82.24.109.15

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
22 reports
20 reporters · latest 34 minutes ago
ISP
Internet Utilities Europe and Asia Limited
Usage Type
Fixed Line ISP
ASN
AS3320
Domain Name
netutils.io
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 9 🇳🇱 Netherlands 5 🇨🇭 Switzerland 2
Most common categories Web App Attack 20 Hacking 5 Brute-Force 4 Bad Web Bot 3 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 dwmp
Url probing: /app
Web App Attack
🇳🇱 Robka
82.24.109.15 - - [15/Nov/2026:04:26:23 +0000] "GET /phpinfo.php HTTP/2.0" 404 10814 "http://toolrecall.dev/phpinfo.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "toolrecall.dev" ...
Bad Web Bot Web App Attack
🇳🇱 COMPLEX
Bad Web Bot
🇺🇸 interbiznw.com
malicious-web-requests-vulnerability-scanning
Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 maxpower
Port Scan
🇸🇪 vaia.cloud
crowdsecurity/CVE-2023-49103
Brute-Force Web App Attack
🇩🇪 todix
"GET /_profiler/phpinfo HTTP/1.1" 404 43730 "/_profiler/phpinfo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
Web App Attack
Anonymous
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
Brute-Force Web App Attack
🇩🇪 SCHAPPY
Excessive crawling, scraping, request limit exceeded, HTTP code 429.
Web App Attack
🇳🇱 Alt255
Bad Web Bot Web App Attack
🇨🇭 4server
Hacking Web App Attack
🇸🇪 vaia.cloud
crowdsecurity/CVE-2023-49103
Brute-Force Web App Attack
🇳🇱 Mangelot Hosting
(modsec_attack) srv201 ModSecurity attack 82.24.109.15 (DE/Germany/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇬🇧 gigatech
Webserver Probing
Web App Attack
🇨🇭 Origon
CVE-2023-49103 - IP: 82.24.109.15 - time="2026-11-12T23:57:23+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/CVE-2023-49103 by ip 82.24.109.15 (DE/3320) : 4h ban on Ip 82.24.109.15" module=db
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 191.44.93.114
🇮🇩 103.94.164.111
🇭🇰 36.255.220.145
🇺🇸 20.65.146.0
🇹🇷 178.243.212.105
🇨🇿 178.17.12.196
🇷🇴 80.94.95.115
🇨🇳 139.224.207.209
🇨🇭 104.244.79.113
🇧🇷 104.22.182.86
🇺🇸 104.22.56.58
🇨🇦 45.198.224.125
🇳🇱 35.214.233.108
🇨🇳 27.206.37.70
🇺🇸 20.65.145.4
🇰🇿 5.34.72.211
🇩🇪 195.182.16.183
🇳🇱 195.178.110.232
🇬🇧 194.50.235.157
🇳🇱 176.65.148.51
feedback