JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

182.4.135.227

Recent Activity

Abuse confidence score ?

4% Caution

7 reports

4 reporters · latest 20 hours ago

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Mobile ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Malang, East Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 182.4.135.227

Export CSV

This IP address has been reported a total of 7 times from 4 distinct sources. 182.4.135.227 was first reported on October 18th 2024, and the most recent report was 20 hours ago. In the last 60 days, the only reporter location was: Indonesia with 1 report. The most common categories in these recent reports were: Hacking 1 time; Email Spam 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-10-19 00:14:37 (20 hours ago)	[Mon Oct 19 07:14:36.210608 2026] [security2:error] [pid 723021:tid 139929556346560] [client 182.4.1 ... show more [Mon Oct 19 07:14:36.210608 2026] [security2:error] [pid 723021:tid 139929556346560] [client 182.4.135.227:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /index-v100.js HTTP/1.1 request_line = GET /index-v100.js HTTP/1.1 Request URI RAW = /index-v100.js Request Basename = index-v100.js"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index-v100.js"] [unique_id "atVg7Na13t3pzeY6lZLi3wAA ... show less	Email Spam Hacking
🇺🇸 kosada.com	2026-07-27 15:53:14 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2025-10-04 06:24:29 (1 year ago)	[Sat Oct 04 13:22:56.165929 2025] [security2:error] [pid 342513:tid 140074999060160] [client 182.4.1 ... show more [Sat Oct 04 13:22:56.165929 2025] [security2:error] [pid 342513:tid 140074999060160] [client 182.4.135.227:37646] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/140.0.7339.207 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; 24117RN ... show less	Hacking Web App Attack
Anonymous	2025-08-22 08:02:41 (1 year ago)	Web attack	Bad Web Bot Web App Attack
🇮🇩 hermawan	2025-05-28 17:02:19 (1 year ago)	[Thu May 29 00:01:48.867412 2025] [security2:error] [pid 464341:tid 139775852828352] [client 182.4.1 ... show more [Thu May 29 00:01:48.867412 2025] [security2:error] [pid 464341:tid 139775852828352] [client 182.4.135.227:54430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "themes" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "52"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: themes found within REQUEST_FILENAME: /TableFilter/TF_Themes/Default/TF_Default.css request_line = GET /TableFilter/TF_Themes/Default/TF_Default.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/TF_Themes/Default/TF_Default.css"] [unique_id "aDdBfFRadbqefQG-zdibugAAVxo"], referer https://staklim-jatim.bmkg.go.id/Prakicu_Harian_Kota_Malang-v1.html [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[464368] [ajfnIq074nM] [aDdBfFRadbqefQG-zdibugAAVxo] keep_alive=[1] [2025-05-29 00:01:48.867420] [R:aDdBfFRadbqefQG-zdibugAAVxo] UA:'Mozilla/5.0 (Window ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-03-18 02:14:34 (1 year ago)	[Tue Mar 18 09:13:04.026607 2025] [security2:error] [pid 327342:tid 140565429077696] [client 182.4.1 ... show more [Tue Mar 18 09:13:04.026607 2025] [security2:error] [pid 327342:tid 140565429077696] [client 182.4.135.227:33514] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "47"] [id "911100"] [msg "Method is not allowed by policy"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: found within REQUEST_METHOD: OPTIONS request_line = OPTIONS /matomo-19-02-2025-5-2-2.js HTTP/2.0 Request URI RAW = /matomo-19-02-2025-5-2-2.js Request Basename = matomo-19-02-2025-5-2-2.js"] [severity "CRITICAL"] [ver "OWASP_CRS/4.10.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272/220/274"] [tag "PCI/12.1"] [hostname "matomo.staklim-malang.info"] [uri "/matomo-19-02-2025 ... show less	Hacking Web App Attack
Anonymous	2024-10-18 09:56:19 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.45.60.44

🇨🇳 49.235.143.157

🇺🇸 40.76.249.14

🇮🇳 20.197.26.190

🇺🇸 216.25.89.119

🇩🇪 207.154.247.141

🇺🇸 192.30.83.92

🇨🇭 170.231.237.214

🇯🇵 157.7.104.60

🇵🇰 153.117.26.192

🇩🇪 144.76.19.72

🇮🇳 125.23.204.74

🇩🇪 109.160.32.45

🇨🇳 101.89.141.184

🇨🇦 85.217.149.57

🇫🇷 85.217.140.38

🇷🇺 83.174.218.98

🇺🇸 71.6.154.144

🇩🇪 43.165.7.135

🇸🇬 43.134.88.163