JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.11.130.91

182.11.130.91 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 87%: ?

87%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Pontianak, West Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.11.130.91

Whois 182.11.130.91

IP Abuse Reports for 182.11.130.91:

This IP address has been reported a total of 24 times from 19 distinct sources. 182.11.130.91 was first reported on October 26th 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 bohl-aiG5aef	2026-06-11 14:44:31 (18 hours ago)	Suricata Alert [SID:2044504] ET INFO Request for Visual Studio Code sftp.json - Possible Information ... show more Suricata Alert [SID:2044504] ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak show less	Hacking
🇬🇧 AvonleaConsulting	2026-06-11 07:28:22 (1 day ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-06-11 06:18:48 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇬🇧 PeravixGroup	2026-06-11 05:50:45 (1 day ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 Sklurk	2026-06-11 05:24:24 (1 day ago)	Web App Attack	Web App Attack
🇫🇮 inlink.ltd	2026-06-11 04:27:35 (1 day ago)	dot file probe	Web App Attack
🇪🇸 pipeline.es	2026-06-10 15:32:26 (1 day ago)	Web scanning / probing for vulnerable paths \| URL: /plugin/vendor/phpunit/phpunit/src/Util/PHP/eval- ... show more Web scanning / probing for vulnerable paths \| URL: /plugin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php \| Evidence: fetaveformacion.fetave.es 182.11.130.91 - - [10/Jun/2026:17:31:06 +0200] \"POST /plugin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1\" 404 - \"-\" \"Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; yie11; rv:11.0) like Gecko\" GEOIP_COUNTRY_CODE=ID \| ASN: PT. Telekomunikasi Selular \| Country: ID show less	Port Scan Web App Attack
🇺🇸 xmission.com	2026-06-10 14:37:07 (1 day ago)	Blocked by UFW (TCP on 443) Source port: 7961 TTL: 43 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 7961 TTL: 43 Packet length: 60 TOS: 0x00 This report (for 182.11.130.91) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 webko.si	2026-06-10 05:04:07 (2 days ago)	JZKK: Bruteforce web app access, URI detail: '/.vscode/sftp.json'.	Web App Attack
Anonymous	2026-06-09 19:54:22 (2 days ago)	"GET /.vscode/sftp.json HTTP/1.1"	Hacking Web App Attack
🇪🇸 bohl-aiG5aef	2026-06-09 17:00:52 (2 days ago)	Suricata Alert [SID:2044504] ET INFO Request for Visual Studio Code sftp.json - Possible Information ... show more Suricata Alert [SID:2044504] ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak show less	Hacking
🇩🇪 big-cloud.nl	2026-06-09 14:58:45 (2 days ago)	Try to access /.vscode/sftp.json	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-09 12:20:36 (2 days ago)	[Tue Jun 09 22:20:35.696744 2026] [security2:error] [pid 247192] [client 182.11.130.91:26137] [clien ... show more [Tue Jun 09 22:20:35.696744 2026] [security2:error] [pid 247192] [client 182.11.130.91:26137] [client 182.11.130.91] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "aigFEyQBALkrU9CftYwYLwAAAFw"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-09 10:52:24 (2 days ago)	[Tue Jun 09 20:52:23.226748 2026] [security2:error] [pid 238800] [client 182.11.130.91:22669] [clien ... show more [Tue Jun 09 20:52:23.226748 2026] [security2:error] [pid 238800] [client 182.11.130.91:22669] [client 182.11.130.91] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "aifwZ6-JGZDYQsdkQHumZAAAAAg"] ... show less	Web App Attack
🇺🇸 xmission.com	2026-06-09 09:40:40 (2 days ago)	Blocked by UFW (TCP on 443) Source port: 4204 TTL: 46 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 4204 TTL: 46 Packet length: 60 TOS: 0x00 This report (for 182.11.130.91) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 54.154.55.73

🇸🇬 47.79.207.170

🇮🇳 45.251.232.97

🇬🇧 45.86.203.58

🇬🇧 45.86.203.48

🇳🇱 45.8.17.19

🇻🇳 27.79.43.150

🇧🇷 186.227.196.189

🇻🇳 180.93.245.203

🇯🇵 172.238.24.136

🇺🇸 162.216.149.54

🇺🇸 107.150.96.232

🇸🇮 89.212.162.221

🇭🇺 82.23.215.188

🇮🇪 52.215.182.220

🇸🇬 47.79.207.175

🇳🇱 45.148.10.157

🇮🇹 217.26.179.86

🇩🇪 192.109.200.101

🇦🇷 179.43.115.6