JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.9.2.80

182.9.2.80 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 63%: ?

63%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Surakarta, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.9.2.80

Whois 182.9.2.80

IP Abuse Reports for 182.9.2.80:

This IP address has been reported a total of 16 times from 15 distinct sources. 182.9.2.80 was first reported on September 28th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-09-02 04:51:23 (1 hour ago)	Email account brute force: 1 attempts were recorded from 182.9.2.80 2026-09-02T05:17:03+02:00 warnin ... show more Email account brute force: 1 attempts were recorded from 182.9.2.80 2026-09-02T05:17:03+02:00 warning: unknown[182.9.2.80]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇵🇾 SecOpsSL	2026-09-02 04:47:24 (1 hour ago)	Sep 2 01:47:23 mail postfix/submission/smtpd[21231]: warning: unknown[182.9.2.80]: SASL PLAIN authe ... show more Sep 2 01:47:23 mail postfix/submission/smtpd[21231]: warning: unknown[182.9.2.80]: SASL PLAIN authentication failed: authentication failure show less	Email Spam Brute-Force
🇬🇷 setupgr	2026-09-02 04:13:26 (2 hours ago)	(smtpauth) Failed SMTP AUTH login from 182.9.2.80 (ID/Indonesia/Central Java/Surakarta/-/[AS23693 PT ... show more (smtpauth) Failed SMTP AUTH login from 182.9.2.80 (ID/Indonesia/Central Java/Surakarta/-/[AS23693 PT. Telekomunikasi Selular]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 07:13:23 dovecot_plain authenticator failed for H=(localhost) [182.9.2.80]:23539: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇪🇸 didevi	2026-09-02 04:08:29 (2 hours ago)	SPAM or Brute force attack detected	Email Spam Brute-Force
🇧🇬 sanitariu	2026-09-01 07:31:59 (22 hours ago)	Sep 1 10:31:58 dri postfix/smtpd[2952575]: warning: unknown[182.9.2.80]: SASL PLAIN authentication ... show more Sep 1 10:31:58 dri postfix/smtpd[2952575]: warning: unknown[182.9.2.80]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=nasko ... show less	Brute-Force
🇺🇸 bouvier.me	2026-09-01 06:58:23 (23 hours ago)	2026-09-01T02:58:22.654803sitens3 postfix/submission/smtpd[2261045]: warning: unknown[182.9.2.80]: S ... show more 2026-09-01T02:58:22.654803sitens3 postfix/submission/smtpd[2261045]: warning: unknown[182.9.2.80]: SASL PLAIN authentication failed: authentication failure 2026-09-01T02:58:22.910465sitens3 postfix/submission/smtpd[2261045]: lost connection after AUTH from unknown[182.9.2.80] 2026-09-01T02:58:22.910620sitens3 postfix/submission/smtpd[2261045]: disconnect from unknown[182.9.2.80] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Web Spam Brute-Force Exploited Host
🇮🇹 CoreTech srl	2026-08-31 13:42:34 (1 day ago)	"SMTP Login failed": count(IP)=10.0MAIL4-new 15:37:56.407 [2.192.130.235] SMTP Login failed: Incorre ... show more "SMTP Login failed": count(IP)=10.0MAIL4-new 15:37:56.407 [2.192.130.235] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 15:37:56.407 [2.192.130.235] SMTP Login failed: Invalid username ([email protected]) and password combination.is-65b7aeb8 15:38:00.936 [195.182.211.98] SMTP Login failed: Username or password is incorrect.is-65b7aeb8 15:38:00.936 [195.182.211.98] SMTP Login failed: User [jsystem.gaitrasporti] not foundSmartermail 15:39:32.340 [182.9.2.80] SMTP Login failed: Invalid username ([email protected]) and password combination.Smartermail 15:39:32.340 [182.9.2.80] SMTP Login failed: Incorrect password for user [[email protected]]is-63909a28 15:39:42.109 [110.168.140.225] SMTP Login failed: Invalid username ([email protected]) and password combination.is-63909a28 15:39:42.109 [110.168.140.225] SMTP Login failed: User [brian] not foundis-6411d9d7 15:40:06.207 [203.128.10.219] SMTP Login failed: Incorrect password for user [valentina@thechicattitu show less	Brute-Force
🇬🇧 gigatech	2026-08-31 12:25:03 (1 day ago)	SMTP Login Attempt	Brute-Force
🇿🇦 maximonline.co.za	2026-08-31 09:10:04 (1 day ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇮🇹 VHosting	2026-08-31 04:25:03 (2 days ago)	Detected mail brute force attack from different servers	Brute-Force
🇮🇩 hermawan	2026-06-02 05:57:31 (3 months ago)	[Tue Jun 02 12:57:27.075872 2026] [security2:error] [pid 179631:tid 139858038126272] [client 182.9.2 ... show more [Tue Jun 02 12:57:27.075872 2026] [security2:error] [pid 179631:tid 139858038126272] [client 182.9.2.80:30940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ah5wxwZ0iYpp85uGmBSOHQAA0Rg"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[179656] [cDtV/L7JzGI] [ah5wxwZ0iYpp85uGmBSOHQAA0Rg] keep_alive=[1] [2026-06-02 12:57:27.075875] [R:ah5wxwZ0iYpp85uGmBSOHQAA0Rg] UA:'Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id:443' ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-04-05 13:50:55 (4 months ago)	04/05/2026-20:50:32.302245 [Drop] [] [1:2100000495:0] Suricata match TLS JA4 scan Uniq Zeek no 49 ... show more 04/05/2026-20:50:32.302245 [Drop] [] [1:2100000495:0] Suricata match TLS JA4 scan Uniq Zeek no 495 with hash_t13d1513h2_8daaf6152771_eca864cca44a [**] [Classification: (null)] [Priority: 3] {TCP} 182.9.2.80:64954 -> 103.166.156.58:443 ... show less	Email Spam Hacking
Anonymous	2026-02-04 02:39:43 (6 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 stinpriza	2025-12-03 18:35:33 (8 months ago)	Web App Attack	Web App Attack
🇦🇺 MAGIC	2025-11-26 01:22:47 (9 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.250.11.133

🇸🇬 2404:6800:4003:c20::124

🇨🇳 183.62.46.229

🇳🇱 45.148.10.141

🇺🇸 40.124.178.207

🇬🇧 35.203.210.162

🇺🇸 24.45.235.179

🇩🇪 8.211.39.61

🇳🇱 185.93.89.42

🇷🇺 178.178.194.135

🇭🇰 45.116.78.92

🇨🇳 39.185.158.149

🇪🇸 34.175.151.16

🇸🇬 207.166.168.11

🇧🇷 201.28.176.31

🇬🇧 193.163.125.254

🇺🇸 162.216.150.165

🇺🇸 147.185.132.150

🇮🇳 122.15.129.26

🇫🇷 91.196.152.205