JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.11.154.100

182.11.154.100 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Pontianak, West Kalimantan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.11.154.100

Whois 182.11.154.100

IP Abuse Reports for 182.11.154.100:

This IP address has been reported a total of 30 times from 20 distinct sources. 182.11.154.100 was first reported on November 11th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 bohl-aiG5aef	2026-06-24 14:08:24 (8 hours ago)	Suricata Alert [SID:2044504] ET INFO Request for Visual Studio Code sftp.json - Possible Information ... show more Suricata Alert [SID:2044504] ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak show less	Hacking
🇺🇸 xmission.com	2026-06-24 13:47:39 (8 hours ago)	Blocked by UFW (TCP on 443) Source port: 3426 TTL: 43 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 3426 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 182.11.154.100) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇨🇭 4server	2026-06-24 09:27:30 (13 hours ago)	[WedJun2411:27:25.9738412026][security2:error][pid1737249:tid1737513][client182.11.154.100:0]ModSecu ... show more [WedJun2411:27:25.9738412026][security2:error][pid1737249:tid1737513][client182.11.154.100:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"prodotti.comarcosa.com\"][uri\"/.vscode/sftp.json\"][unique_id\"ajui_fqwFghsK0HFVLEa7gAAAJQ\"] show less	Hacking Web App Attack
🇳🇱 enpepet	2026-06-24 09:21:37 (13 hours ago)	GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc URL:/in ... show more GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Port Scan Hacking Brute-Force Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-24 08:58:46 (13 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇷 conseilgouz	2026-06-24 07:10:50 (15 hours ago)	sae-17 : Block hidden directories=>/.vscode/sftp.json(/)	Hacking
🇺🇸 nodepile	2026-06-24 04:17:54 (18 hours ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Macintosh ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15') show less	Web App Attack Exploited Host
🇺🇸 xmission.com	2026-06-24 03:24:27 (19 hours ago)	Blocked by UFW (TCP on 443) Source port: 10564 TTL: 43 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 10564 TTL: 43 Packet length: 60 TOS: 0x00 This report (for 182.11.154.100) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇦🇺 paulshipley.com.au	2026-06-23 09:47:06 (1 day ago)	[Tue Jun 23 19:47:05.061034 2026] [security2:error] [pid 233122] [client 182.11.154.100:12894] [clie ... show more [Tue Jun 23 19:47:05.061034 2026] [security2:error] [pid 233122] [client 182.11.154.100:12894] [client 182.11.154.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "ajpWGXHrcbOxv8-nJdG-0gAAAA4"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-23 04:30:11 (1 day ago)	[Tue Jun 23 14:30:11.094833 2026] [security2:error] [pid 204981] [client 182.11.154.100:6112] [clien ... show more [Tue Jun 23 14:30:11.094833 2026] [security2:error] [pid 204981] [client 182.11.154.100:6112] [client 182.11.154.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "ajoL07r3h5T1GKWkvgCVRAAAAAU"] ... show less	Web App Attack
🇬🇧 AvonleaConsulting	2026-06-22 22:59:21 (1 day ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-22 15:33:40 (2 days ago)	[Tue Jun 23 01:33:39.301601 2026] [security2:error] [pid 130504] [client 182.11.154.100:21818] [clie ... show more [Tue Jun 23 01:33:39.301601 2026] [security2:error] [pid 130504] [client 182.11.154.100:21818] [client 182.11.154.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/"] [unique_id "ajlV0wlm9z13mxMh7G0IQQAAAAw"] ... show less	Web App Attack
🇬🇧 AvonleaConsulting	2026-06-22 14:41:47 (2 days ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-06-22 12:43:52 (2 days ago)	[Mon Jun 22 22:43:51.688822 2026] [security2:error] [pid 103891] [client 182.11.154.100:24073] [clie ... show more [Mon Jun 22 22:43:51.688822 2026] [security2:error] [pid 103891] [client 182.11.154.100:24073] [client 182.11.154.100] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/"] [unique_id "ajkuB5lRSmX__1ep1eAkIgAAAAY"] ... show less	Web App Attack
🇧🇪 cmbplf	2026-06-22 07:47:29 (2 days ago)	308 requests with url.path *sftp.json	Brute-Force Bad Web Bot

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.133

🇬🇧 195.96.139.67

🇺🇸 172.212.160.48

🇭🇰 150.5.154.160

🇫🇷 91.231.89.158

🇳🇱 91.92.40.173

🇨🇳 223.74.126.23

🇧🇷 179.224.18.224

🇺🇸 162.216.149.238

🇺🇸 153.80.19.136

🇮🇳 118.185.130.194

🇮🇳 103.91.246.101

🇺🇸 20.29.19.156

🇫🇮 147.185.133.139

🇺🇸 47.234.138.49

🇳🇱 45.156.87.13

🇺🇸 2607:f8b0:4001:c61::127

🇨🇳 219.139.151.55

🇺🇸 198.44.166.42

🇪🇬 197.199.224.52