JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.8.65.73

182.8.65.73 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 4%: ?

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Surabaya, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.8.65.73

Whois 182.8.65.73

IP Abuse Reports for 182.8.65.73:

This IP address has been reported a total of 11 times from 9 distinct sources. 182.8.65.73 was first reported on October 1st 2025, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-27 17:44:56 (19 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-02-12 03:25:16 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-02-08 20:52:56 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇫🇷 centurion	2026-01-12 01:49:26 (5 months ago)	Blocked by UFW on dc00 [23/tcp] Source port: 15895 TTL: 50 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on dc00 [23/tcp] Source port: 15895 TTL: 50 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇦🇹 urnilxfgbez	2025-12-08 23:45:00 (6 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 ras07	2025-12-08 10:00:07 (6 months ago)	SSH login attempts with user root.	Brute-Force SSH
Anonymous	2025-12-05 04:47:45 (6 months ago)	Port Scanner	Port Scan
🇮🇪 RoboSOC	2025-12-02 16:59:27 (6 months ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇧🇷 diego	2025-12-02 03:38:37 (6 months ago)	[rede-168-134] 12/02/2025-00:38:37.429386, 182.8.65.73, Protocol: 6, ET SCAN Suspicious inbound to M ... show more [rede-168-134] 12/02/2025-00:38:37.429386, 182.8.65.73, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
🇮🇩 hermawan	2025-11-17 15:27:12 (7 months ago)	[Mon Nov 17 22:23:57.328757 2025] [security2:error] [pid 23153:tid 140391654311616] [client 182.8.65 ... show more [Mon Nov 17 22:23:57.328757 2025] [security2:error] [pid 23153:tid 140391654311616] [client 182.8.65.73:6897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "%3Clink" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "83"] [id "448101"] [msg "BAD REQUEST FILENAME - Detected and Blocked"] [data "Matched Data: %3Clink found within REQUEST_FILENAME: /index.php/profil/meteorologi/list-of-all-tags/%3Clink%20rel= request_line = GET /index.php/profil/meteorologi/list-of-all-tags/%3Clink%20rel= HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-of-all-tags/%3Clink%20rel="] [unique_id "aRs-CqdSxNdWAJ11ZcE9hAACgw4"], referer https://staklim-malang.info/index.php/profil/meteorologi/list-of-all-tags/analisis-distribusi-curah-hujan-jawa-timur-bulanan [staklim-malang.info] [staklim-malang.info] top=[23168] [e7Vb7wvTtrs] [aRs-CqdSxNdWAJ11ZcE9hAACgw4] keep_alive=[ ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-10-01 04:20:58 (8 months ago)	[Wed Oct 01 11:20:25.479258 2025] [security2:error] [pid 305110:tid 140132706387648] [client 182.8.6 ... show more [Wed Oct 01 11:20:25.479258 2025] [security2:error] [pid 305110:tid 140132706387648] [client 182.8.65.73:16915] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/140.0.7339.155 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 13; 220333QAG ... show less	Hacking Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 212.47.73.124

🇩🇪 159.100.6.125

🇭🇰 118.193.33.249

🇨🇳 106.13.69.159

🇪🇬 102.46.13.195

🇮🇷 78.109.200.147

🇷🇺 45.91.64.6

🇮🇳 43.229.88.5

🇺🇸 40.124.173.90

🇬🇧 35.203.210.50

🇯🇵 20.63.216.87

🇺🇸 13.92.26.47

🇻🇳 210.211.125.205

🇧🇷 189.20.181.138

🇧🇷 187.16.96.250

🇺🇸 172.238.188.122

🇨🇦 142.44.233.65

🇨🇳 106.13.104.49

🇻🇳 103.98.149.56

🇳🇱 91.92.40.66