JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.9.193.60

182.9.193.60 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 32%: ?

32%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Padang, West Sumatra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.9.193.60

Whois 182.9.193.60

IP Abuse Reports for 182.9.193.60:

This IP address has been reported a total of 53 times from 9 distinct sources. 182.9.193.60 was first reported on December 26th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-07-12 00:18:45 (4 hours ago)	Scanning for port/service exploits on tpc-027.mach3builders.nl	Port Scan Hacking
🇺🇸 kosada.com	2026-07-10 13:02:05 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-07 12:43:37 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 182.9.193.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 182.9.193.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 08:43:30.313332 2026] [security2:error] [pid 5498:tid 5498] [client 182.9.193.60:8931] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.9.193.60 (+1 hits since last alert)\|zost.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "zost.net"] [uri "/xmlrpc.php"] [unique_id "aiVncu-yEufNtd5ENwZzDAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-06 12:34:59 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 182.9.193.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 182.9.193.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 08:34:56.106458 2026] [security2:error] [pid 7255:tid 7267] [client 182.9.193.60:16727] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.9.193.60 (+1 hits since last alert)\|whatismetamodern.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "whatismetamodern.com"] [uri "/xmlrpc.php"] [unique_id "aiQT8A5E9dykk1JXnKPkKwAAAUg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-06 10:35:55 (1 month ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/-	Web App Attack
🇫🇷 masterguru	2026-06-06 07:40:43 (1 month ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-06 07:11:45 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 182.9.193.60 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 182.9.193.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 03:11:38.111653 2026] [security2:error] [pid 1798:tid 1798] [client 182.9.193.60:20216] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.9.193.60 (+1 hits since last alert)\|wwfstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "wwfstudio.com"] [uri "/xmlrpc.php"] [unique_id "aiPIKh8fHUv31wOs49dJFQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 bitblockit	2026-05-29 13:03:15 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 37552/tcp. Observed event time: 2026-05-29 13:03:15 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-05-29 12:58:10 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 37552/tcp. Observed event time: 2026-05-29 12:58:10 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-05-29 12:53:02 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 37552/tcp. Observed event time: 2026-05-29 12:53:02 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-05-29 12:48:55 (1 month ago)	Unsolicited malicious or automated access attempt observed on a honeypot sensor. Honeypot decoy type ... show more Unsolicited malicious or automated access attempt observed on a honeypot sensor. Honeypot decoy type: Honeytrap. Decoy listen port: 37552/tcp. Observed event time: 2026-05-29 12:48:55 UTC. Report from passive honeypot only; no payload or credentials included. show less	Hacking
🇺🇸 bitblockit	2026-05-29 12:44:49 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 37552/tcp. Observed event time: 2026-05-29 12:44:49 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-05-29 12:39:41 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 37552/tcp. Observed event time: 2026-05-29 12:39:41 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-05-29 12:34:31 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 37552/tcp. Observed event time: 2026-05-29 12:34:31 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-05-29 12:30:22 (1 month ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 37552/tcp. Observed event time: 2026-05-29 12:30:22 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.237

🇳🇱 185.223.235.31

🇳🇱 185.223.235.3

🇩🇪 167.94.146.57

🇺🇸 162.217.100.41

🇺🇸 162.216.150.15

🇨🇳 101.126.54.36

🇷🇺 83.222.2.174

🇳🇱 81.19.216.104

🇺🇸 64.62.197.103

🇹🇭 202.29.232.244

🇨🇳 124.251.110.186

🇨🇳 117.79.226.11

🇨🇳 111.35.36.48

🇺🇸 103.215.75.19

🇳🇱 89.21.67.185

🇷🇴 80.94.95.242

🇳🇱 45.148.10.157

🇬🇧 35.203.211.173

🇧🇷 186.205.19.60