JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

182.4.134.171

Recent Activity

Abuse confidence score ?

4% Caution

6 reports

2 reporters · latest 1 day ago

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Mobile ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Malang, East Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 182.4.134.171

Export CSV

This IP address has been reported a total of 6 times from 2 distinct sources. 182.4.134.171 was first reported on April 22nd 2023, and the most recent report was 1 day ago. In the last 60 days, the only reporter location was: Indonesia with 1 report. The most common categories in these recent reports were: Hacking 1 time; Email Spam 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-10-03 00:23:38 (1 day ago)	[Sat Oct 03 06:08:42.776860 2026] [security2:error] [pid 789171:tid 140633695983296] [client 182.4.1 ... show more [Sat Oct 03 06:08:42.776860 2026] [security2:error] [pid 789171:tid 140633695983296] [client 182.4.134.171:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_HEADERS:referer" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "459"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_HEADERS:referer: android-app://com.google.android.googlequicksearchbox/ request_line = GET /b/bulanankediri.pdf HTTP/1.1 Request URI RAW = /b/bulanankediri.pdf Request Basename = bulanankediri.pdf"] [hostname "staklim-jatim.bmkg.go ... show less	Email Spam Hacking
🇮🇩 bps-statistics	2026-07-29 09:06:19 (2 months ago)	Frequent Web Application Attacks	Web App Attack
🇮🇩 hermawan	2026-04-10 08:45:07 (5 months ago)	Captured JA4H: ge20n_4f31e5243a47 \| Log: 182.4.134.171 - - [09/Apr/2026:23:57:00 +0700] "GET /offlin ... show more Captured JA4H: ge20n_4f31e5243a47 \| Log: 182.4.134.171 - - [09/Apr/2026:23:57:00 +0700] "GET /offline-service-worker-19-02-2025.js HTTP/2.0" 200 1246 "https://staklim-jatim.bmkg.go.id/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" ge20n_cache-control,user-agent,accept,sec-fetch-site,sec-fetch-mode,sec-fetch-dest,referer,accept-encoding,accept-language,host... ... show less	Email Spam Hacking
🇮🇩 hermawan	2025-11-28 13:17:13 (10 months ago)	[Fri Nov 28 20:07:01.523220 2025] [security2:error] [pid 216023:tid 140466243757760] [client 182.4.1 ... show more [Fri Nov 28 20:07:01.523220 2025] [security2:error] [pid 216023:tid 140466243757760] [client 182.4.134.171:59966] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "188"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: chatgpt found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-bulanan-iklim-ekstrim/555562523-infografis-bulanan-iklim-curah-hujan-maksimum-bulan-oktober-tahun-2025-di-provinsi-jawa-timur?utm_source=chatgpt.com HTTP/2.0 Request URI RAW = /index.php/informasi-iklim/infografis-iklim/infografis-bulanan/infografis-b..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-03-26 03:52:48 (1 year ago)	[Wed Mar 26 10:52:17.729695 2025] [security2:error] [pid 233145:tid 139871636395712] [client 182.4.1 ... show more [Wed Mar 26 10:52:17.729695 2025] [security2:error] [pid 233145:tid 139871636395712] [client 182.4.134.171:37894] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "47"] [id "911100"] [msg "Method is not allowed by policy"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: found within REQUEST_METHOD: OPTIONS request_line = OPTIONS /matomo-19-02-2025-5-2-2.js HTTP/2.0 Request URI RAW = /matomo-19-02-2025-5-2-2.js Request Basename = matomo-19-02-2025-5-2-2.js"] [severity "CRITICAL"] [ver "OWASP_CRS/4.10.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/274"] [tag "PCI/12.1"] [hostname "matomo.staklim-malang.info"] [uri "/matomo-19-02-2025 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2023-04-22 00:24:02 (3 years ago)	[Sat Apr 22 07:23:58.370321 2023] [security2:error] [pid 611024:tid 139988047935040] [client 182.4.1 ... show more [Sat Apr 22 07:23:58.370321 2023] [security2:error] [pid 611024:tid 139988047935040] [client 182.4.134.171:54916] [client 182.4.134.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:[\\"'`]\\\\s?(?:(?:n(?:and\|ot)\|(?:x?x)?or\|between\|\\\\\|\\\\\|\|and\|div\|&&)\\\\s+[\\\\s\\\\w]+=\\\\s?\\\\w+\\\\s?having\\\\s+\|like(?:\\\\s+[\\\\s\\\\w]+=\\\\s?\\\\w+\\\\s?having\\\\s+\|\\\\W?[\\"'`\\\\d])\|[^?\\\\w\\\\s=.,;)(]++\\\\s?[(@\\"'`]?\\\\s?\\\\w+\\\\W+\\\\w\|\\\\\\\\s*?\\\\w+\\\\W+[\\"'`])\|(?:unio ..." at REQUEST_COOKIES:opera-interstitial. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "908"] [id "942260"] [msg "Detects basic SQL authentication bypass attempts 2/3"] [data "Matched Data: \\x22:1,\\x22l found within REQUEST_COOKIES:opera-interstitial: {\\x22count\\x22:1,\\x22lastShow\\x22:null}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "a ... show less	Hacking Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 183.179.44.89

🇳🇬 102.203.106.82

🇻🇳 221.133.3.83

🇰🇷 220.126.8.143

🇮🇳 182.95.123.50

🇮🇳 168.144.115.97

🇮🇳 145.223.20.170

🇺🇸 119.13.192.166

🇮🇩 114.30.86.98

🇳🇱 77.239.124.50

🇺🇸 65.49.1.127

🇵🇱 51.83.133.35

🇪🇨 45.224.97.244

🇩🇪 45.8.149.90

🇩🇪 8.209.85.215

🇦🇷 190.55.156.159

🇸🇬 167.172.64.200

🇺🇸 162.216.149.112

🇫🇷 130.49.9.68

🇺🇸 66.132.186.224