JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.210.166.12

180.210.166.12 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 37%: ?

37%

ISP	Premium Connectivity Limited
Usage Type	Fixed Line ISP
ASN	AS138536
Domain Name	pmcon.net
Country	🇧🇩 Bangladesh
City	Narayanganj, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.210.166.12

Whois 180.210.166.12

IP Abuse Reports for 180.210.166.12:

This IP address has been reported a total of 26 times from 22 distinct sources. 180.210.166.12 was first reported on July 4th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-10-13 15:44:51 (3 days ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-03 07:05:00 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 180.210.166.12 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 180.210.166.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 03:04:44.717528 2026] [security2:error] [pid 11139:tid 11139] [client 180.210.166.12:33356] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|armandselmwoodpark.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "armandselmwoodpark.com"] [uri "/"] [unique_id "asCpDFWaBcgOh5-RzFwehQAAAAU"], referer: https://onewaylinkbuilding.site/dir/results-focused-backlinks-12782 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-13 15:10:37 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇳🇱 EGP Abuse Dept	2026-09-05 11:34:54 (1 month ago)	Unsolicited connection to port 465	Port Scan Hacking
🇷🇸 Scan	2026-09-05 01:50:22 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-09-04 16:33:54 (1 month ago)	Port Scan Attack proto:TCP src:49876 dst:23	Port Scan
🇺🇸 NetVexor	2026-09-02 17:30:49 (1 month ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇫🇷 pwozniak	2026-09-02 12:39:29 (1 month ago)	warning: unknown[180.210.166.12]: SASL LOGIN authentication failed	Brute-Force
🇨🇦 Psycho Solutions LLC	2026-08-27 11:24:24 (1 month ago)	Active SSH brute-force detected. Logs: 2026-08-27T11:17:29.617425+00:00 AVM-144221 sshd-session[4083 ... show more Active SSH brute-force detected. Logs: 2026-08-27T11:17:29.617425+00:00 AVM-144221 sshd-session[408355]: error: kex_exchange_identification: read: Connection reset by peer 2026-08-27T11:17:51.761075+00:00 AVM-144221 sshd-session[413717]: Connection fro... show less	SSH Brute-Force
🇧🇪 fpoulet	2026-08-27 04:52:17 (1 month ago)	Blocked by Fail2Ban (Postfix BruteForce)	Brute-Force SSH
🇺🇸 kosada.com	2026-08-25 11:08:44 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 garrymenata	2026-08-23 22:42:56 (1 month ago)	180.210.166.12 - - [24/Aug/2026:01:23:00 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ... show more 180.210.166.12 - - [24/Aug/2026:01:23:00 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 180.210.166.12 - - [24/Aug/2026:01:23:01 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 180.210.166.12 - - [24/Aug/2026:01:23:04 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
Anonymous	2026-08-22 01:23:49 (1 month ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇫🇷 Zkillu	2026-08-19 20:34:25 (1 month ago)	UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 8443 across 38 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 8443 across 38 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 20:34:25 (1 month ago)	UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 8443 across 38 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 8443 across 38 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇮 176.65.134.52

🇷🇴 92.118.39.234

🇺🇸 66.66.139.251

🇵🇱 45.138.12.65

🇰🇷 220.80.246.94

🇯🇲 207.204.114.55

🇧🇷 206.42.56.78

🇨🇿 185.126.198.201

🇭🇰 154.83.17.226

🇧🇷 152.67.48.120

🇺🇸 150.136.214.177

🇮🇳 103.248.35.78

🇳🇱 93.174.95.106

🇳🇱 87.101.2.113

🇳🇱 87.101.2.9

🇨🇭 46.19.142.170

🇸🇨 41.86.38.150

🇨🇳 39.170.37.133

🇵🇪 38.250.161.179

🇳🇱 34.6.60.19