180.76.226.129

🇧🇷 177.37.209.76

🇺🇸 172.236.117.243

🇬🇧 154.16.44.241

🇧🇬 109.160.32.156

🇵🇭 103.235.94.96

🇫🇷 88.180.206.150

🇫🇷 85.217.140.19

🇨🇦 70.54.182.130

🇧🇷 16.5.0.181

🇩🇪 2001:4ca0:108:42:0:80:6:9

🇳🇱 192.253.248.251

🇸🇪 185.246.128.133

🇧🇷 177.134.190.226

🇺🇸 172.236.228.229

🇺🇸 162.216.150.170