AbuseIPDB » 182.8.178.72
182.8.178.72
This IP was reported 6 times. Confidence of
Abuse
is 23% : ?
ISP
PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type
Fixed Line ISP
ASN
AS23693
Domain Name
telkomsel.co.id
Country
🇮🇩
Indonesia
City
Balikpapan, East Kalimantan
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 182.8.178.72 :
This IP address has been reported a total of
6
times from
3 distinct
sources.
182.8.178.72 was first reported on
June 2nd 2026 , and the most recent report was
16 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-17 08:49:05
(16 hours ago)
(mod_security) mod_security (id:240335) triggered by 182.8.178.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 182.8.178.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 04:48:59.318995 2026] [security2:error] [pid 23056:tid 23056] [client 182.8.178.72:23739] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 182.8.178.72 (+1 hits since last alert)|nordicbuilders.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nordicbuilders.net"] [uri "/xmlrpc.php"] [unique_id "ajJfe1bOlvzSREHhKBX6WQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-17 05:09:23
(19 hours ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇺🇸
TPI-Abuse
2026-06-17 02:27:47
(22 hours ago)
(mod_security) mod_security (id:240335) triggered by 182.8.178.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 182.8.178.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 22:27:41.731708 2026] [security2:error] [pid 8801:tid 8809] [client 182.8.178.72:17618] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 182.8.178.72 (+1 hits since last alert)|artmarialeon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "artmarialeon.com"] [uri "/xmlrpc.php"] [unique_id "ajIGHQ0ZJUtygSWFcl6bcgAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-06-15 07:30:01
(2 days ago)
(xmlrpc) Failed xmlrpc access from 182.8.178.72 (ID/Indonesia/-): 5 in the last 3600 secs (0-122)
Hacking
🇺🇸
TPI-Abuse
2026-06-15 06:20:32
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 182.8.178.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 182.8.178.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:20:27.977670 2026] [security2:error] [pid 9364:tid 9364] [client 182.8.178.72:28803] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 182.8.178.72 (+1 hits since last alert)|edgecomix.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edgecomix.com"] [uri "/xmlrpc.php"] [unique_id "ai-ZqyrFAdSrVWM_F2j_wAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
check-the-sum.fr
2026-06-02 08:05:06
(2 weeks ago)
Port Scanning
Port Scan
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: