JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.231.36.25

170.231.36.25 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 22%: ?

22%

ISP	COOPERATIVA ELECTRICA Y DE SERVICIOS PUBLICOS LUJANENSE LIMITADA
Usage Type	Fixed Line ISP
ASN	AS27851
Hostname(s)	25.36.231.170.ppp.lujan-bue.coopenet.net.ar
Domain Name	cooperativadelujan.com.ar
Country	🇦🇷 Argentina
City	Lujan, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.231.36.25

Whois 170.231.36.25

IP Abuse Reports for 170.231.36.25:

This IP address has been reported a total of 23 times from 18 distinct sources. 170.231.36.25 was first reported on April 28th 2023, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ALPHANET	2026-10-16 03:45:15 (21 hours ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-09-13 01:46:57 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[101]= ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[101]=50&topics[102]=70&topics[103]=44&topics[104]=38 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-11 00:16:15 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-04 06:32:23 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:26:25 (1 month ago)	UDP flood (DDoS) vs AS215599: 6093 pkts / 8.71 MB to UDP 80/8443 across 621 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 6093 pkts / 8.71 MB to UDP 80/8443 across 621 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:26:25 (1 month ago)	UDP flood (DDoS) vs AS215599: 6093 pkts / 8.71 MB to UDP 80/8443 across 621 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 6093 pkts / 8.71 MB to UDP 80/8443 across 621 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-06-29 11:14:49 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-21 15:54:36 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-21 13:27:30 (3 months ago)	Image scraping bot bypassing firewall/robots.txt restrictions in getImage.asp	Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: fd8a75e9-7ad9-4605-bec7-39ad26683952	DDoS Attack
🇺🇸 TPI-Abuse	2025-12-30 23:14:28 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 170.231.36.25 (25.36.231.170.ppp.lujan-bue.coop ... show more (mod_security) mod_security (id:210492) triggered by 170.231.36.25 (25.36.231.170.ppp.lujan-bue.coopenet.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 18:14:23.836597 2025] [security2:error] [pid 2307:tid 2307] [client 170.231.36.25:60970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.calvarycavaliers.org"] [uri "/wp-config.php.tmp"] [unique_id "aVRcz4CE8-_YrvX7TTtSlQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-22 20:30:02 (9 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-25 05:10:27 (10 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-17 20:03:40 (10 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-16 02:02:32 (11 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.158.5.71

🇺🇸 195.184.76.35

🇺🇦 176.120.101.247

🇨🇳 116.230.224.210

🇨🇳 106.75.136.237

🇫🇷 91.196.152.245

🇬🇧 35.203.210.57

🇺🇸 212.104.141.136

🇮🇩 202.80.112.206

🇹🇳 197.5.145.102

🇲🇽 189.235.240.60

🇨🇴 186.194.62.19

🇩🇪 165.227.167.67

🇺🇸 129.121.142.157

🇮🇳 113.11.231.104

🇺🇸 85.208.96.205

🇯🇵 66.225.238.223

🇱🇹 62.60.130.253

🇨🇳 59.49.231.157

🇸🇬 47.128.120.212