JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.253.66.234

182.253.66.234 was found in our database!

This IP was reported 2,731 times. Confidence of Abuse is 10%: ?

10%

ISP	RUMAH_SAKIT_UMUM_DAERAH_SOEGIRI_KABUPATEN_LAMONGAN
Usage Type	Fixed Line ISP
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Lamongan, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.253.66.234

Whois 182.253.66.234

IP Abuse Reports for 182.253.66.234:

This IP address has been reported a total of 2,731 times from 760 distinct sources. 182.253.66.234 was first reported on April 18th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-02 01:45:42 (1 week ago)	[Tue Jun 02 08:45:38.506589 2026] [security2:error] [pid 41240:tid 139858254223040] [client 182.253. ... show more [Tue Jun 02 08:45:38.506589 2026] [security2:error] [pid 41240:tid 139858254223040] [client 182.253.66.234:52550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /images/gempa/webp/20260602060116.mmi.jpg.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/gempa/webp/20260602060116.mmi.jpg.webp"] [unique_id "ah41wih3ADFqj8JD3meEHwAAQAM"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[41244] [N2XLd/t8wWI] [ah41wih3ADFqj8JD3meEHwAAQAM] keep_alive=[1] [2026-06-02 08:45:38.506592] [R:ah41wih3ADFqj8JD3meEHwAAQAM] UA:'Mozilla/5.0 (Linux; Android 14; SM-A236U Build/UP1A.231005.007; ) AppleWebKit ... show less	Email Spam Hacking
🇮🇹 VHosting	2026-04-26 10:14:39 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 ghostwarriors	2025-01-06 15:21:28 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇬🇧 AdrianT	2024-07-22 16:56:58 (1 year ago)	SSH brute force	Brute-Force SSH
🇬🇧 AdrianT	2024-07-17 16:45:04 (1 year ago)	SSH brute force	Brute-Force SSH
🇯🇵 zwh	2024-07-13 17:36:38 (1 year ago)	SSH Brute-Force	Brute-Force SSH
🇳🇱 xTom	2024-07-13 05:19:08 (1 year ago)	2024-07-13T05:10:05.200935+00:00 cdn-nl sshd[1708966]: Invalid user newtest from 182.253.66.234 port ... show more 2024-07-13T05:10:05.200935+00:00 cdn-nl sshd[1708966]: Invalid user newtest from 182.253.66.234 port 58910 2024-07-13T05:16:53.968479+00:00 cdn-nl sshd[1709188]: Invalid user ansible from 182.253.66.234 port 47854 2024-07-13T05:19:07.911912+00:00 cdn-nl sshd[1709323]: Invalid user root1 from 182.253.66.234 port 53466 ... show less	Brute-Force SSH
🇬🇧 www.elivecd.org	2024-07-13 04:40:59 (1 year ago)	2024-07-13T05:39:02.011583+01:00 hostvu2 sshd[3941460]: pam_unix(sshd:auth): authentication failure; ... show more 2024-07-13T05:39:02.011583+01:00 hostvu2 sshd[3941460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.66.234 user=root 2024-07-13T05:39:03.861560+01:00 hostvu2 sshd[3941460]: Failed password for root from 182.253.66.234 port 57314 ssh2 2024-07-13T05:39:59.624957+01:00 hostvu2 sshd[3941525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.66.234 user=root 2024-07-13T05:40:01.966034+01:00 hostvu2 sshd[3941525]: Failed password for root from 182.253.66.234 port 43786 ssh2 2024-07-13T05:40:58.966429+01:00 hostvu2 sshd[3941773]: Invalid user postgres from 182.253.66.234 port 58486 ... show less	SSH
🇧🇷 diego	2024-07-13 04:39:17 (1 year ago)	[rede-44-49] (sshd) Failed SSH login from 182.253.66.234 (ID/Indonesia/-): 5 in the last 3600 secs; ... show more [rede-44-49] (sshd) Failed SSH login from 182.253.66.234 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 13 01:36:06 sshd[15330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.66.234 user=[USERNAME] Jul 13 01:36:08 sshd[15330]: Failed password for [USERNAME] from 182.253.66.234 port 39378 ssh2 Jul 13 01:38:15 sshd[15377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.66.234 user=[USERNAME] Jul 13 01:38:17 sshd[15377]: Failed password for [USERNAME] from 182.253.66.234 port 59546 ssh2 Jul 13 01: show less	Port Scan
