AbuseIPDB » 182.253.48.100
182.253.48.100 was found in our database!
This IP was reported 10 times. Confidence of
Abuse
is 31% : ?
ISP
Biznet Networks
Usage Type
Fixed Line ISP
ASN
AS17451
Domain Name
biznetnetworks.com
Country
๐ฎ๐ฉ
Indonesia
City
Jakarta, Jakarta
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 182.253.48.100 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
182.253.48.100 was first reported on
January 16th 2025 , and the most recent report was
14 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-09-02 11:00:21
(14 hours ago)
Large-scale coordinated botnet (3M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ...
show more
Large-scale coordinated botnet (3M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Attack Signature Blocked: /wishlist/index/add/product/11987/form_key/fIJaBAHycNwlvKfW/ | UA: Opera/9.65.(Windows NT 5.01; hr-HR) Presto/2.9.166 Version/12.00 | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
RAP
2026-08-28 11:29:04
(5 days ago)
2026-08-28 11:29:04 UTC Unauthorized activity to TCP port 22. SSH
SSH
๐บ๐ธ
MPL
2026-08-28 08:42:39
(5 days ago)
tcp/22 (8 or more attempts)
Port Scan
Anonymous
2026-08-28 03:28:53
(5 days ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
๐ฎ๐ฉ
sockominfo
2026-05-22 16:00:43
(3 months ago)
User login to application during non-business hours. Threat Score: 6.6/10 (HIGH). Confidence: 40%. C ...
show more
User login to application during non-business hours. Threat Score: 6.6/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ฎ๐ฉ
hermawan
2026-05-08 22:39:07
(3 months ago)
[Sat May 09 05:01:09.005635 2026] [security2:error] [pid 171696:tid 140170327213760] [client 182.253 ...
show more
[Sat May 09 05:01:09.005635 2026] [security2:error] [pid 171696:tid 140170327213760] [client 182.253.48.100:9472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "623"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /ga-choise-v6.js HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/ga-choise-v6.js"] [unique_id "af5dJPLojstFBhj967Lb1AABWAQ"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[171734] [BSnCiNXGUP0] [af5dJPLojstFBhj967Lb1AABWAQ] keep_alive=[1] [2026-05-09 05:01:09.005644] [R:af5dJPLojstFBhj967Lb1AABWAQ] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74' Ho
...
show less
Email Spam
Hacking
Anonymous
2025-06-15 20:22:40
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
Anonymous
2025-06-05 02:02:31
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
Anonymous
2025-06-03 05:20:35
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
๐บ๐ธ
SiliSoftware
2025-01-16 06:42:04
(1 year ago)
/clients
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: