JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 75.84.250.82

75.84.250.82 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 55%: ?

55%

ISP	Charter Communications Inc
Usage Type	Fixed Line ISP
ASN	AS20001
Hostname(s)	syn-075-084-250-082.res.spectrum.com
Domain Name	charter.com
Country	🇺🇸 United States of America
City	Santa Clarita, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 75.84.250.82

Whois 75.84.250.82

IP Abuse Reports for 75.84.250.82:

This IP address has been reported a total of 20 times from 9 distinct sources. 75.84.250.82 was first reported on September 12th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 19:26:54 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum. ... show more (mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:26:46.816024 2026] [security2:error] [pid 2969:tid 2969] [client 75.84.250.82:43360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michelehoop.com"] [uri "/wp-config.php.old"] [unique_id "aqrtdtWW2V3j91vUMnCnZAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 11:58:02 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum. ... show more (mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 07:57:57.531210 2026] [security2:error] [pid 17951:tid 17951] [client 75.84.250.82:52640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "insidepublications.com"] [uri "/wp-config.php.old"] [unique_id "aqqERQ430MXekX0ZKEKdCwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 10:33:06 (18 hours ago)	(mod_security) mod_security (id:210730) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum. ... show more (mod_security) mod_security (id:210730) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:32:58.585409 2026] [security2:error] [pid 22534:tid 22545] [client 75.84.250.82:53856] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.councilofforeignministers.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.councilofforeignministers.com"] [uri "/backup.sql"] [unique_id "aqpwWgeNXaUzNGEsS7wKjgAAAQk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-16 02:33:14 (1 day ago)	[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 75. ... show more [ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 75.84.250.82 - - \[16/Sep/2026:04:33:12 +0200\] "GET /backup.sql HTTP/1.1" 301 5713 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-15 22:41:52 (1 day ago)	[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 75.84.250.82 - - [16/Sep/2026:00:41:52 +0200] "GET /.env HTTP/1.1" 404 7962 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-15 21:11:23 (1 day ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-15 20:04:47 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 18:17:28 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum. ... show more (mod_security) mod_security (id:210730) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:17:24.844350 2026] [security2:error] [pid 24100:tid 24100] [client 75.84.250.82:48182] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|hydrometal-js.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hydrometal-js.com"] [uri "/db.sql"] [unique_id "aqmLtGMENC9POM7OcbhnOgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 15:01:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum. ... show more (mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 11:01:31.423214 2026] [security2:error] [pid 28110:tid 28110] [client 75.84.250.82:44450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hollywooddrummers.mikedeutsch.com"] [uri "/wp-config.php.bak"] [unique_id "aqldyxH8gN9ge59TU4k8HQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 14:32:00 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum. ... show more (mod_security) mod_security (id:210730) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:31:53.216629 2026] [security2:error] [pid 27621:tid 27621] [client 75.84.250.82:46520] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.brazilianbottom.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.brazilianbottom.com"] [uri "/database.sql"] [unique_id "aqgFWT6JJulbISvPRzrvQwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-14 12:19:00 (2 days ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /wp-config.php.save \| 2026-09-14 12:19 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 10:36:18 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum. ... show more (mod_security) mod_security (id:210730) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 06:36:11.236926 2026] [security2:error] [pid 2490:tid 2490] [client 75.84.250.82:53636] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|shhcenter.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "shhcenter.com"] [uri "/dump.sql"] [unique_id "aqfOG6THn4v9JL_bD35LRwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 23:37:39 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum. ... show more (mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 19:37:34.558215 2026] [security2:error] [pid 5328:tid 5352] [client 75.84.250.82:35194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gipsongrocerystore.digital4z.com"] [uri "/wp-config.php.txt"] [unique_id "aqXiPvmWdbs28iIv1PBRdgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 20:58:56 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum. ... show more (mod_security) mod_security (id:210492) triggered by 75.84.250.82 (syn-075-084-250-082.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 16:58:49.967013 2026] [security2:error] [pid 23447:tid 23447] [client 75.84.250.82:57900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stinsonbeachsurfandkayak.com"] [uri "/.env.swp"] [unique_id "aqW9CTL4Scy_Oh5RIafIigAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Tsumugi Kotobuki	2026-09-12 19:27:49 (4 days ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 47 \| Len: 60B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 47 \| Len: 60B \| Win: 64240(1) \| rDNS: syn-075-084-250-082.res.spectrum.com \| F2B/ufw-honeypot@2026-09-12T19:27:49Z show less	Port Scan Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 194.180.48.39

🇺🇸 147.182.201.29

🇺🇸 92.114.81.86

🇺🇸 69.115.78.130

🇭🇰 46.247.61.214

🇧🇪 34.22.158.50

🇸🇬 8.219.3.115

🇭🇰 223.197.146.163

🇸🇬 220.255.242.184

🇺🇸 216.180.246.2

🇦🇷 200.59.88.224

🇰🇿 188.0.144.22

🇺🇸 185.226.196.7

🇮🇷 185.145.187.163

🇨🇳 118.196.23.199

🇮🇳 117.253.142.149

🇵🇱 109.205.211.110

🇫🇷 90.28.193.230

🇫🇷 85.217.140.37

🇲🇦 81.192.46.32