JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

182.253.242.250

Recent Activity

Abuse confidence score ?

20% Elevated

11 reports

7 reporters · latest 2 days ago

ISP	Biznet Networks
Usage Type	Fixed Line ISP
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Medan, North Sumatra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 182.253.242.250

This IP address has been reported a total of 11 times from 7 distinct sources. 182.253.242.250 was first reported on November 26th 2025, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: Indonesia with 2 reports; United States of America with 2 reports; Czechia with 1 report. The most common categories in these recent reports were: Port Scan 2 times; Bad Web Bot 2 times; Web App Attack 1 time; Brute-Force 1 time; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 FallingGong2833	2026-09-28 08:27:15 (2 days ago)	tcp/445	Port Scan
Anonymous	2026-09-20 12:13:02 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 鬼影233	2026-09-20 08:28:36 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇮🇩 FallingGong2833	2026-09-14 09:33:28 (2 weeks ago)	tcp/445	Port Scan
🇺🇸 鬼影233	2026-09-13 15:10:09 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-21 17:37:22 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-11 22:29:08 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-26 04:40:50 (3 months ago)	[Fri Jun 26 11:40:46.534066 2026] [security2:error] [pid 962868:tid 140397849331392] [client 182.253 ... show more [Fri Jun 26 11:40:46.534066 2026] [security2:error] [pid 962868:tid 140397849331392] [client 182.253.242.250:4721] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:^\|b[\\"'\\\\)\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?@_a-\\\\{])?\\\\x5c?u[\\"'\\\$\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?@_a-\\\\{])?\\\\x5c?s[\\"'\\\$\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\\(\\\\*\\\\-0- ..." at ARGS_NAMES:id. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "3256"] [id "932350"] [msg "Remote Command Execution: Direct Unix Command Execution (No Arguments)"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: id found within ARGS_NAMES:id: id request_line = GET /index.php?option=com_content&view=article&id=84&catid=112&Itemid=576 HTTP/2.0 Request URI RAW = ... show less	Email Spam Hacking
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61	DDoS Attack
🇮🇩 RasyiidWho	2025-12-24 07:26:26 (9 months ago)	ip112.20 . 2025-12-24 14:26:20 190229 [Warning] Access denied for user 'root'@'182.253.242.250' (usi ... show more ip112.20 . 2025-12-24 14:26:20 190229 [Warning] Access denied for user 'root'@'182.253.242.250' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇩🇪 SMARTNET	2025-11-26 07:21:34 (10 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.139.70

🇻🇳 171.244.5.213

🇭🇰 152.32.192.213

🇺🇸 99.92.204.98

🇫🇷 91.231.89.11

🇳🇱 91.92.42.29

🇸🇬 45.78.206.253

🇦🇷 38.210.59.77

🇦🇷 181.46.185.236

🇮🇩 175.103.43.134

🇺🇸 165.227.87.191

🇰🇷 125.181.182.165

🇺🇸 91.230.168.2

🇳🇱 77.239.124.207

🇵🇱 57.128.239.181

🇿🇲 41.63.63.211

🇧🇪 34.76.117.81

🇬🇧 5.252.83.29

🇹🇼 220.128.141.164

🇧🇪 207.175.29.113