This IP address has been reported a total of
10
times from
8 distinct
sources.
182.253.55.79 was first reported on
December 20th 2024 , and the most recent report was
2 days ago Switzerland
with 1
report.
The most common categories in these recent reports were:
Exploited Host
1
time;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
ALPHANET
2026-10-10 23:30:34
(2 days ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇮🇩
hermawan
2026-04-27 02:19:54
(5 months ago)
[Mon Apr 27 09:10:12.688132 2026] [security2:error] [pid 295481:tid 139786111133376] [client 182.253 ...
show more
[Mon Apr 27 09:10:12.688132 2026] [security2:error] [pid 295481:tid 139786111133376] [client 182.253.55.79:18903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "623"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "ae7FhIsC8EVSiFqvfR6oqQAAARA"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[295550] [5TpgnacsX9Q] [ae7FhIsC8EVSiFqvfR6oqQAAARA] keep_alive=[0] [2026-04-27 09:10:12.688136] [R:ae7FhIsC8EVSiFqvfR6oqQAAARA] UA
...
show less
Email Spam
Hacking
🇮🇩
hermawan
2025-12-18 04:18:37
(9 months ago)
[Thu Dec 18 11:18:36.320787 2025] [security2:error] [pid 831940:tid 139693338388160] [client 182.253 ...
show more
[Thu Dec 18 11:18:36.320787 2025] [security2:error] [pid 831940:tid 139693338388160] [client 182.253.55.79:13538] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^$" at REQUEST_HEADERS:Cookie. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "2717"] [id "911331"] [msg "Empty Cookie kosong"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: found within REQUEST_HEADERS:Cookie: request_line = GET /index.php/profil/meteorologi/list-of-all-tags/prakiraan-bulanan-daerah-potensi-banjir-provinsi-jawa-timur-tahun-2021 HTTP/2.0 Request URI RAW = /index.php/profil/meteorologi/list-of-all-tags/prakiraan-bulanan-daerah-potensi-banjir-provinsi-jawa-timur-tahun-2021 Request Basename = prakiraan-bulanan-daerah-potensi-banjir-provinsi-jawa-timur-tah..."] [severity "NOTICE"] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag
...
show less
Hacking
Web App Attack
🇩🇪
Grizzlytools
2025-11-23 06:21:01
(10 months ago)
Kingcopy(AI-IDS)RouterOS: Portscanner detected.
Port Scan
🇧🇾
StatsMe
2025-11-12 22:25:26
(11 months ago)
2025-11-12T08:20:00.670001+0300
ET SCAN Suspicious inbound to MSSQL port 1433
Port Scan
🇩🇪
iNetWorker
2025-11-11 08:30:49
(11 months ago)
firewall-block, port(s): 1433/tcp
Port Scan
2025-09-20 05:13:49
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2025-09-15 05:16:10
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇩🇪
marzzzello
2025-06-16 00:49:03
(1 year ago)
Ports: 5x 17428
Port Scan
2024-12-20 09:54:44
(1 year ago)
Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
Showing 1 to
10
of 10 reports
