JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.23.235.17

82.23.235.17 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 19%: ?

19%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37153
Domain Name	netutils.io
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.23.235.17

Whois 82.23.235.17

IP Abuse Reports for 82.23.235.17:

This IP address has been reported a total of 13 times from 8 distinct sources. 82.23.235.17 was first reported on July 4th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 Jim Keir	2026-06-28 06:11:49 (2 days ago)	2026-06-28 06:11:48 82.23.235.17 File scanning, blocking 82.23.235.17 for 5 minutes	Web App Attack
🇮🇪 AutosOnShow	2026-06-20 16:50:07 (1 week ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-20 16:49:09.206 \|	Web App Attack
🇺🇸 mnsf	2026-06-04 11:05:54 (3 weeks ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇮🇪 AutosOnShow	2026-06-03 08:46:05 (3 weeks ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-03 08:45:13.597 \|	Web App Attack
🇮🇪 AutosOnShow	2026-06-02 03:28:05 (4 weeks ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-02 03:27:13.492 \|	Web App Attack
🇫🇮 gnom4ik	2026-02-21 18:48:29 (4 months ago)	ban-reviewer auto report; ip=82.23.235.17; scenario=http:scan; verdict=valid_ban; confidence=0.85; c ... show more ban-reviewer auto report; ip=82.23.235.17; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'Port Scan' (category 14) in abuseipdb; IP flagged for 'Hacking' (category 15) in abuseipdb; IP flagged for 'Brute-Force' (category 18) in abuseipdb; IP flagged for 'SSH' (category 22) in abuseipdb; No evidence of legitimate activity or user show less	Port Scan Hacking Brute-Force SSH
🇮🇪 AutosOnShow	2025-12-29 03:37:05 (6 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2025-12-29 03:36:05.246 \|	Web App Attack
🇺🇸 TPI-Abuse	2025-12-12 16:50:18 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 82.23.235.17 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 82.23.235.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 12 11:50:12.456401 2025] [security2:error] [pid 23492:tid 23492] [client 82.23.235.17:53855] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kingstoneproperties.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected]"] [unique_id "aTxHxLXblUkD1pk89NwpzAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SecondEdge	2025-11-04 07:47:30 (7 months ago)	A web attack was detected from 82.23.235.17 (United Kingdom / Glasgow City / Glasgow) against 52.215 ... show more A web attack was detected from 82.23.235.17 (United Kingdom / Glasgow City / Glasgow) against 52.215.230.232 (Git Variable Scan). show less	Web App Attack
🇨🇴 j458rjqwi348fhjq46	2025-08-16 18:45:01 (10 months ago)	Malicious IP detected by WAF with anomaly score 10.0. Attack types: Timestamp deviates by 1.0 hours, ... show more Malicious IP detected by WAF with anomaly score 10.0. Attack types: Timestamp deviates by 1.0 hours, ... and more, Timestamp deviates by 2.8 hours (+8 more). Activity: 672 requests to 3 URLs. Time: 2025-08-16 12:20:20 (America/Bogota). Origin: ZA. Source: Automated WAF log analysis. show less	Web App Attack
🇨🇴 j458rjqwi348fhjq46	2025-07-22 16:31:09 (11 months ago)	Malicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.e ... show more Malicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.env), Suspicious URL detected (extended rules). Activity: 34 requests to 1 URLs. Period: 2025-07-18 03:52 - 2025-07-18 03:52 UTC. Origin: ZA. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇸🇬 Charles	2025-07-11 15:01:06 (11 months ago)	82.23.235.17 - - [11/Jul/2025:23:01:04 +0800] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows ... show more 82.23.235.17 - - [11/Jul/2025:23:01:04 +0800] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
🇮🇪 Jim Keir	2025-07-04 07:39:57 (11 months ago)	2025-07-04 07:39:56 82.23.235.17 File scanning, blocking 82.23.235.17 for 5 minutes	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇬🇧 193.163.125.177

🇺🇸 192.178.119.158

🇩🇪 185.220.101.191

🇦🇷 181.23.60.97

🇱🇾 102.68.131.186

🇧🇪 198.235.24.230

🇺🇸 195.184.76.20

🇩🇪 159.100.6.125

🇯🇵 153.246.252.201

🇮🇹 147.45.51.177

🇷🇺 77.88.47.8

🇺🇸 66.132.186.239

🇫🇷 62.210.113.113

🇨🇳 14.103.115.213

🇺🇸 216.73.160.51

🇷🇺 213.170.75.150

🇳🇱 204.76.203.214

🇧🇷 187.62.87.235

🇺🇸 143.42.1.34