AbuseIPDB » 142.202.240.82

142.202.240.82 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 0%: ?

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14315
Domain Name	as210558.net
Country	United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 142.202.240.82

Whois 142.202.240.82

IP Abuse Reports for 142.202.240.82:

This IP address has been reported a total of 53 times from 38 distinct sources. 142.202.240.82 was first reported on May 13th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
10dencehispahard SL	2024-04-16 14:00:03 (9 months ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
Anonymous	2024-04-16 13:38:48 (9 months ago)	Bot disrespecting robots.txt	Bad Web Bot
Sklurk	2024-04-16 06:05:37 (9 months ago)	Web App Attack	Web App Attack
Anonymous	2023-03-05 07:54:46 (1 year ago)	WEB_SERVER 403 Forbidden	Hacking
10dencehispahard SL	2023-03-05 06:23:51 (1 year ago)	Suspicious activity detected by Modsecurity [Suspicious IP found on 18 servers 91 times. Reincident ... show moreSuspicious activity detected by Modsecurity [Suspicious IP found on 18 servers 91 times. Reincident by 0. Rules:] show less	Web App Attack
/dev/null	2023-03-05 05:38:49 (1 year ago)	CMS Bruteforce / WebApp Attack attempt	Hacking Web App Attack
oh.mg	2023-03-05 02:44:49 (1 year ago)	(mod_security) mod_security (id:949110) triggered by 142.202.240.82 (US/United States/-): 1 in the l ... show more(mod_security) mod_security (id:949110) triggered by 142.202.240.82 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [Sun Mar 05 02:44:43.722610 2023] [:error] [pid 3313580:tid 140080836412992] [client 142.202.240.82:51768] [client 142.202.240.82] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "3.1.194.0"] [uri "/.env"] [unique_id "ZAQCG7l5ncNwYzxfM_Xv_AAAAJg"] show less	Brute-Force Web App Attack SSH
ISPLtd	2022-05-13 12:28:37 (2 years ago)	May 13 13:28:04 SRC=142.202.240.82 PROTO=TCP SPT=57974 DPT=2005 SYN May 13 13:28:05 SRC=142.20 ... show moreMay 13 13:28:04 SRC=142.202.240.82 PROTO=TCP SPT=57974 DPT=2005 SYN May 13 13:28:05 SRC=142.202.240.82 PROTO=TCP SPT=57976 DPT=2005 SYN May 13 13:28:05 SRC=142.202.240.82 PROTO=TCP SPT=57979 DPT=20 ... show less	Port Scan