JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.9.2.67

182.9.2.67 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 34%: ?

34%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Surakarta, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.9.2.67

Whois 182.9.2.67

IP Abuse Reports for 182.9.2.67:

This IP address has been reported a total of 20 times from 17 distinct sources. 182.9.2.67 was first reported on September 10th 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-22 08:43:26 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 182.9.2.67 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 182.9.2.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 04:43:18.275831 2026] [security2:error] [pid 22084:tid 22118] [client 182.9.2.67:20251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.9.2.67 (+1 hits since last alert)\|ianajewellery.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ianajewellery.com"] [uri "/xmlrpc.php"] [unique_id "aolhJglL5ICq-qo5ps0_IAAAAdc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-08-22 08:27:19 (20 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇬🇧 Apache	2026-08-22 08:08:52 (21 hours ago)	(mod_security) mod_security (id:240335) triggered by 182.9.2.67 (ID/Indonesia/-): 5 in the last 300 ... show more (mod_security) mod_security (id:240335) triggered by 182.9.2.67 (ID/Indonesia/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:57:13 (22 hours ago)	(mod_security) mod_security (id:240335) triggered by 182.9.2.67 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 182.9.2.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:57:07.631777 2026] [security2:error] [pid 10631:tid 10631] [client 182.9.2.67:17239] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.9.2.67 (+1 hits since last alert)\|vanmeer.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vanmeer.info"] [uri "/xmlrpc.php"] [unique_id "aolIQ0h_jdrf5H6y1XoG8AAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-08-15 23:46:37 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇺🇸 kosada.com	2026-07-25 13:00:21 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-12 12:42:30 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-11 13:25:33 (2 months ago)	[Thu Jun 11 20:25:32.643047 2026] [security2:error] [pid 1725365:tid 139768527144640] [client 182.9. ... show more [Thu Jun 11 20:25:32.643047 2026] [security2:error] [pid 1725365:tid 139768527144640] [client 182.9.2.67:22442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-iklim"] [unique_id "aiq3THAZWSTMl01TqG9NzQABUwo"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1725376] [qvxoS/qgOo4] [aiq3THAZWSTMl01TqG9NzQABUwo] keep_alive=[1] [2026-06-11 20:25:32.643052] [R:aiq3THAZWSTMl01TqG9NzQABUwo] U ... show less	Email Spam Hacking
🇬🇧 PeravixGroup	2026-04-28 15:24:19 (3 months ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇮🇹 VHosting	2026-01-18 16:19:46 (7 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-20 19:18:48 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇧🇷 diego	2025-11-21 05:42:18 (9 months ago)	[rede-164-29] 11/21/2025-02:42:17.749452, 182.9.2.67, Protocol: 6, ET SCAN Suspicious inbound to MSS ... show more [rede-164-29] 11/21/2025-02:42:17.749452, 182.9.2.67, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
🇩🇪 Nerdscave Hosting	2025-11-21 04:07:24 (9 months ago)	[SMB Honeypot Report] Timestamp: 2025-11-21 04:06:54 UTC Port: 47340 No credentials captured Attack ... show more [SMB Honeypot Report] Timestamp: 2025-11-21 04:06:54 UTC Port: 47340 No credentials captured Attack Type: Unauthorized SMB connection attempt show less	Port Scan Hacking Brute-Force
Anonymous	2025-11-15 01:33:23 (9 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇫🇷 Coco Bongo	2025-10-09 12:17:04 (10 months ago)	1760012223 - 10/09/2025 14:17:03 Host: 182.9.2.67/182.9.2.67 Port: 445 TCP Blocked ...	Port Scan

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.137

🇺🇸 165.227.58.88

🇳🇱 91.92.42.129

🇳🇱 45.148.10.141

🇨🇳 223.109.255.168

🇺🇸 216.25.89.86

🇸🇬 188.215.235.35

🇮🇳 185.244.8.39

🇸🇬 143.198.220.117

🇮🇳 139.59.80.16

🇨🇳 117.160.29.2

🇻🇳 103.200.23.107

🇲🇽 69.67.148.175

🇺🇸 65.49.1.152

🇨🇳 36.104.144.114

🇮🇹 213.149.216.10

🇦🇷 198.12.40.107

🇳🇱 195.178.110.137

🇩🇪 193.124.20.244

🇮🇳 152.32.159.177