JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.192.16.82

185.192.16.82 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 19%: ?

19%

ISP	VPN Consumer Dublin, Ireland
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.192.16.82

Whois 185.192.16.82

IP Abuse Reports for 185.192.16.82:

This IP address has been reported a total of 80 times from 29 distinct sources. 185.192.16.82 was first reported on April 18th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-06 20:23:29 (7 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-06-06 18:10:55 (9 hours ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/phpadmin/as.php /wp-includes/Requests ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/phpadmin/as.php /wp-includes/Requests/autoload_classmap.php /wp-content/plugins/ ... show less	Web App Attack
🇫🇷 Octopuce	2026-05-09 15:14:55 (4 weeks ago)	Aggressive web search of vulnerable pages: /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp-c ... show more Aggressive web search of vulnerable pages: /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp-content/plugins/ubh/up.php /wp-admin/images/ ... show less	Web App Attack
🇳🇱 wlt-blocker	2026-04-17 19:22:14 (1 month ago)	Unauthorized access to webpage admin	Web App Attack
🇯🇵 Valhalla	2026-03-20 19:15:09 (2 months ago)	/backups/config.json	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-17 07:46:23 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 185.192.16.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 185.192.16.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 03:46:18.995299 2026] [security2:error] [pid 31436:tid 31443] [client 185.192.16.82:38763] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|peapage.productions\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "peapage.productions"] [uri "/old/www.sql"] [unique_id "abkGyl5MVFtxpgYNUEV01wAAAQI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-03-15 12:15:46 (2 months ago)	Aggressive web search of vulnerable pages: /bless.php /lock.php /tiny.php /themes.php /wp-good.php / ... show more Aggressive web search of vulnerable pages: /bless.php /lock.php /tiny.php /themes.php /wp-good.php /ioxi-o.php /wp.php /about.php /adminfuns.ph ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-10 21:39:32 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 185.192.16.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 185.192.16.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 17:39:29.110334 2026] [security2:error] [pid 14230:tid 14230] [client 185.192.16.82:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nyemdr-online.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nyemdr-online.com"] [uri "/wp-content/plugins/erinyani/asasx.php.bak"] [unique_id "abCPke2A3qU5zjiixc6T7gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-28 21:05:11 (3 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇯🇵 Valhalla	2026-02-23 00:18:47 (3 months ago)	/old/public_html.tar	Hacking Web App Attack
🇯🇵 Valhalla	2026-02-14 14:23:24 (3 months ago)	/backup/backup.zip	Hacking Web App Attack
🇫🇷 dynamix	2026-02-03 23:18:57 (4 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 Penny Packer	2026-01-29 23:48:15 (4 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇧🇪 DrLex0	2026-01-12 17:21:46 (4 months ago)	Distributed attack, probing for .php paths from multiple IPs in the 185.192.16.0/24 range 185.192.1 ... show more Distributed attack, probing for .php paths from multiple IPs in the 185.192.16.0/24 range 185.192.16.82 80 - [12/Jan/2026:17:21:45 +0000] "GET //templates/Genius/error.php HTTP/1.1" 404 2383 "-" "Go-http-client/1.1" 185.192.16.82 80 - [12/Jan/2026:17:21:46 +0000] "GET //modules/sendinblue/anamama.php HTTP/1.1" 404 2383 "-" "Go-http-client/1.1" show less	DDoS Attack Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-11 03:29:58 (4 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 152.32.134.182

🇰🇷 112.164.209.49

🇨🇳 111.29.38.32

🇷🇴 45.93.128.30

🇮🇹 206.232.40.209

🇲🇴 182.93.50.90

🇺🇸 162.216.149.103

🇮🇳 152.59.153.76

🇸🇬 129.226.95.93

🇺🇸 71.6.236.138

🇺🇸 64.62.197.63

🇳🇱 45.198.224.5

🇺🇸 3.142.96.34

🇺🇸 205.210.31.77

🇺🇸 205.210.31.75

🇮🇳 202.141.65.5

🇳🇱 192.42.116.112

🇲🇾 182.62.16.25

🇫🇮 150.241.89.255

🇫🇷 135.125.2.121