JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.82.158.18

3.82.158.18 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 88%: ?

88%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-82-158-18.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.82.158.18

Whois 3.82.158.18

IP Abuse Reports for 3.82.158.18:

This IP address has been reported a total of 27 times from 17 distinct sources. 3.82.158.18 was first reported on June 26th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-07-04 11:02:37 (9 hours ago)	3.82.158.18 - - [04/Jul/2026:13:02:34 +0200] "GET /new-media-tv/ HTTP/1.1" 200 23350 "-" "Mozilla/5. ... show more 3.82.158.18 - - [04/Jul/2026:13:02:34 +0200] "GET /new-media-tv/ HTTP/1.1" 200 23350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 03:59:04 (16 hours ago)	(mod_security) mod_security (id:210730) triggered by 3.82.158.18 (ec2-3-82-158-18.compute-1.amazonaw ... show more (mod_security) mod_security (id:210730) triggered by 3.82.158.18 (ec2-3-82-158-18.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 23:58:58.601873 2026] [security2:error] [pid 5935:tid 5935] [client 3.82.158.18:39780] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|glassclublake.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "glassclublake.com"] [uri "/[email protected]"] [unique_id "akiFAoDQ3JKYaEYzlWGi6wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Alvino	2026-07-03 12:01:24 (1 day ago)	Blocked due to using a VPN or data center IP with abuse: 82	Web Spam VPN IP
🇺🇸 rsa	2026-07-02 15:18:00 (2 days ago)	excessive crawling ddos	DDoS Attack Bad Web Bot Web App Attack
Anonymous	2026-07-02 09:17:53 (2 days ago)	FortiWeb WAF: 456 attacks detected. Threat Score: 138600. Types: Client Management(228), Block IP Li ... show more FortiWeb WAF: 456 attacks detected. Threat Score: 138600. Types: Client Management(228), Block IP List(228). Origin: United States. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 00:09:17 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 3.82.158.18 (ec2-3-82-158-18.compute-1.amazonaw ... show more (mod_security) mod_security (id:210730) triggered by 3.82.158.18 (ec2-3-82-158-18.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 20:09:09.965499 2026] [security2:error] [pid 15027:tid 15027] [client 3.82.158.18:57310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.localpetsitters.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.localpetsitters.com"] [uri "/find-a-pet-sitter/rensselaer-county/[email protected]"] [unique_id "akWsJSf0PCxcLHEK_LbF0gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-07-01 11:06:51 (3 days ago)	2026-07-01 11:06:50 3.82.158.18 File scanning, blocking 3.82.158.18 for 5 minutes	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 03:36:32 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 3.82.158.18 (ec2-3-82-158-18.compute-1.amazonaw ... show more (mod_security) mod_security (id:210730) triggered by 3.82.158.18 (ec2-3-82-158-18.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 23:36:26.935291 2026] [security2:error] [pid 22479:tid 22479] [client 3.82.158.18:45882] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.qualityelevatorcabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.qualityelevatorcabs.com"] [uri "/[email protected]"] [unique_id "akSLOtRD2LXoCfeDN118ugAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 09:18:06 (4 days ago)	FortiWeb WAF: 254 attacks detected. Threat Score: 94800. Types: Client Management(127), Block IP Lis ... show more FortiWeb WAF: 254 attacks detected. Threat Score: 94800. Types: Client Management(127), Block IP List(127). Origin: United States. show less	Web App Attack
🇧🇪 cmbplf	2026-06-29 10:05:28 (5 days ago)	5.680 requests to many distinct domains in 1 hour (1w2d23h)	Brute-Force Bad Web Bot
Anonymous	2026-06-28 14:02:04 (6 days ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2026-06-28 12:02:44 (6 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 90%, Country: US, Attack patterns: Auto ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 90%, Country: US, Attack patterns: Automated scanning show less	Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-06-28 08:24:46 (6 days ago)	avw-Joomla User : try to access forms...	Hacking
🇺🇸 webgobe	2026-06-28 03:37:27 (6 days ago)	tow-Joomla User : try to access forms...	Hacking
🇩🇪 FeG Deutschland	2026-06-28 02:47:22 (6 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.244.60.35

🇩🇪 148.153.140.75

🇺🇸 130.131.225.103

🇨🇳 112.26.74.90

🇺🇸 206.223.228.201

🇨🇳 182.44.72.56

🇩🇪 130.12.180.144

🇩🇪 130.12.180.111

🇦🇱 130.0.28.210

🇨🇳 111.52.249.29

🇨🇳 111.26.95.120

🇷🇺 84.53.238.67

🇺🇸 66.132.224.21

🇲🇾 49.125.203.163

🇲🇾 49.124.159.192

🇹🇭 43.173.246.182

🇳🇱 20.224.41.181

🇺🇸 20.127.208.133

🇭🇰 8.217.81.46

🇷🇺 5.228.1.56