JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.253.50.93

182.253.50.93 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 22%: ?

22%

ISP	Biznet Prepaid
Usage Type	Fixed Line ISP
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Kediri, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.253.50.93

Whois 182.253.50.93

IP Abuse Reports for 182.253.50.93:

This IP address has been reported a total of 13 times from 10 distinct sources. 182.253.50.93 was first reported on August 28th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-05 07:55:31 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 182.253.50.93 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 182.253.50.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 03:55:27.661465 2026] [security2:error] [pid 14895:tid 14895] [client 182.253.50.93:28574] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.253.50.93 (+1 hits since last alert)\|ruthbalser.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ruthbalser.org"] [uri "/xmlrpc.php"] [unique_id "akoN7xmjmSahxU4LUxrWiQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-07-05 07:52:56 (1 day ago)	{"ClientAddr":"182.253.50.93:37549","ClientHost":"182.253.50.93","ClientPort":"37549","ClientUsernam ... show more {"ClientAddr":"182.253.50.93:37549","ClientHost":"182.253.50.93","ClientPort":"37549","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":126635868,"OriginContentSize":418,"OriginDuration":123501578,"OriginStatus":403,"Overhead":3134290,"RequestAddr":"www.cleveradmin.de","RequestContentSize":710,"RequestCount":342407,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-07-05T09:52:37.046114005+02:00","StartUTC":"2026-07-05T07:52:37.046114005Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-05T09:52:37+02:00"} {"ClientAddr":"182.253.50.93:37549","ClientHost":"182.253.50.93","C ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 07:16:07 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 182.253.50.93 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 182.253.50.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 03:16:02.261569 2026] [security2:error] [pid 24149:tid 24149] [client 182.253.50.93:30405] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.253.50.93 (+1 hits since last alert)\|drwolberg.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drwolberg.com"] [uri "/xmlrpc.php"] [unique_id "akoEsiCRN6TNl_esFwDEqQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-06-29 12:32:36 (1 week ago)	(wordpress) Failed wordpress login from 182.253.50.93 (ID/Indonesia/-)	Brute-Force
🇮🇹 VHosting	2025-12-24 04:55:51 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 xmission.com	2025-12-11 06:06:28 (6 months ago)	Blocked by UFW (TCP on 9101) Source port: 11334 TTL: 111 Packet length: 48 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 11334 TTL: 111 Packet length: 48 TOS: 0x00 This report (for 182.253.50.93) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 HoneyPot-FrPri	2025-12-09 23:29:11 (6 months ago)	1765322950 - 12/10/2025 00:29:10 Host: 182.253.50.93/182.253.50.93 Port: 1088 TCP Blocked ...	Port Scan
🇮🇩 Hamzah Yakub	2025-07-18 11:44:18 (11 months ago)	Hacking Attempt /.git/config	Hacking Web App Attack
🇮🇪 RoboSOC	2025-06-20 10:41:41 (1 year ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇧🇷 diego	2024-12-07 07:07:39 (1 year ago)	[rede-164-29] 12/07/2024-04:07:38.899988, 182.253.50.93, Protocol: 6, ET SCAN Suspicious inbound to ... show more [rede-164-29] 12/07/2024-04:07:38.899988, 182.253.50.93, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇧🇷 diego	2024-12-07 06:18:07 (1 year ago)	[rede-arem1] 12/07/2024-03:18:07.698474, 182.253.50.93, Protocol: 6, ET SCAN Suspicious inbound to m ... show more [rede-arem1] 12/07/2024-03:18:07.698474, 182.253.50.93, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇧🇷 diego	2024-12-07 00:41:37 (1 year ago)	[rede-164-29] 12/06/2024-21:41:36.968405, 182.253.50.93, Protocol: 6, ET SCAN Suspicious inbound to ... show more [rede-164-29] 12/06/2024-21:41:36.968405, 182.253.50.93, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
Anonymous	2024-08-28 03:14:24 (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 152.32.169.7

🇻🇳 146.196.64.107

🇬🇧 195.96.139.192

🇺🇸 162.216.150.139

🇮🇳 122.165.249.37

🇦🇿 82.194.9.14

🇧🇬 79.124.49.226

🇺🇸 64.62.197.32

🇺🇸 47.206.63.169

🇳🇱 45.148.10.157

🇮🇳 2001:4490:4e95:c407:a48f:637f:59fa:b6ec

🇺🇦 185.17.124.92

🇮🇩 179.65.193.61

🇳🇱 176.65.148.136

🇩🇪 161.35.25.183

🇮🇳 103.88.76.27

🇮🇩 103.84.7.190

🇺🇸 96.78.175.36

🇫🇷 85.217.140.22

🇩🇪 69.5.169.254