JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.95.82.97

103.95.82.97 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	Evedin Technologies
Usage Type	Fixed Line ISP
ASN	AS133982
Domain Name	excitel.com
Country	🇮🇳 India
City	Deoli, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.95.82.97

Whois 103.95.82.97

IP Abuse Reports for 103.95.82.97:

This IP address has been reported a total of 18 times from 9 distinct sources. 103.95.82.97 was first reported on July 24th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 4acf41a8-b801-4675-a9cd-4cf95dcec3e7	DDoS Attack
🇺🇸 RAP	2026-05-11 16:49:06 (3 months ago)	2026-05-11 16:49:06 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇬🇧 PeravixGroup	2026-05-10 17:44:49 (3 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 RAP	2026-05-10 09:41:54 (3 months ago)	2026-05-10 09:41:54 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 xmission.com	2026-05-08 23:56:56 (3 months ago)	Blocked by UFW (TCP on 23) Source port: 47414 TTL: 41 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 47414 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 103.95.82.97) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-05-07 18:13:33 (3 months ago)	Unauthorized connection to Telnet port 23	Port Scan
🇬🇧 PeravixGroup	2026-05-07 10:15:13 (3 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
Anonymous	2026-05-07 07:49:02 (3 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 RAP	2026-05-06 18:39:08 (3 months ago)	2026-05-06 18:39:08 UTC Unauthorized activity to TCP port 2323. Telnet	Port Scan
🇳🇱 cybertailor	2026-04-28 20:00:13 (3 months ago)	103.95.82.97 - - [29/Apr/2026:00:57:35 +0500] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 548 "- ... show more 103.95.82.97 - - [29/Apr/2026:00:57:35 +0500] "GET /wp-content/uploads/dump.sql HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 2026/04/29 01:00:11 [error] 6869#6869: 7138742 open() "/var/www/sysrq/public/_profiler/empty/search/results" failed (2: No such file or directory), client: 103.95.82.97, server: sysrq.in, request: "GET /public/_profiler/empty/search/results?limit=10 HTTP/1.1", host: "sysrq.in" 2026/04/29 01:00:11 [error] 6869#6869: 7138742 open() "/var/www/sysrq/public/_profiler/empty/search/results" failed (2: No such file or directory), client: 103.95.82.97, server: sysrq.in, request: "GET /public/_profiler/empty/search/results?limit=10 HTTP/1.1", host: "sysrq.in" ... show less	Web App Attack
🇳🇱 cybertailor	2026-04-28 16:50:37 (3 months ago)	103.95.82.97 - - [28/Apr/2026:20:27:29 +0500] "GET /db.bak HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; ... show more 103.95.82.97 - - [28/Apr/2026:20:27:29 +0500] "GET /db.bak HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 103.95.82.97 - - [28/Apr/2026:21:27:36 +0500] "GET /config/configuration.yml HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 103.95.82.97 - - [28/Apr/2026:21:27:36 +0500] "GET /config/configuration.yml HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 103.95.82.97 - - [28/Apr/2026:21:50:35 +0500] "GET /config/secrets.yml HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 cybertailor	2026-04-28 15:27:31 (3 months ago)	103.95.82.97 - - [28/Apr/2026:20:27:28 +0500] "GET /db_backup.bak HTTP/1.1" 404 146 "-" "Mozilla/5.0 ... show more 103.95.82.97 - - [28/Apr/2026:20:27:28 +0500] "GET /db_backup.bak HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.1 (x64 de)" 103.95.82.97 - - [28/Apr/2026:20:27:28 +0500] "GET /www.bak HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 103.95.82.97 - - [28/Apr/2026:20:27:28 +0500] "GET /localhost.bak HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 103.95.82.97 - - [28/Apr/2026:20:27:28 +0500] "GET /dbdump.bak HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 103.95.82.97 - - [28/Apr/2026:20:27:28 +0500] "GET /data.bak HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15" ... show less	Web App Attack
🇵🇱 Ma ma	2026-04-28 15:06:00 (3 months ago)	page scanning	Web App Attack
🇳🇱 exxos	2025-08-01 02:41:52 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-31 01:50:25 (1 year ago)	HTTP1.x attacks	DDoS Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 13.60.253.214

🇱🇹 213.176.24.161

🇦🇷 201.177.19.238

🇨🇱 200.126.40.71

🇦🇷 200.107.225.118

🇹🇳 197.17.102.177

🇹🇬 196.171.77.233

🇷🇺 195.88.127.171

🇦🇷 190.174.118.117

🇨🇳 182.46.62.245

🇧🇷 177.23.92.243

🇺🇸 157.230.228.6

🇨🇳 144.123.77.32

🇧🇷 138.118.241.39

🇨🇳 123.178.210.73

🇨🇳 115.53.167.183

🇺🇸 93.152.208.42

🇺🇦 91.203.62.213

🇳🇱 91.92.42.104

🇫🇷 85.217.140.39