JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.9.33.21

182.9.33.21 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 28%: ?

28%

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Medan, North Sumatra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.9.33.21

Whois 182.9.33.21

IP Abuse Reports for 182.9.33.21:

This IP address has been reported a total of 14 times from 12 distinct sources. 182.9.33.21 was first reported on October 22nd 2025, and the most recent report was 56 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 sthoyer.de	2026-09-01 04:59:10 (56 minutes ago)	Sep 1 06:59:08 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Sep 1 06:59:08 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=182.9.33.21 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=24985 DF PROTO=TCP SPT=4337 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 thecocasio	2026-09-01 02:12:41 (3 hours ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-09-01T02:12:41Z. show less	Port Scan
🇫🇷 security.rdmc.fr	2026-08-06 07:25:25 (3 weeks ago)	Port Scan Attack proto:TCP src:28295 dst:23	Port Scan
Anonymous	2026-07-22 00:12:05 (1 month ago)	denied SMB access attempt. destination port 445.	Port Scan Hacking
🇺🇸 kosada.com	2026-07-14 11:41:38 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 ipblock.com	2026-07-06 04:17:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-03 09:37:46 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Inamin	2026-06-15 03:01:24 (2 months ago)	182.9.33.21 - - [15/Jun/2026:10:03:37 +0800] "GET /index.php?returnto=%E5%90%9B%E3%81%A8%E3%80%81%E9 ... show more 182.9.33.21 - - [15/Jun/2026:10:03:37 +0800] "GET /index.php?returnto=%E5%90%9B%E3%81%A8%E3%80%81%E9%9B%A8%E3%81%AB%E6%AD%8C%E3%81%88%E3%81%B0&returntoquery=diff%3Dprev%26oldid%3D16632&title=%E7%89%B9%E6%AE%8A%3A%E5%BB%BA%E7%AB%8B%E5%B8%B3%E8%99%9F HTTP/2.0" 502 559 "-" "Mozilla/5.0 (Windows 95) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/24.0.867.0 Safari/535.1" 182.9.33.21 - - [15/Jun/2026:11:01:23 +0800] "GET /index.php?returnto=%E7%9F%A2%E6%BE%A4%E3%81%AB%E3%81%93%2F%E8%AA%9E%E9%9F%B3%E8%A1%A8%2FTH&returntoquery=action%3Dedit%26oldid%3D7379&title=%E7%89%B9%E6%AE%8A%3A%E5%BB%BA%E7%AB%8B%E5%B8%B3%E8%99%9F HTTP/2.0" 499 0 "-" "Opera/8.80.(X11; Linux i686; doi-IN) Presto/2.9.181 Version/11.00" ... show less	Brute-Force
🇫🇷 Sklurk	2026-06-11 13:46:19 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 MPL	2025-12-30 22:58:37 (8 months ago)	tcp/445	Port Scan
🇮🇹 VHosting	2025-11-26 16:20:52 (9 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇩 hermawan	2025-11-16 07:25:23 (9 months ago)	[Sun Nov 16 14:23:42.439797 2025] [security2:error] [pid 1702662:tid 140211556185792] [client 182.9. ... show more [Sun Nov 16 14:23:42.439797 2025] [security2:error] [pid 1702662:tid 140211556185792] [client 182.9.33.21:2656] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:id. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "728"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: i found within ARGS_NAMES:id: id request_line = GET /index.php?id=4037 HTTP/1.1 Request URI RAW = /index.php?id=4037 Request Basename = index.php"] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ATTACK"] [tag "capec/1000/152/137/15/460"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aRl7_ii9iekbZeURB8g9zAAAAA8"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1702704] [V4o7HDHgsRo] [aRl7_ii9iekbZeURB8g ... show less	Hacking Web App Attack
🇩🇪 KPS	2025-10-24 03:53:38 (10 months ago)	PortscanM	Port Scan
🇮🇩 hermawan	2025-10-22 02:52:34 (10 months ago)	[Wed Oct 22 09:16:11.917579 2025] [security2:error] [pid 923406:tid 139898957821632] [client 182.9.3 ... show more [Wed Oct 22 09:16:11.917579 2025] [security2:error] [pid 923406:tid 139898957821632] [client 182.9.33.21:22036] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=477&id=1079%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-juli-1-agustus-2016&start=160 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=477&id=1079%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-juli-1-agustus-2016&s..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aPg-a4ZJ0JrRZTD ... show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.74.154.37

🇺🇸 152.32.233.100

🇻🇳 116.110.150.8

🇩🇪 92.208.234.194

🇳🇱 46.129.2.74

🇫🇮 193.233.199.37

🇲🇽 187.190.181.77

🇧🇷 187.76.211.136

🇧🇷 177.52.83.161

🇨🇳 171.120.38.235

🇵🇱 109.205.211.110

🇧🇬 79.124.56.222

🇸🇬 47.245.116.98

🇨🇱 45.174.205.65

🇬🇧 35.203.211.77

🇩🇪 8.209.127.86

🇷🇺 5.101.64.6

🇺🇸 2607:f8b0:4001:c70::122

🇺🇸 195.184.76.190

🇦🇷 181.44.106.107