JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.253.116.62

182.253.116.62 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 29%: ?

29%

ISP	Biznet Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.253.116.62

Whois 182.253.116.62

IP Abuse Reports for 182.253.116.62:

This IP address has been reported a total of 17 times from 15 distinct sources. 182.253.116.62 was first reported on November 28th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 maxxsense	2026-07-17 07:10:54 (10 hours ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 182.253.116.62 (ID/Indo ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 182.253.116.62 (ID/Indonesia/-) show less	Hacking
🇮🇹 Progetto1	2026-07-17 02:24:02 (14 hours ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇵🇾 SecOpsSL	2026-07-17 00:08:36 (17 hours ago)	Jul 16 21:08:35 mail postfix/submission/smtpd[26736]: warning: unknown[182.253.116.62]: SASL PLAIN a ... show more Jul 16 21:08:35 mail postfix/submission/smtpd[26736]: warning: unknown[182.253.116.62]: SASL PLAIN authentication failed: authentication failure show less	Email Spam Brute-Force
🇫🇮 notelseit	2026-07-16 22:19:45 (19 hours ago)	2026-07-17T00:18:49.009808+02:00 mail postfix/submission/smtpd[2951667]: warning: unknown[182.253.11 ... show more 2026-07-17T00:18:49.009808+02:00 mail postfix/submission/smtpd[2951667]: warning: unknown[182.253.116.62]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-07-17T00:18:49.293295+02:00 mail postfix/submission/smtpd[2951667]: disconnect from unknown[182.253.116.62] ehlo=2 starttls=1 auth=0/1 commands=3/4 2026-07-17T00:19:45.215464+02:00 mail postfix/submission/smtpd[2951345]: warning: unknown[182.253.116.62]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force Email Spam
🇸🇪 vaia.cloud	2026-04-19 00:27:02 (2 months ago)	trying wp-login.php/xmlrpc.php 33 times in 1 minutes	Brute-Force Web App Attack
🇮🇩 Burayot	2026-04-01 07:11:09 (3 months ago)	LF_CPANEL: (cpanel) Failed cPanel login from 182.253.116.62 (ID/Indonesia/-): 1 in the last 3600 sec ... show more LF_CPANEL: (cpanel) Failed cPanel login from 182.253.116.62 (ID/Indonesia/-): 1 in the last 3600 secs show less	Brute-Force
🇮🇩 David Koswari	2026-03-16 06:15:00 (4 months ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇫🇷 Sklurk	2026-02-17 20:11:19 (4 months ago)	Web App Attack	Web App Attack
🇮🇩 hermawan	2025-10-19 15:04:51 (8 months ago)	[Sun Oct 19 21:45:51.187240 2025] [security2:error] [pid 2117272:tid 140210275342016] [client 182.25 ... show more [Sun Oct 19 21:45:51.187240 2025] [security2:error] [pid 2117272:tid 140210275342016] [client 182.253.116.62:23074] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:(?:^\|=)[\\\\s\\\\v](?:t[\\"'\\\\)\\\\[-\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\v])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?-@_a-\\\\{])?\\\\x5c?i[\\"'\\\$\\\\[-\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\v])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?-@_a-\\\\{])?\\\\x5c?m[\\"'\\\$\\\\[-\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\v]*)?\\ ..." at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "2418"] [id "932243"] [msg "Remote Command Execution: Unix Command Injection found in user-agent or referer header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: ; iP found within REQUEST_HEADERS:User-Agent: ChatGPT/1.2025.281 (iOS 26.0.1; iPhone12,3; build 18509380657) request_line = ... show less	Hacking Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-10-15 10:51:07 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇷🇴 abuse_IP_reporter	2025-09-20 05:45:10 (9 months ago)	Sep 20 08:32:54 server UFW BLOCK SRC=182.253.116.62 DF PROTO=TCP SPT=25043	Port Scan
🇷🇴 abuse_IP_reporter	2025-09-20 03:45:09 (9 months ago)	Sep 20 06:39:32 server UFW BLOCK SRC=182.253.116.62 DF PROTO=TCP SPT=21766	Port Scan
🇵🇱 sefinek.net	2025-09-19 02:47:44 (9 months ago)	Blocked by UFW on PL02 [1433/tcp] Source port: 26946 TTL: 112 Packet length: 52 TOS: 0x00 This repo ... show more Blocked by UFW on PL02 [1433/tcp] Source port: 26946 TTL: 112 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 hermawan	2025-05-08 03:38:42 (1 year ago)	[Thu May 08 10:38:10.831770 2025] [security2:error] [pid 327871:tid 140016504764096] [client 182.253 ... show more [Thu May 08 10:38:10.831770 2025] [security2:error] [pid 327871:tid 140016504764096] [client 182.253.116.62:33005] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2139"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data "Matched Data: , like Gecko) Version/4.0 Chrome/135.0.7049.111 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 15; 2311DRK48G Build/AP3A.240905.015.A2; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome ... show less	Hacking Web App Attack
🇪🇸 10dencehispahard SL	2025-02-24 06:42:38 (1 year ago)	WP probing for vulnerabilities	Hacking Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 121.200.49.221

🇹🇷 94.154.43.230

🇷🇴 92.118.39.49

🇩🇪 80.158.109.51

🇧🇬 79.124.49.174

🇬🇧 5.226.140.61

🇺🇸 184.105.247.244

🇺🇸 162.216.149.11

🇺🇸 152.32.206.247

🇨🇳 118.113.15.18

🇺🇸 96.241.222.101

🇩🇪 69.5.169.222

🇹🇼 61.223.76.145

🇺🇸 192.178.65.17

🇧🇷 187.89.121.31

🇮🇳 103.69.26.3

🇹🇷 94.154.43.243

🇸🇪 83.233.147.8

🇫🇷 51.68.107.159

🇷🇺 5.101.198.154