JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.9.193.4

182.9.193.4 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 36%: ?

36%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Padang, West Sumatra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.9.193.4

Whois 182.9.193.4

IP Abuse Reports for 182.9.193.4:

This IP address has been reported a total of 14 times from 9 distinct sources. 182.9.193.4 was first reported on October 6th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-01 11:16:14 (2 days ago)	182.9.193.4 - - [01/Jul/2026:13:15:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.1; ... show more 182.9.193.4 - - [01/Jul/2026:13:15:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.1; WordPress/6.2; http://site59292362.com" 182.9.193.4 - - [01/Jul/2026:13:16:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com" 182.9.193.4 - - [01/Jul/2026:13:16:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "WordPress.com; https://wordpress.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-01 11:00:50 (2 days ago)	182.9.193.4 - - [01/Jul/2026:13:00:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by Wo ... show more 182.9.193.4 - - [01/Jul/2026:13:00:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com" 182.9.193.4 - - [01/Jul/2026:13:00:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com" 182.9.193.4 - - [01/Jul/2026:13:00:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 05:16:01 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 182.9.193.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 182.9.193.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:15:55.271865 2026] [security2:error] [pid 13026:tid 13026] [client 182.9.193.4:3484] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.9.193.4 (+1 hits since last alert)\|verdeprofundo.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "verdeprofundo.net"] [uri "/xmlrpc.php"] [unique_id "akSiizXPAcYfPrwYi3b21QAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 03:40:43 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 182.9.193.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 182.9.193.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 23:40:37.890256 2026] [security2:error] [pid 29772:tid 29798] [client 182.9.193.4:25466] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.9.193.4 (+1 hits since last alert)\|danelandia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "danelandia.com"] [uri "/xmlrpc.php"] [unique_id "akSMNc6nAICkylsTfrG-0QAAAZU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-01 02:39:24 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 ConsulHosting	2026-06-30 15:18:17 (2 days ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 14:40:09 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 182.9.193.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 182.9.193.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 10:40:01.872123 2026] [security2:error] [pid 18285:tid 18285] [client 182.9.193.4:34205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.9.193.4 (+1 hits since last alert)\|morninginc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "morninginc.com"] [uri "/xmlrpc.php"] [unique_id "akPVQf0TBFmsC03fOI6UaQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 13:35:19 (2 days ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=inradis.com; logs=/var/log/httpd/domains/inradis.com.log; s ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=inradis.com; logs=/var/log/httpd/domains/inradis.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇵🇱 sefinek.net	2026-04-21 15:23:29 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.4798.1384 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 sthoyer.de	2026-04-16 04:17:39 (2 months ago)	Apr 16 06:17:38 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Apr 16 06:17:38 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=182.9.193.4 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=22905 DF PROTO=TCP SPT=19834 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-04-16 03:36:01 (2 months ago)	Apr 16 05:36:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Apr 16 05:36:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=182.9.193.4 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=13891 DF PROTO=TCP SPT=10908 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-04-06 03:10:54 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇩 hermawan	2025-10-07 17:16:25 (8 months ago)	[Tue Oct 07 23:44:50.372442 2025] [security2:error] [pid 48175:tid 140371662124736] [client 182.9.19 ... show more [Tue Oct 07 23:44:50.372442 2025] [security2:error] [pid 48175:tid 140371662124736] [client 182.9.193.4:13418] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=474&id=866%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-januari-1-pebruari-2016&start=80 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=474&id=866%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-januari-1-pebruari-2..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOVDgpYODfJ80Hav ... show less	Hacking Web App Attack
Anonymous	2025-10-06 00:32:26 (8 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 115.96.129.40

🇳🇱 161.35.148.20

🇮🇹 151.0.160.69

🇺🇸 148.105.13.30

🇮🇳 144.16.1.241

🇮🇳 115.96.115.57

🇺🇸 66.132.195.62

🇦🇿 62.164.144.83

🇧🇷 45.205.1.223

🇨🇳 222.176.201.95

🇪🇨 200.105.254.102

🇬🇧 188.240.59.27

🇺🇸 167.172.223.46

🇨🇳 114.228.118.18

🇧🇩 114.130.156.105

🇿🇦 102.64.34.65

🇷🇺 84.51.206.158

🇳🇱 45.148.10.141

🇺🇸 18.97.19.172

🇺🇸 17.137.162.3