This IP address has been reported a total of
12
times from
10 distinct
sources.
182.2.164.130 was first reported on
July 5th 2025 , and the most recent report was
1 month ago Indonesia
with 1
report.
The most common categories in these recent reports were:
SSH
1
time;
IoT Targeted
1
time;
Port Scan
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
Namor
2026-08-13 06:30:21
(1 month ago)
Port Scan
SSH
IoT Targeted
🇮🇩
sockominfo
2026-07-22 20:00:53
(2 months ago)
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.7/10 (CRITICAL). Conf ...
show more
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.7/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1210 (Exploitation of Remote Services). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-22 19:00:28
(2 months ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-22 18:00:12
(2 months ago)
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported ...
show more
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇺🇸
kosada.com
2026-07-12 12:14:10
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇬🇧
PeravixGroup
2026-06-18 00:14:31
(3 months ago)
Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ...
show more
Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud
show less
Hacking
Exploited Host
🇩🇪
noxtec GmbH
2025-07-28 11:04:52
(1 year ago)
(wordpress) Failed wordpress login from 182.2.164.130 (ID/Indonesia/-)
Brute-Force
🇺🇸
TPI-Abuse
2025-07-28 07:43:27
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 182.2.164.130 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 182.2.164.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 03:43:19.398827 2025] [security2:error] [pid 25475:tid 25475] [client 182.2.164.130:53266] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||daylightingit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daylightingit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aIcqF3VDKUDHolHIJnQ1TQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-27 19:05:38
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
screwlooseit.com.au
2025-07-27 17:14:06
(1 year ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
ID/Indonesia/-
Web App Attack
🇧🇪
voormedia
2025-07-27 12:53:38
(1 year ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇮🇩
Burayot
2025-07-05 03:04:43
(1 year ago)
LF_IMAPD: (imapd) Failed IMAP login from 182.2.164.130 (ID/Indonesia/-): 1 in the last 3600 secs
Brute-Force
Showing 1 to
12
of 12 reports
