JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.167.24.82

104.167.24.82 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 1%: ?

ISP	dataforest GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58212
Hostname(s)	82.24.167.104.dataforest.net
Domain Name	dataforest.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.167.24.82

Whois 104.167.24.82

IP Abuse Reports for 104.167.24.82:

This IP address has been reported a total of 21 times from 15 distinct sources. 104.167.24.82 was first reported on November 15th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-26 23:53:21 (2 weeks ago)	Port Scan detected from 104.167.24.82 (DE/Germany/82.24.167.104.dataforest.net). 5 hits in the las ... show more Port Scan detected from 104.167.24.82 (DE/Germany/82.24.167.104.dataforest.net). 5 hits in the last 45 seconds show less	Brute-Force Port Scan
🇺🇸 ISPLtd	2026-01-04 14:48:56 (5 months ago)	Jan 4 10:48:55 104.167.24.82 TCP SPT=30120 DPT=30965 SYN Jan 4 10:48:55 104.167.24.82 TCP SPT=3012 ... show more Jan 4 10:48:55 104.167.24.82 TCP SPT=30120 DPT=30965 SYN Jan 4 10:48:55 104.167.24.82 TCP SPT=30120 DPT=30965 SYN Jan 4 10:48:55 104.167.24.82 TCP SPT=30120 DPT=30965 ... show less	Port Scan
Anonymous	2026-01-04 14:42:19 (5 months ago)	Shorewall log file match.	Port Scan
Anonymous	2026-01-04 13:50:25 (5 months ago)	Jan 4 08:50:25 localhost kernel: [95880234.906984] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91 ... show more Jan 4 08:50:25 localhost kernel: [95880234.906984] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=104.167.24.82 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x40 TTL=39 ID=12123 PROTO=TCP SPT=30120 DPT=13718 WINDOW=64581 RES=0x00 ACK SYN URGP=0 Jan 4 08:50:25 localhost kernel: [95880234.907019] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=104.167.24.82 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x40 TTL=39 ID=12123 PROTO=TCP SPT=30120 DPT=13718 SEQ=858265130 ACK=3465018393 WINDOW=64581 RES=0x00 ACK SYN URGP=0 OPT (0204059C0101040201030308) Jan 4 08:50:25 localhost kernel: [95880235.029923] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=104.167.24.82 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x40 TTL=39 ID=12123 PROTO=TCP SPT=30120 DPT=13718 WINDOW=64581 RES=0x00 ACK SYN URGP=0 Jan 4 08:50:25 localhost kernel: [95880235.029935] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08 show less	Port Scan
🇫🇷 ISPLtd	2026-01-04 13:44:49 (5 months ago)	Jan 4 09:44:48 104.167.24.82 TCP SPT=30120 DPT=16736 SYN Jan 4 09:44:48 104.167.24.82 TCP SPT=3012 ... show more Jan 4 09:44:48 104.167.24.82 TCP SPT=30120 DPT=16736 SYN Jan 4 09:44:48 104.167.24.82 TCP SPT=30120 DPT=16736 SYN Jan 4 09:44:48 104.167.24.82 TCP SPT=30120 DPT=16736 ... show less	Port Scan
Anonymous	2026-01-04 10:14:43 (5 months ago)	[DoS Attack: SYN/ACK Scan] port 30120 1 probe(s) in 24 hrs	Port Scan Hacking
🇺🇸 ISPLtd	2026-01-04 06:14:29 (5 months ago)	Jan 3 23:14:27 104.167.24.82 TCP SPT=30120 DPT=60110 SYN Jan 3 23:14:27 104.167.24.82 TCP SPT=3012 ... show more Jan 3 23:14:27 104.167.24.82 TCP SPT=30120 DPT=60110 SYN Jan 3 23:14:27 104.167.24.82 TCP SPT=30120 DPT=60110 SYN Jan 3 23:14:28 104.167.24.82 TCP SPT=30120 DPT=60110 WINDO ... show less	Port Scan
🇫🇷 ISPLtd	2026-01-04 02:50:24 (5 months ago)	Jan 3 22:50:20 104.167.24.82 TCP SPT=30120 DPT=52165 SYN Jan 3 22:50:23 104.167.24.82 TCP SPT=3012 ... show more Jan 3 22:50:20 104.167.24.82 TCP SPT=30120 DPT=52165 SYN Jan 3 22:50:23 104.167.24.82 TCP SPT=30120 DPT=52165 SYN Jan 3 22:50:23 104.167.24.82 TCP SPT=30120 DPT=52165 ... show less	Port Scan
🇹🇭 Sawasdee	2026-01-04 02:42:43 (5 months ago)	Port Scan ...	Port Scan
🇫🇷 centurion	2026-01-04 01:27:20 (5 months ago)	Blocked by UFW on dc00 [42912/tcp] Source port: 30120 TTL: 46 Packet length: 52 TOS: 0x00 This repo ... show more Blocked by UFW on dc00 [42912/tcp] Source port: 30120 TTL: 46 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-01-04 00:15:05 (5 months ago)	Port Scan	Port Scan
🇦🇺 MAGIC	2025-03-26 08:06:23 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇵🇱 sefinek.net	2025-03-14 00:00:24 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE ASN: 200373 (DREI ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: MANAGED_CHALLENGE ASN: 200373 (DREI-K-TECH-GMBH) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-03-13T23:33:26Z Ray ID: 91ff5618dd8036cf UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-03-09 04:44:09 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-03-04 20:32:14 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 104.167.24.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 104.167.24.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 15:32:02.987073 2025] [security2:error] [pid 3566261:tid 3566261] [client 104.167.24.82:34971] [client 104.167.24.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/"] [unique_id "Z8djQjB2Z7xtjEPcqiP8tAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.233.123.59

🇮🇳 103.91.72.220

🇺🇸 65.111.14.171

🇵🇭 222.127.63.213

🇮🇩 202.145.0.18

🇺🇿 188.113.201.171

🇨🇳 182.123.102.104

🇭🇰 103.112.173.87

🇸🇬 101.47.159.125

🇪🇸 82.223.24.194

🇺🇸 64.62.197.180

🇳🇱 45.198.224.190

🇧🇪 34.62.238.103

🇨🇳 27.39.128.169

🇫🇷 13.38.94.234

🇨🇴 186.81.124.108

🇧🇪 104.199.77.98

🇿🇦 102.182.92.126

🇩🇪 93.255.31.118

🇵🇱 87.251.64.155