JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.153.138.48

82.153.138.48 was found in our database!

This IP was reported 246 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215659
Domain Name	netutils.io
Country	🇷🇴 Romania
City	Popesti-Leordeni, Ilfov

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.153.138.48

Whois 82.153.138.48

IP Abuse Reports for 82.153.138.48:

This IP address has been reported a total of 246 times from 139 distinct sources. 82.153.138.48 was first reported on January 8th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Study Bitcoin 🤗	2025-02-03 11:22:52 (1 year ago)	2 port probes: tcp/37241, tcp/36330 [srv133]	Port Scan
🇳🇱 Linuxmalwarehuntingnl	2024-07-04 23:31:38 (2 years ago)	Honeypot HIT	Brute-Force
🇳🇱 Linuxmalwarehuntingnl	2024-07-01 10:56:27 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇳🇱 Linuxmalwarehuntingnl	2024-06-28 22:55:23 (2 years ago)	Honeypot HIT	Brute-Force
Anonymous	2024-05-08 05:34:22 (2 years ago)	May 8 07:34:21 mx1 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<* ... show more May 8 07:34:21 mx1 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<@.de>, method=PLAIN, rip=82.153.138.48, lip=[*], TLS, session=<BcFwp+oXXoVSmYow> show less	Brute-Force
Anonymous	2024-05-07 18:40:26 (2 years ago)	VPN Logon Failed: AAA user authentication Rejected	Brute-Force
🇨🇿 lp	2024-05-06 16:56:53 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 82.153.138.48 2024-05-06T17:36:27+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 82.153.138.48 2024-05-06T17:36:27+02:00 vpn Access-Reject '[email protected]' station: 82.153.138.48 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇦🇺 ozisp.com.au	2024-05-05 09:52:36 (2 years ago)	GB_IPXO-MNT_<33>1714902754 [1:2522109:5514] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffi ... show more GB_IPXO-MNT_<33>1714902754 [1:2522109:5514] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 110 [Classification: Misc Attack] [Priority: 2] {TCP} 82.153.138.48:39316 show less	Open Proxy
🇺🇸 TPI-Abuse	2024-05-02 23:17:22 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 82.153.138.48 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 82.153.138.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 02 19:17:14.414351 2024] [security2:error] [pid 12560] [client 82.153.138.48:34930] [client 82.153.138.48] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|songwriterdemo.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "songwriterdemo.com"] [uri "/rdemo.sql"] [unique_id "ZjQe-u5s4QrYl9F8X-u8dQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2024-05-01 04:37:38 (2 years ago)		Bad Web Bot
🇩🇪 psauxit	2024-04-24 05:30:55 (2 years ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Hacking Web App Attack
🇪🇸 Pablo Sánchez	2024-04-20 12:34:24 (2 years ago)	82.153.138.48 - - [20/Apr/2024:14:34:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 233 "-" "Mozilla/5.0 ... show more 82.153.138.48 - - [20/Apr/2024:14:34:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 233 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 0.563 82.153.138.48 - - [20/Apr/2024:14:34:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 233 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 0.494 82.153.138.48 - - [20/Apr/2024:14:34:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 233 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 0.475 82.153.138.48 - - [20/Apr/2024:14:34:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 233 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 0.434 82.153.138.48 - - [20/Apr/2024:14:34:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 233 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 0 ... show less	Web App Attack
🇮🇳 Amit Garg	2024-04-16 06:26:00 (2 years ago)	Brute-Force Attack	Brute-Force
🇪🇸 10dencehispahard SL	2024-03-29 15:00:37 (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇬🇧 Axel	2024-03-19 21:07:02 (2 years ago)	Failed login attempt detected by Fail2Ban in ssh jail. Server ID 405 UK-KENSINGTON.	Brute-Force

Showing 1 to 15 of 246 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.189.132.252

🇺🇸 163.53.26.70

🇺🇸 162.216.150.16

🇮🇳 130.210.44.52

🇪🇸 79.108.231.134

🇺🇸 198.13.199.165

🇳🇱 193.47.62.69

🇧🇬 193.24.211.218

🇺🇸 180.92.159.115

🇺🇸 162.216.149.105

🇧🇬 109.160.32.155

🇷🇴 92.118.39.49

🇺🇸 52.248.42.57

🇮🇩 43.173.1.69

🇹🇳 197.5.145.102

🇺🇸 172.208.65.31

🇸🇪 171.25.158.87

🇺🇸 170.9.239.112

🇨🇳 121.46.239.195

🇬🇧 81.19.219.238