🇺🇸 paradoxnetworks	2024-07-13 04:07:02 (1 year ago)	2024-07-13T04:01:33.688348+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[2976635]: Invalid user user11 fr ... show more 2024-07-13T04:01:33.688348+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[2976635]: Invalid user user11 from 182.253.66.234 port 56874 2024-07-13T04:02:28.762617+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[2976702]: Invalid user es from 182.253.66.234 port 42788 2024-07-13T04:07:02.098417+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[2976951]: Invalid user steamcmd from 182.253.66.234 port 57092 ... show less	Brute-Force SSH
🇩🇪 formality	2024-07-13 04:01:24 (1 year ago)	Invalid user user11 from 182.253.66.234 port 40062	Brute-Force SSH
🇺🇸 paradoxnetworks	2024-07-13 00:16:45 (1 year ago)	2024-07-13T00:11:14.095636+00:00 edge-noc-mci01.int.pdx.net.uk sshd[3042823]: Invalid user admin1 fr ... show more 2024-07-13T00:11:14.095636+00:00 edge-noc-mci01.int.pdx.net.uk sshd[3042823]: Invalid user admin1 from 182.253.66.234 port 39120 2024-07-13T00:14:03.059945+00:00 edge-noc-mci01.int.pdx.net.uk sshd[3043305]: Invalid user postgres from 182.253.66.234 port 53968 2024-07-13T00:16:45.377983+00:00 edge-noc-mci01.int.pdx.net.uk sshd[3043818]: Invalid user testuser from 182.253.66.234 port 40630 ... show less	Brute-Force SSH
🇦🇺 circajian	2024-07-12 23:55:23 (1 year ago)	Jul 13 09:23:01 ms2 sshd[1082677]: Invalid user testuser from 182.253.66.234 port 47042 Jul 13 09:25 ... show more Jul 13 09:23:01 ms2 sshd[1082677]: Invalid user testuser from 182.253.66.234 port 47042 Jul 13 09:25:23 ms2 sshd[1083817]: Invalid user test from 182.253.66.234 port 52890 ... show less	Brute-Force SSH
🇦🇺 circajian	2024-07-12 23:38:58 (1 year ago)	Jul 13 09:07:50 ms2 sshd[1076701]: Invalid user debian from 182.253.66.234 port 52040 Jul 13 09:08:5 ... show more Jul 13 09:07:50 ms2 sshd[1076701]: Invalid user debian from 182.253.66.234 port 52040 Jul 13 09:08:57 ms2 sshd[1077426]: Invalid user esuser from 182.253.66.234 port 40668 ... show less	Brute-Force SSH
🇩🇪 mueller-nils.com	2024-07-12 22:26:12 (1 year ago)	Jul 13 00:25:16 [host] sshd[378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jul 13 00:25:16 [host] sshd[378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 Jul 13 00:25:18 [host] sshd[378]: Failed password for invalid user ubuntu from 182.253.66.234 port 5 Jul 13 00:25:18 [host] sshd[378]: Disconnected from invalid user ubuntu 182.253.66.234 port 56752 [p Jul 13 00:26:08 [host] sshd[454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 Jul 13 00:26:11 [host] sshd[454]: Failed password for root from 182.253.66.234 port 43138 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 2731 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 220.246.66.209

🇰🇷 115.68.208.117

🇸🇬 101.32.240.31

🇷🇺 95.25.184.127

🇧🇬 79.124.49.226

🇧🇷 2804:d51:7aeb:f000:4089:1dec:4c40:6bb8

🇨🇦 2607:f8b0:4023:1807::127

🇹🇼 198.235.24.82

🇩🇿 154.242.254.113

🇭🇰 152.32.170.230

🇰🇷 58.224.62.29

🇨🇳 58.52.110.6

🇸🇬 47.84.110.105

🇨🇳 14.116.172.24

🇷🇺 5.101.64.6

🇺🇸 205.210.31.72

🇦🇴 154.71.157.97

🇷🇺 109.174.104.74

🇺🇸 100.29.192.115

🇫🇷 51.158.120.121