JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

182.228.200.102

Neutral Activity

Abuse confidence score ?

0% Low Risk

34 reports

25 reporters · latest 2 months ago

ISP	LG POWERCOMM
Usage Type	Fixed Line ISP
ASN	AS17858
Domain Name	lguplus.com
Country	🇰🇷 Korea (the Republic of)
City	Pyeongtaek, Gyeonggi-do

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

182.228.200.102 has been reported 34 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 182.228.200.102

Export CSV

This IP address has been reported a total of 34 times from 25 distinct sources. 182.228.200.102 was first reported on July 12th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 FireGuard Server	2026-07-24 00:40:05 (2 months ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443	Port Scan Hacking
🇳🇱 tr1n	2026-07-24 00:28:52 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from KR. Action: MANAGED_CHALLENGE \| ASN: 17858 (LG POWERC ... show more Triggered Cloudflare WAF (firewallCustom) from KR. Action: MANAGED_CHALLENGE \| ASN: 17858 (LG POWERCOMM) \| Protocol: HTTP/1.1 (POST) \| Endpoint: /xmlrpc.php \| Timestamp: 2026-07-24T00:28:52Z \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 4server	2026-07-23 07:44:24 (2 months ago)	[ThuJul2309:44:18.1859562026][security2:error][pid1996010:tid1996264][client182.228.200.102:0]ModSec ... show more [ThuJul2309:44:18.1859562026][security2:error][pid1996010:tid1996264][client182.228.200.102:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"verticalti.ch\"][uri\"/xmlrpc.php\"][unique_id\"amHGUnkfLe5CzBjN1_gf8wAAAMg\"] show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-07-22 08:16:11 (2 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-22 04:45:31 (2 months ago)	182.228.200.102 - - [22/Jul/2026:06:45:31 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macinto ... show more 182.228.200.102 - - [22/Jul/2026:06:45:31 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/82.0.0.0 Safari/537.36" show less	Web App Attack
🇨🇭 Mario Bretscher	2026-07-21 07:47:58 (2 months ago)	Jul 21 09:47:30 beat-band.ch Cerber(beat-band.ch)[1067264]: Authentication failure for admin from 18 ... show more Jul 21 09:47:30 beat-band.ch Cerber(beat-band.ch)[1067264]: Authentication failure for admin from 182.228.200.102 Jul 21 09:47:56 beat-band.ch Cerber(beat-band.ch)[1071644]: Authentication failure for admin from 182.228.200.102 ... show less	Web Spam
🇩🇪 4server	2026-07-20 14:36:41 (2 months ago)	[MonJul2016:36:36.6168272026][security2:error][pid1445818:tid1445907][client182.228.200.102:0]ModSec ... show more [MonJul2016:36:36.6168272026][security2:error][pid1445818:tid1445907][client182.228.200.102:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"bno.ch\"][uri\"/xmlrpc.php\"][unique_id\"al4ydH9oyQcOJpsK-h7LeAAAAEc\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-20 12:41:09 (2 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇳🇱 JCB	2026-07-20 07:03:00 (2 months ago)	xmlrpc.php	Web App Attack
🇺🇦 Olexiy Backend	2026-07-20 04:54:09 (2 months ago)	182.228.200.102 ...	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-19 15:14:00 (2 months ago)	IPBlock protected site ID [3390-wh]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇬🇧 AvonleaConsulting	2026-07-18 22:59:30 (2 months ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
🇧🇷 dominioz	2026-07-18 12:26:46 (2 months ago)	2026-07-18 12:26:19 POST /xmlrpc.php - - 182.228.200.102 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+arm6 ... show more 2026-07-18 12:26:19 POST /xmlrpc.php - - 182.228.200.102 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+arm64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Safari/11.0.0.0+Safari/537.36 - 301 798 2026-07-18 12:26:20 GET /err/ 404;https://dominioz.com.br:443/xmlrpc.php - 182.228.200.102 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+arm64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Safari/11.0.0.0+Safari/537.36 - 301 890 2026-07-18 12:26:21 GET /err/ 404;https://dominioz.com.br:443/err/index.asp?404;https://dominioz.com.br:443/xmlrpc.php - 182.228.200.102 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+arm64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Safari/11.0.0.0+Safari/537.36 - 301 982 2026-07-18 12:26:23 GET /err/ 404;https://dominioz.com.br:443/err/index.asp?404;https://dominioz.com.br:443/err/index.asp?404;https://dominioz.com.br:443/xmlrpc.php - 182.228.200.102 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+arm64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Safari/11.0.0.0+Safari/537.36 - 301 1074 ... show less	Web App Attack
🇩🇪 dbmwebdesign	2026-07-18 11:25:32 (2 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇬🇧 AvonleaConsulting	2026-07-18 05:49:55 (2 months ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 172.232.121.109

🇲🇽 158.23.18.109

🇭🇰 154.83.17.226

🇰🇷 125.139.124.120

🇺🇸 2604:a880:400:d1:0:5:198a:5001

🇰🇳 204.137.207.228

🇰🇿 185.206.32.100

🇨🇳 182.44.6.103

🇸🇬 167.254.241.78

🇹🇭 119.46.148.53

🇭🇰 116.48.151.136

🇩🇪 92.208.162.150

🇷🇴 92.118.39.50

🇵🇱 89.67.39.124

🇧🇬 87.126.145.190

🇳🇱 77.91.71.92

🇺🇸 66.132.195.88

🇮🇩 45.198.20.216

🇺🇸 24.165.153.185

🇮🇳 14.195.186.230