JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.48.89.109

182.48.89.109 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 26%: ?

26%

ISP	Earth Telecommunication(Pvt.)Ltd.
Usage Type	Fixed Line ISP
ASN	AS63969
Hostname(s)	182.48.89.109.race.net.bd
Domain Name	earth.net.bd
Country	🇧🇩 Bangladesh
City	Barishal, Barisal Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.48.89.109

Whois 182.48.89.109

IP Abuse Reports for 182.48.89.109:

This IP address has been reported a total of 9 times from 6 distinct sources. 182.48.89.109 was first reported on June 29th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-09 17:22:36 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 182.48.89.109 (182.48.89.109.race.net.bd): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 182.48.89.109 (182.48.89.109.race.net.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 13:22:29.782677 2026] [security2:error] [pid 12626:tid 12626] [client 182.48.89.109:50800] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|herrell.net.utilis.net\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "herrell.net.utilis.net"] [uri "/files/customers.db"] [unique_id "aski1UvcnURRNOoGOGrW4gAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-05 22:43:51 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: http://www.jeudhistoire.com/la-b ... show more Not following 301 redirects — wasted requests \| method: GET \| path: http://www.jeudhistoire.com/la-bataille-dhaslach-jundingen-11-octobre-1805-ordre-de-bataille-par-gilles-boue/ \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6400.44 Safari/537.36 show less	Bad Web Bot
🇮🇩 hermawan	2026-10-04 00:39:59 (1 week ago)	[Sun Oct 04 07:10:10.354526 2026] [security2:error] [pid 990071:tid 139890742212288] [client 182.48. ... show more [Sun Oct 04 07:10:10.354526 2026] [security2:error] [pid 990071:tid 139890742212288] [client 182.48.89.109:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "208"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/using-joomla/extensions/components/content-component/archived-articles?catid=617&id=2498%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-21-27-maret-2017 HTTP/1.1 Request URI RAW = /index.php/using-joomla/extensions/components/content-component/archived-articles?catid=617&id=2498%3Aprakiraa..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/using-joomla/extensions/components/content-comp ... show less	Email Spam Hacking
🇺🇸 鬼影233	2026-09-22 01:15:58 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-16 01:26:44 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 182.48.89.109 (182.48.89.109.race.net.bd): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 182.48.89.109 (182.48.89.109.race.net.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:26:14.407010 2026] [security2:error] [pid 24187:tid 24268] [client 182.48.89.109:60302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "piroskazalkadi.richardleeweatherman.com"] [uri "/configs/.env.txt"] [unique_id "aqnwNgwHPcdkUn4WKJbS6AAAAI0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-09 12:20:09 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 DrLex0	2026-08-14 07:39:50 (2 months ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 182.48.89.109 443 - [14/Aug/2026:07:39:50 +0000] "GET [redacted] HTTP/1.1" 200 6948 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-07-13 02:06:56 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 09:32:48 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.62.22.127

🇨🇳 113.221.13.197

🇩🇪 109.91.4.177

🇨🇬 102.129.81.205

🇳🇱 45.148.10.157

🇧🇷 45.140.192.23

🇺🇸 44.220.185.134

🇺🇸 17.166.150.10

🇺🇸 206.189.212.11

🇧🇪 198.235.24.145

🇳🇱 193.176.31.236

🇧🇷 189.89.93.254

🇺🇸 162.216.149.165

🇺🇸 162.158.186.128

🇸🇬 159.138.82.178

🇺🇸 147.92.98.214

🇺🇸 137.184.132.183

🇬🇧 132.145.22.18

🇰🇷 125.182.93.87

🇰🇷 119.209.12.20