JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.253.124.96

182.253.124.96 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 52%: ?

52%

ISP	PREPAID-BIZNET-HOME
Usage Type	Fixed Line ISP
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Cikampek, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.253.124.96

Whois 182.253.124.96

IP Abuse Reports for 182.253.124.96:

This IP address has been reported a total of 29 times from 18 distinct sources. 182.253.124.96 was first reported on March 19th 2021, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2026-07-03 22:17:48 (19 hours ago)	Unauthorized web scan.	Web App Attack
🇺🇸 ne1for23	2026-07-03 17:06:50 (1 day ago)	182.253.124.96 - - [03/Jul/2026:17:06:50 +0000] "POST /xmlrpc.php HTTP/1.1" 403 153 "-" "Mozilla/5.0 ... show more 182.253.124.96 - - [03/Jul/2026:17:06:50 +0000] "POST /xmlrpc.php HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/93.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇳🇱 BlueWire Hosting	2026-07-03 14:03:53 (1 day ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 abdubhai	2026-07-03 13:35:12 (1 day ago)	182.253.124.96 - - [03/Jul/2026: ...	Brute-Force
🇩🇪 hackthetime	2026-07-03 11:50:11 (1 day ago)	$method: /xmlrpc.php: $body	Web App Attack
🇫🇮 bittiguru.fi	2026-07-03 07:20:24 (1 day ago)	182.253.124.96 - [03/Jul/2026:10:20:23 +0300] "POST /xmlrpc.php HTTP/1.1" 404 52543 "-" "Mozilla/5.0 ... show more 182.253.124.96 - [03/Jul/2026:10:20:23 +0300] "POST /xmlrpc.php HTTP/1.1" 404 52543 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/99.0.0.0 Safari/537.36" "-" 182.253.124.96 - [03/Jul/2026:10:20:23 +0300] "POST /xmlrpc.php HTTP/1.1" 404 52535 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/98.0.0.0 Safari/537.36" "-" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 rh24	2026-07-02 16:14:48 (2 days ago)	(xmlrpc_405) XMLRPC-Bot 405 182.253.124.96 (ID/Indonesia/-)	Hacking
🇦🇺 Block Rockin' Beats	2026-07-02 11:55:03 (2 days ago)	Scanning for exploitable scripts	Hacking Web App Attack
🇮🇳 Mcshield.org	2025-12-01 06:55:25 (7 months ago)	Did not receive identification string from 182.253.124.96 port 57305	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-07-25 19:32:59 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 182.253.124.96 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 182.253.124.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 25 15:32:52.780894 2025] [security2:error] [pid 4170:tid 4170] [client 182.253.124.96:16725] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|souldata.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "souldata.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aIPb5Fi_F2xlMzOSelGObAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-25 12:15:01 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 182.253.124.96 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 182.253.124.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 25 08:14:55.420480 2025] [security2:error] [pid 4056:tid 4056] [client 182.253.124.96:40240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|newcastle91.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newcastle91.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aIN1P7Bt-hEGzkpahouIEQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-07-25 06:09:09 (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /xmlrpc.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-07-25 04:07:28 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇭🇰 www.winos.me	2025-04-27 22:53:41 (1 year ago)	wordpress attack	Web App Attack
🇭🇰 www.winos.me	2025-04-12 04:16:43 (1 year ago)	wordpress attack	Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.243.5.69

🇨🇳 116.179.37.247

🇨🇳 116.179.37.123

🇮🇩 110.136.66.126

🇺🇸 104.234.53.44

🇫🇷 91.231.89.48

🇳🇱 89.21.67.162

🇺🇸 73.232.56.77

🇰🇷 52.231.71.190

🇩🇪 51.68.171.141

🇳🇱 37.49.228.224

🇺🇸 12.0.0.6

🇩🇪 2400:cb00:696:1000:105e:4b4a:b30d:a657

🇨🇳 182.244.0.150

🇳🇱 178.16.54.22

🇮🇩 175.103.54.172

🇪🇸 158.158.47.147

🇮🇱 147.235.223.222

🇨🇳 125.124.226.217

🇨🇳 116.179.37.23