JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.182.130.84

107.182.130.84 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	Serverion LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14315
Domain Name	serverion.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.182.130.84

Whois 107.182.130.84

IP Abuse Reports for 107.182.130.84:

This IP address has been reported a total of 48 times from 27 distinct sources. 107.182.130.84 was first reported on June 26th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-09 23:50:04 (1 week ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, POST / HTTP/1.1	Hacking Web App Attack
🇩🇪 BlueWire Hosting	2026-07-08 11:49:12 (1 week ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 Gwyneth Llewelyn	2026-07-08 11:01:11 (1 week ago)	107.182.130.84 - - [08/Jul/2026:12:01:09 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux ... show more 107.182.130.84 - - [08/Jul/2026:12:01:09 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 2026/07/08 12:01:10 [error] 2215#2215: *1381297 access forbidden by rule, client: 107.182.130.84, server: [redacted], request: "GET /.env HTTP/1.1", host: "[redacted]" 107.182.130.84 - - [08/Jul/2026:12:01:10 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 10:18:16 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 107.182.130.84 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 107.182.130.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 06:18:09.311232 2026] [security2:error] [pid 27343:tid 27343] [client 107.182.130.84:61450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.43"] [uri "/.env"] [unique_id "ak4j4QImDC_EzO3lY2pY2AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 10:02:09 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 107.182.130.84 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 107.182.130.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 06:02:03.802664 2026] [security2:error] [pid 31575:tid 31575] [client 107.182.130.84:56055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.46"] [uri "/.env"] [unique_id "ak4gG3_uGSEpWpKhTstFdQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Starburst SysOp Team	2026-07-08 09:37:36 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-syd2-4)	Hacking Bad Web Bot
🇮🇪 AutosOnShow	2026-07-08 09:34:05 (1 week ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-08 09:33:10.549 \|	Web App Attack
🇩🇪 pscriptos	2026-07-08 05:33:29 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/CVE-2017-9841	Web App Attack
Anonymous	2026-07-08 05:01:43 (1 week ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 04:01:28 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 107.182.130.84 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 107.182.130.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 00:01:23.549459 2026] [security2:error] [pid 4612:tid 4612] [client 107.182.130.84:52871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.220"] [uri "/.env"] [unique_id "ak3Lk32fCUHcdduU80YV9QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Ano_Nym	2026-07-08 00:48:29 (1 week ago)	CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/CVE-2017-9841	Brute-Force
🇺🇸 TPI-Abuse	2026-07-08 00:18:28 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 107.182.130.84 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 107.182.130.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 20:18:21.826608 2026] [security2:error] [pid 15466:tid 15572] [client 107.182.130.84:62727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.123"] [uri "/.env"] [unique_id "ak2XTYdLA48Q3LJna3xbTQAAAhA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-07-07 23:29:50 (1 week ago)	107.182.130.84 - - [08/Jul/2026:00:29:47 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; ... show more 107.182.130.84 - - [08/Jul/2026:00:29:47 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 2026/07/08 00:29:48 [error] 2215#2215: *1263792 access forbidden by rule, client: 107.182.130.84, server: [redacted], request: "GET /.env HTTP/1.1", host: "[redacted]" 107.182.130.84 - - [08/Jul/2026:00:29:48 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-07-07 21:34:26 (1 week ago)	Aggressive web search of vulnerable pages: /backup.tar.gz /admin/config.php /database.yml /config/da ... show more Aggressive web search of vulnerable pages: /backup.tar.gz /admin/config.php /database.yml /config/database.yml /app/config/parameters.php /typo ... show less	Web App Attack
🇮🇪 AutosOnShow	2026-07-07 19:09:04 (1 week ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-07 19:08:41.469 \|	Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.143.114.93

🇦🇷 181.177.215.112

🇺🇸 172.202.9.120

🇺🇸 104.156.245.185

🇭🇷 45.95.169.104

🇳🇱 194.26.192.146

🇺🇸 172.104.210.105

🇦🇺 170.64.147.115

🇫🇮 147.185.133.230

🇲🇾 118.100.168.234

🇨🇳 118.31.112.172

🇮🇩 103.131.61.163

🇳🇱 91.92.40.14

🇺🇸 74.7.241.137

🇨🇳 59.36.75.227

🇰🇷 43.202.163.169

🇲🇽 38.211.59.18

🇺🇸 24.189.226.48

🇬🇧 2a06:4880:a000::d4

🇧🇷 205.210.31.214