JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.8.225.57

182.8.225.57 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 31%: ?

31%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Depok, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.8.225.57

Whois 182.8.225.57

IP Abuse Reports for 182.8.225.57:

This IP address has been reported a total of 14 times from 10 distinct sources. 182.8.225.57 was first reported on September 13th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 bps-statistics	2026-07-25 13:12:50 (15 hours ago)	Malicious Access	Brute-Force
🇫🇷 vtchost.com	2026-07-25 10:59:19 (17 hours ago)	Jul 25 12:59:18 vtchost kernel: [30077.144056] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11 ... show more Jul 25 12:59:18 vtchost kernel: [30077.144056] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=182.8.225.57 DST=161.97.181.152 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=15483 DF PROTO=TCP SPT=28401 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 kosada.com	2026-07-13 06:45:38 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-04 02:11:42 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-26 18:31:41 (4 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 hermawan	2026-06-24 03:33:09 (1 month ago)	[Wed Jun 24 10:33:08.308246 2026] [security2:error] [pid 99395:tid 139966071961280] [client 182.8.22 ... show more [Wed Jun 24 10:33:08.308246 2026] [security2:error] [pid 99395:tid 139966071961280] [client 182.8.225.57:5101] ModSecurity: Access denied with code 403 (phase 1). Match of "pm googlebot " against "REQUEST_HEADERS:From" required. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "117"] [id "448105"] [msg "BAD REQUEST Header From "] [data "Matched Data: host,user-agent,from,accept-language,cache-control,pragma,priority,sec-fetch-site,sec-fetch-mode,upgrade-insecure-requests,accept,accept-encoding found within REQUEST_HEADERS:From: bingbot(at)microsoft.com request_line = GET /index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562014-prediksi-bulanan-curah-hujan-bulan-september-tahun-2025-update-dari-analisis-bulan-mei-tahun-2025-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-bulanan/curah-hujan/3-bulan-ke-depan/555562014-prediksi-bulanan ... show less	Email Spam Hacking
🇹🇷 Threat.live	2026-06-17 04:00:07 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇫🇷 security.rdmc.fr	2026-05-24 03:24:57 (2 months ago)	Port Scan Attack proto:TCP src:37046 dst:23	Port Scan
Anonymous	2026-02-26 09:48:26 (4 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-12-24 08:28:27 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 182.8.225.57 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 182.8.225.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 03:28:20.787729 2025] [security2:error] [pid 32462:tid 32462] [client 182.8.225.57:12625] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|autodiscover.specialtywebservice.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "autodiscover.specialtywebservice.com"] [uri "/"] [unique_id "aUukJJEP7uE4fnJWDhtWXQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2025-12-16 23:44:47 (7 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2025-10-23 13:19:26 (9 months ago)	[Thu Oct 23 19:25:22.922209 2025] [security2:error] [pid 1107312:tid 140157125560000] [client 182.8. ... show more [Thu Oct 23 19:25:22.922209 2025] [security2:error] [pid 1107312:tid 140157125560000] [client 182.8.225.57:8275] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "180"] [id "40236"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=475&id=923%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-maret-2016&start=180 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=475&id=923%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-maret-2016&start=180 Reque..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aPoesjj9ZNnkQ-P ... show less	Hacking Web App Attack
🇮🇩 RasyiidWho	2025-10-12 07:06:53 (9 months ago)	ip112.20 . 2025-10-12 14:06:51 79714 [Warning] Access denied for user 'root'@'182.8.225.57' (using p ... show more ip112.20 . 2025-10-12 14:06:51 79714 [Warning] Access denied for user 'root'@'182.8.225.57' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇮🇩 hermawan	2025-09-13 16:44:12 (10 months ago)	[Sat Sep 13 23:42:55.983011 2025] [security2:error] [pid 958700:tid 140263383082688] [client 182.8.2 ... show more [Sat Sep 13 23:42:55.983011 2025] [security2:error] [pid 958700:tid 140263383082688] [client 182.8.225.57:49161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "%3Clink" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "69"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: %3Clink found within REQUEST_FILENAME: /component/tags/tag/index.php/%3Clink%20rel= request_line = GET /component/tags/tag/index.php/%3Clink%20rel= HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/component/tags/tag/index.php/%3Clink%20rel="] [unique_id "aMWfD749keHPA20hK_k2mgAD1R8"], referer https://staklim-jatim.bmkg.go.id/component/tags/tag/index.php/analisis-bulanan [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[958905] [aRmOdHHEoas] [aMWfD749keHPA20hK_k2mgAD1R8] keep_alive=[1] [2025-09-13 23:42:55.983018] [R:aMWfD749keHPA20hK_k2mgAD1R8] UA:'Mozilla/5. ... show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 216.26.246.179

🇩🇪 216.26.244.121

🇺🇸 184.105.247.254

🇨🇳 183.156.72.144

🇬🇧 172.64.192.57

🇩🇪 151.123.176.125

🇫🇷 91.231.89.2

🇫🇷 91.196.152.186

🇳🇱 89.21.67.189

🇺🇸 74.50.120.26

🇮🇩 43.248.213.232

🇩🇪 216.26.255.58

🇨🇦 216.26.239.212

🇨🇦 216.26.235.4

🇨🇦 216.26.234.136

🇧🇷 205.210.31.177

🇫🇷 195.154.59.122

🇨🇴 190.151.143.171

🇮🇷 185.116.161.214

🇫🇮 147.185.133.48