JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.25.120.218

82.25.120.218 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Domain Name	netutils.io
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.25.120.218

Whois 82.25.120.218

IP Abuse Reports for 82.25.120.218:

This IP address has been reported a total of 46 times from 22 distinct sources. 82.25.120.218 was first reported on August 16th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-08-25 20:34:24 (1 hour ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-08-25 18:04:01 (4 hours ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇫🇷 masterguru	2026-08-25 14:53:19 (7 hours ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 12:30:14 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.25.120.218 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.25.120.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:30:06.425550 2026] [security2:error] [pid 17978:tid 17978] [client 82.25.120.218:23300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "burdetteconsulting.com"] [uri "/.env"] [unique_id "ao2Kzv4jG9WlftpnbXN7zQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-25 12:16:09 (9 hours ago)	(caddyscan) Scanner path probe from 82.25.120.218 (IN/India/-): 5 in the last 3600 secs; Ports: ; D ... show more (caddyscan) Scanner path probe from 82.25.120.218 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 82.25.120.218 - - [25/Aug/2026:12:16:05 +0000] "GET /api/.env HTTP/1.1" [REDACTED] 200 2627 82.25.120.218 - - [25/Aug/2026:12:16:05 +0000] "GET /app/.env HTTP/1.1" [REDACTED] 200 2627 82.25.120.218 - - [25/Aug/2026:12:16:05 +0000] "GET /backup/.env HTTP/1.1" [REDACTED] 200 2627 82.25.120.218 - - [25/Aug/2026:12:16:05 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 82.25.120.218 - - [25/Aug/2026:12:16:05 +0000] "GET /test/.env HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-08-25 12:06:01 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.25.120.218 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.25.120.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:05:56.875489 2026] [security2:error] [pid 9667:tid 9667] [client 82.25.120.218:40914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cucciniello.com"] [uri "/api/.env"] [unique_id "ao2FJFcNBcBLJUpLGYpWDAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-08-25 00:34:55 (21 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇧 Apache	2026-08-25 00:21:45 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.25.120.218 (IN/India/-): 5 in the last 300 s ... show more (mod_security) mod_security (id:210492) triggered by 82.25.120.218 (IN/India/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇬🇧 Aetherweb Ark	2026-08-24 23:48:32 (22 hours ago)	(mod_security) mod_security (id:949110) triggered by 82.25.120.218 (IN/India/-): N in the last X sec ... show more (mod_security) mod_security (id:949110) triggered by 82.25.120.218 (IN/India/-): N in the last X secs show less	Web App Attack
🇫🇷 Octopuce	2026-08-24 22:54:31 (23 hours ago)	Aggressive web search of vulnerable pages: /backup/.env /.env /dev/.env /member/.env /test/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 22:31:52 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.25.120.218 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.25.120.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 18:31:44.059617 2026] [security2:error] [pid 16877:tid 16877] [client 82.25.120.218:38824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stonetarot.com"] [uri "/.env"] [unique_id "aozGUCi16I8ulqTTIZ61hQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-24 19:51:04 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-08-24 19:12:36 (1 day ago)	(caddyscan) Scanner path probe from 82.25.120.218 (IN/India/-): 5 in the last 3600 secs; Ports: ; D ... show more (caddyscan) Scanner path probe from 82.25.120.218 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 82.25.120.218 - - [24/Aug/2026:19:12:31 +0000] "GET /backend/.env HTTP/1.1" [REDACTED] 200 2627 82.25.120.218 - - [24/Aug/2026:19:12:31 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 82.25.120.218 - - [24/Aug/2026:19:12:31 +0000] "GET /dev/.env HTTP/1.1" [REDACTED] 200 2627 82.25.120.218 - - [24/Aug/2026:19:12:31 +0000] "GET /admin/.env HTTP/1.1" [REDACTED] 200 2627 82.25.120.218 - - [24/Aug/2026:19:12:31 +0000] "GET /member/.env HTTP/1.1" show less	Port Scan
🇫🇷 masterguru	2026-08-24 17:54:47 (1 day ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇸🇪 vaia.cloud	2026-08-24 17:00:04 (1 day ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.37

🇯🇵 152.32.201.217

🇺🇸 104.23.160.205

🇷🇴 92.118.39.71

🇲🇾 2001:d08:d1:84e3:88ca:3fff:feab:f73d

🇺🇸 104.23.160.147

🇳🇱 89.248.167.131

🇰🇷 222.108.100.117

🇰🇷 220.80.219.163

🇱🇹 213.176.26.19

🇵🇭 210.5.117.238

🇳🇱 173.194.170.114

🇺🇸 172.172.164.248

🇵🇰 124.29.226.55

🇳🇱 85.11.167.239

🇺🇸 20.42.84.67

🇷🇴 193.46.255.86

🇭🇰 165.154.40.10

🇺🇸 153.75.82.231

🇨🇳 112.27.230.157