JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

182.9.48.49

Recent Activity

Abuse confidence score ?

22% Elevated

14 reports

9 reporters · latest 11 hours ago

ISP	PT. Telekomunikasi Selular (Telkomsel) Indonesia
Usage Type	Fixed Line ISP
ASN	AS23693
Domain Name	telkomsel.co.id
Country	🇮🇩 Indonesia
City	Medan, North Sumatra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 182.9.48.49

Export CSV

This IP address has been reported a total of 14 times from 9 distinct sources. 182.9.48.49 was first reported on November 8th 2025, and the most recent report was 11 hours ago. In the last 60 days, the top reporter locations were: France with 3 reports; Mongolia with 1 report; Sweden with 1 report. The most common categories in these recent reports were: Port Scan 4 times; IoT Targeted 1 time; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 sthoyer.de	2026-10-08 05:41:08 (11 hours ago)	Oct 8 07:41:07 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Oct 8 07:41:07 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=182.9.48.49 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=14377 DF PROTO=TCP SPT=1855 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-10-07 23:56:24 (16 hours ago)	Oct 8 01:56:23 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Oct 8 01:56:23 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=182.9.48.49 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=21605 DF PROTO=TCP SPT=1948 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-10-07 22:49:32 (17 hours ago)	Oct 8 00:49:30 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Oct 8 00:49:30 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=182.9.48.49 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=21501 DF PROTO=TCP SPT=5177 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-10-06 09:09:17 (2 days ago)	Honeypot hit: SMB traffic on port 445	IoT Targeted
🇸🇪 Tsumugi Kotobuki	2026-08-19 02:02:06 (1 month ago)	Port Scan on Honeypot \| Ports: 445/SMB \| Proto: TCP(1) \| Flags: all SYN \| TTL: 112 \| Len: 52B \| Win: ... show more Port Scan on Honeypot \| Ports: 445/SMB \| Proto: TCP(1) \| Flags: all SYN \| TTL: 112 \| Len: 52B \| Win: 8192(1) \| F2B/ufw-honeypot@2026-08-19T02:02:06Z show less	Port Scan Hacking
Anonymous	2026-07-12 17:57:56 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇩 hermawan	2026-06-20 01:28:44 (3 months ago)	[Sat Jun 20 08:28:41.211135 2026] [security2:error] [pid 1814518:tid 140500945319616] [client 182.9. ... show more [Sat Jun 20 08:28:41.211135 2026] [security2:error] [pid 1814518:tid 140500945319616] [client 182.9.48.49:4871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ajXsycrzUyjR9VlN2RsJxgAEBwM"], referer https://www.bing.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1814522] [GeNMVOUBAFw] [ajXsycrzUyjR9VlN2RsJxgAEBwM] keep_alive=[1] [2026-06-20 08:28:41.211139] [R:ajXsycrzUyjR9VlN2RsJxgAEBwM] UA:'Mozilla/5.0 (Linux; Android 13; SM-S908B Build/QP1A.190711.020) AppleWebKit/566.48 (KHTML, like Gecko) Firefox/102.0.1453.35 Mobile Safari/566.11' Host:'stak ... show less	Email Spam Hacking
Anonymous	2026-04-18 06:01:23 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-04-17 03:21:37 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇰🇿 Sipilen	2026-03-25 19:02:47 (6 months ago)	Possible port scan detected in MikroTik firewall logs: connection-state:new proto UDP proto UDP len ... show more Possible port scan detected in MikroTik firewall logs: connection-state:new proto UDP proto UDP len 132. Total attempts in last 15m: 3 show less	Port Scan
🇺🇸 octageeks.com	2026-02-28 05:14:31 (7 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇫🇷 Hiigara	2026-02-23 04:30:01 (7 months ago)	connection attempt : 182.9.48.49 on port : tcp/1433 (MSSQL)	Port Scan
🇫🇷 Kurom	2026-02-05 03:36:52 (8 months ago)	Port scanning detected on company server. Targeted ports: [445]	Port Scan Hacking
🇮🇩 hermawan	2025-11-08 19:59:39 (10 months ago)	[Sun Nov 09 02:58:53.524824 2025] [security2:error] [pid 372784:tid 139644056925888] [client 182.9.4 ... show more [Sun Nov 09 02:58:53.524824 2025] [security2:error] [pid 372784:tid 139644056925888] [client 182.9.48.49:62202] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=625&id=555555587%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-maret-3-april-2017&start=140 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=625&id=555555587%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-28-maret-3..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aQ-g_cIZSO ... show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 158.51.121.232

🇨🇳 118.196.68.35

🇳🇱 45.115.26.59

🇧🇪 198.235.24.198

🇺🇸 198.211.101.183

🇸🇬 193.37.32.129

🇺🇸 162.243.71.89

🇺🇸 91.230.168.176

🇺🇸 66.132.159.18

🇨🇳 2408:8207:6040:d110:8581:b23a:e287:f313

🇩🇪 216.26.244.69

🇨🇳 117.11.88.37

🇨🇳 111.26.106.119

🇺🇸 69.12.89.83

🇮🇩 69.5.23.222

🇺🇸 65.181.127.40

🇺🇸 52.70.209.13

🇳🇱 45.148.10.152

🇻🇳 42.1.70.131

🇨🇦 35.203.83.240