JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.253.50.123

182.253.50.123 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 3%: ?

ISP	Biznet Prepaid
Usage Type	Fixed Line ISP
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Surabaya, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.253.50.123

Whois 182.253.50.123

IP Abuse Reports for 182.253.50.123:

This IP address has been reported a total of 17 times from 13 distinct sources. 182.253.50.123 was first reported on March 5th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-06-04 10:00:40 (7 hours ago)	User login to application from malicious IP 182.253.50.123.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 182.253.50.123.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-04 06:00:40 (11 hours ago)	User login to application from malicious IP 182.253.50.123.. Threat Score: 4.4/10 (MEDIUM). Confiden ... show more User login to application from malicious IP 182.253.50.123.. Threat Score: 4.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 75%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-04 05:00:12 (12 hours ago)	User login to application from malicious IP 182.253.50.123.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 182.253.50.123.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 london2038.com	2025-12-27 03:08:25 (5 months ago)	Connection atttempts against closed TCP ports Dec 27 04:03:19 BLOCK SRC=182.253.50.123 LEN=48 TOS=0x ... show more Connection atttempts against closed TCP ports Dec 27 04:03:19 BLOCK SRC=182.253.50.123 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=32527 DF PROTO=TCP SPT=13564 DPT=3306 WINDOW=8192 RES=0x00 SYN Dec 27 04:06:56 BLOCK SRC=182.253.50.123 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=9070 DF PROTO=TCP SPT=7749 DPT=1433 WINDOW=8192 RES=0x00 SYN Dec 27 04:06:59 BLOCK SRC=182.253.50.123 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=10197 DF PROTO=TCP SPT=7749 DPT=1433 WINDOW=8192 RES=0x00 SYN show less	Port Scan
🇮🇩 hermawan	2025-11-19 11:48:29 (6 months ago)	[Wed Nov 19 18:47:39.614071 2025] [security2:error] [pid 224372:tid 140590749484736] [client 182.253 ... show more [Wed Nov 19 18:47:39.614071 2025] [security2:error] [pid 224372:tid 140590749484736] [client 182.253.50.123:1085] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "199"] [id "40236"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: .%2 found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/using-joomla/extensions/components/search-component/search?searchword=curah%20hujan%20kab.%20jombang&searchphrase=all HTTP/2.0 Request URI RAW = /index.php/using-joomla/extensions/components/search-component/search?searchword=curah%20hujan%20kab.%20jombang&searchphrase=all Request Basename = search"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/using-joomla/extensions/components/search-component/search"] [uniq ... show less	Hacking Web App Attack
🇧🇷 OuverneY	2025-05-26 04:00:14 (1 year ago)		Port Scan
🇩🇪 stalker.to	2025-05-22 13:48:09 (1 year ago)	Datacenter Proxy	Web Spam
🇩🇪 stalker.to	2025-05-21 17:12:19 (1 year ago)	Datacenter Proxy	Web Spam
🇺🇸 www.winos.me	2025-04-24 12:55:21 (1 year ago)	nginx 4xx	Web App Attack
Anonymous	2025-04-24 12:31:33 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇮🇩 hermawan	2024-11-30 10:00:06 (1 year ago)	[Sat Nov 30 09:01:46.252679 2024] [security2:error] [pid 1078101:tid 126615682516672] [client 182.25 ... show more [Sat Nov 30 09:01:46.252679 2024] [security2:error] [pid 1078101:tid 126615682516672] [client 182.253.50.123:8605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: en-US,en;q=0.9,id;q=0.8,zh-CN;q=0.7,zh;q=0.6 request_line = GET /TableFilter/system-v170.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/system-v170.css"] [unique_id "Z0pyCqgLBiMYmgxqdkrOVQACbgM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1078105] [KXH6sV/Cc8s] [Z0pyCqgLBiMYmgxqdkrOVQACbgM] keep_alive=[1] [2024-11-30 09:01:46.252686] [R:Z0pyCqgLBiMYmgxqdkrOVQACbgM] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 ... show less	Hacking Web App Attack
🇧🇷 diego	2024-04-29 00:00:27 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇮🇱 gene_uchiha	2024-03-23 11:01:51 (2 years ago)	03/23/2024-13:01:51.686986 182.253.50.123 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	Hacking
🇵🇱 bmino.pl	2024-03-13 05:03:46 (2 years ago)	Autoban 182.253.50.123 BLOCK ACCESS	Brute-Force
🇦🇹 urnilxfgbez	2024-03-09 23:45:00 (2 years ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.78.132.164

🇨🇳 39.171.240.69

🇬🇧 35.203.210.152

🇨🇴 143.105.99.147

🇮🇩 108.136.131.13

🇸🇦 51.36.43.91

🇯🇵 47.91.17.9

🇺🇸 44.29.179.108

🇺🇦 213.231.44.87

🇳🇱 192.142.24.39

🇨🇦 184.64.214.182

🇨🇳 171.114.226.208

🇸🇬 148.66.142.9

🇪🇪 109.206.241.199

🇨🇳 106.12.240.38

🇺🇸 66.180.194.227

🇭🇰 42.200.66.116

🇫🇷 4.211.84.189

🇰🇷 222.98.122.37

🇻🇳 221.132.21.185