JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.11.130.183

182.11.130.183 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 71%: ?

71%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Pontianak, West Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.11.130.183

Whois 182.11.130.183

IP Abuse Reports for 182.11.130.183:

This IP address has been reported a total of 22 times from 17 distinct sources. 182.11.130.183 was first reported on January 24th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 bcsaba	2026-06-27 17:08:23 (2 days ago)	Looking for json file on web server 182.11.130.183 - - [27/Jun/2026:19:08:20 +0200] "GET /.vscode/sf ... show more Looking for json file on web server 182.11.130.183 - - [27/Jun/2026:19:08:20 +0200] "GET /.vscode/sftp.json HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 xmission.com	2026-06-27 10:55:26 (2 days ago)	Blocked by UFW (TCP on 443) Source port: 19926 TTL: 43 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 19926 TTL: 43 Packet length: 60 TOS: 0x00 This report (for 182.11.130.183) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇮🇩 sockominfo	2026-06-27 08:00:59 (3 days ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 5/10 (MEDIUM). Confidence: 4 ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 5/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-27 07:00:53 (3 days ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-27 06:00:09 (3 days ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 5.8/10 (MEDIUM). Reported by ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 5.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-27 05:00:53 (3 days ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 5.2/10 (MEDIUM). Confidence: ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 5.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 36%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇬🇧 AvonleaConsulting	2026-06-26 22:58:36 (3 days ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
Anonymous	2026-06-26 20:02:29 (3 days ago)	"GET /.vscode/sftp.json HTTP/1.1"	Hacking Web App Attack
🇧🇪 cmbplf	2026-06-26 15:48:33 (3 days ago)	204 requests with url.path *sftp.json	Brute-Force Bad Web Bot
🇦🇺 paulshipley.com.au	2026-06-26 13:14:23 (3 days ago)	[Fri Jun 26 23:14:22.746627 2026] [security2:error] [pid 665234] [client 182.11.130.183:14010] [clie ... show more [Fri Jun 26 23:14:22.746627 2026] [security2:error] [pid 665234] [client 182.11.130.183:14010] [client 182.11.130.183] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "aj57LkHZ62RNbhS2klyUSwAAAAA"] ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-06-26 10:36:04 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇩🇪 big-cloud.nl	2026-06-26 10:24:32 (3 days ago)	Try to access /.vscode/sftp.json	Web App Attack
🇪🇸 bohl-aiG5aef	2026-06-26 09:49:52 (3 days ago)	Suricata Alert [SID:2044504] ET INFO Request for Visual Studio Code sftp.json - Possible Information ... show more Suricata Alert [SID:2044504] ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak show less	Hacking
🇬🇧 AvonleaConsulting	2026-06-26 09:21:51 (4 days ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-18 14:48:07 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.18

🇨🇳 123.154.2.105

🇧🇪 35.233.117.140

🇺🇸 20.168.115.116

🇪🇸 212.231.190.106

🇫🇮 204.168.207.39

🇸🇬 193.37.32.69

🇵🇪 190.235.10.225

🇫🇷 90.91.241.144

🇸🇬 47.128.51.115

🇺🇸 34.24.110.188

🇺🇸 206.221.176.60

🇳🇵 202.51.89.138

🇵🇪 181.176.136.69

🇦🇿 158.181.36.103

🇧🇷 138.36.32.37

🇮🇩 103.170.97.16

🇨🇦 99.246.164.89

🇬🇧 93.119.124.33

🇨🇳 27.39.128.169