JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

57.129.83.82

Recent Activity

Abuse confidence score ?

19% Caution

26 reports

15 reporters · latest 2 hours ago

ISP	OVH GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ns3252854.ip-57-129-83.eu
Domain Name	ovh.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 57.129.83.82

Export CSV

This IP address has been reported a total of 26 times from 15 distinct sources. 57.129.83.82 was first reported on July 7th 2026, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: Finland with 4 reports; United States of America with 2 reports; China with 1 report. The only category in these recent reports was: Port Scan 7 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 basil s	2026-10-25 09:52:19 (2 hours ago)	Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across ... show more Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across closed ports; blocked by firewall. Target: TCP/16881. First seen: 2026-10-25 09:52:19 UTC. Source: host firewall/sshd log. show less	Port Scan
🇫🇮 basil s	2026-10-15 08:04:25 (1 week ago)	Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across ... show more Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across closed ports; blocked by firewall. Target: TCP/16881. First seen: 2026-10-15 08:04:25 UTC. Source: host firewall/sshd log. show less	Port Scan
🇫🇮 basil s	2026-10-14 07:08:56 (1 week ago)	Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across ... show more Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across closed ports; blocked by firewall. Target: TCP/16881. First seen: 2026-10-14 07:08:56 UTC. Source: host firewall/sshd log. show less	Port Scan
🇫🇮 basil s	2026-10-12 17:29:02 (1 week ago)	Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across ... show more Port scan sweep against closed ports. Automated TCP SYN scan exceeding 15 packets per minute across closed ports; blocked by firewall. Target: TCP/16881. First seen: 2026-10-12 17:29:02 UTC. Source: host firewall/sshd log. show less	Port Scan
🇨🇳 鹏鹏	2026-10-07 13:36:03 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 6462 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2026-09-12 05:28:41 (1 month ago)	Fail2Ban jail router-firewall (20 matches): DROP IN=eth0 SRC=57.129.83.82 LEN=60 TOS=0x00 PREC=0x00 ... show more Fail2Ban jail router-firewall (20 matches): DROP IN=eth0 SRC=57.129.83.82 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=59048 DF PROTO=TCP SPT=24538 DPT=2242 SEQ=3272747447 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A6BB31CF5000000000103030C) MARK=0x8000000 DROP IN=eth0 SRC=57.129.83.82 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19271 DF PROTO=TCP SPT=11160 DPT=2242 SEQ=1377701618 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A6BB383B6000000000103030C) MARK=0x8000000 DROP IN=eth0 SRC=57.129.83.82 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=43570 DF PROTO=TCP S show less	Port Scan
🇺🇸 xmission.com	2026-08-28 21:52:32 (1 month ago)	Blocked by UFW (TCP on 9000) Source port: 64816 TTL: 49 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9000) Source port: 64816 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 57.129.83.82) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-08-24 12:56:33 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 57.129.83.82 (ns3252854.ip-57-129-83.eu): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 57.129.83.82 (ns3252854.ip-57-129-83.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 08:56:29.607348 2026] [security2:error] [pid 23857:tid 23857] [client 57.129.83.82:19012] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 57.129.83.82 (+1 hits since last alert)\|bickleton.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bickleton.org"] [uri "/xmlrpc.php"] [unique_id "aow_fTlzX_3LnbeXy0NfkAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-08-24 10:00:40 (2 months ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇩🇪 grassau.com	2026-08-24 03:34:26 (2 months ago)	(wordpress) Failed wordpress login from 57.129.83.82 (DE/Germany/Hesse/Frankfurt am Main/ns3252854.i ... show more (wordpress) Failed wordpress login from 57.129.83.82 (DE/Germany/Hesse/Frankfurt am Main/ns3252854.ip-57-129-83.eu) show less	Brute-Force
🇩🇪 lenz	2026-08-23 23:22:08 (2 months ago)	Aug 24 01:10:54 hosting wordpress(grupa-ddd.pl)[6251]: XML-RPC authentication failure for admin from ... show more Aug 24 01:10:54 hosting wordpress(grupa-ddd.pl)[6251]: XML-RPC authentication failure for admin from 57.129.83.82 Aug 24 01:12:09 hosting wordpress(grupa-ddd.pl)[6251]: XML-RPC authentication failure for admin from 57.129.83.82 Aug 24 01:12:52 hosting wordpress(grupa-ddd.pl)[1212]: XML-RPC authentication failure for admin from 57.129.83.82 Aug 24 01:17:19 hosting wordpress(grupa-ddd.pl)[1212]: XML-RPC authentication failure for admin from 57.129.83.82 Aug 24 01:22:07 hosting wordpress(grupa-ddd.pl)[10315]: XML-RPC authentication failure for admin from 57.129.83.82 ... show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-08-23 23:11:32 (2 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-23 13:32:22 (2 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC BE/Belgium/ns3252854.ip-57-129-83.eu	Web App Attack
🇺🇸 integrantservices.com	2026-08-23 12:21:01 (2 months ago)	(wordpress) Failed wordpress login from 57.129.83.82 (DE/Germany/ns3252854.ip-57-129-83.eu)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-23 04:21:41 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 57.129.83.82 (ns3252854.ip-57-129-83.eu): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 57.129.83.82 (ns3252854.ip-57-129-83.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 00:21:35.768856 2026] [security2:error] [pid 1922:tid 1922] [client 57.129.83.82:62768] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 57.129.83.82 (+1 hits since last alert)\|jesussotoca.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jesussotoca.com"] [uri "/xmlrpc.php"] [unique_id "aop1T-IpnhnsXaDw93oOfwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.202.209.62

🇲🇦 196.120.147.246

🇺🇸 152.163.16.127

🇰🇭 202.79.29.108

🇰🇪 197.248.159.75

🇲🇦 196.119.73.20

🇺🇦 195.140.227.108

🇳🇱 185.136.15.82

🇺🇸 174.76.33.55

🇰🇷 123.212.9.122

🇹🇼 123.192.123.125

🇨🇳 112.28.153.193

🇩🇪 109.160.32.146

🇿🇦 105.216.107.38

🇬🇧 91.210.69.93

🇩🇪 46.101.138.24

🇩🇪 43.228.157.200

🇺🇸 20.98.155.9

🇰🇷 222.113.207.183

🇰🇷 220.92.96.27