JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

82.115.13.141

Neutral Activity

Abuse confidence score ?

0% Low Risk

41 reports

35 reporters · latest 2 years ago

ISP	Deployish Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212552
Domain Name	deployish.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

82.115.13.141 has been reported 41 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 82.115.13.141

This IP address has been reported a total of 41 times from 35 distinct sources. 82.115.13.141 was first reported on June 28th 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Alexandr Kulkov	2024-07-23 23:42:12 (2 years ago)	TCP 82.115.13.141:42714->46.180.x.x:80	Port Scan Hacking Exploited Host
🇯🇵 zwh	2024-07-23 17:51:06 (2 years ago)	Port Scan	Port Scan
🇮🇪 RoboSOC	2024-07-23 10:30:44 (2 years ago)	Port 22 Scan, PTR: None	Port Scan
🇧🇷 diego	2024-07-23 07:50:48 (2 years ago)	[rede-164-29] 82.115.13.141 (AU/Australia/-), more than 10 Apache 404 hits in the last 3600 secs; Po ... show more [rede-164-29] 82.115.13.141 (AU/Australia/-), more than 10 Apache 404 hits in the last 3600 secs; Ports: *; Direction: in; Trigger: LF_APACHE_404; Logs: show less	Port Scan
🇺🇸 bigscoots.com	2024-07-23 07:49:06 (2 years ago)	(sshd) Failed SSH login from 82.115.13.141 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: * ... show more (sshd) Failed SSH login from 82.115.13.141 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 23 02:48:03 13860 sshd[13184]: Invalid user test1 from 82.115.13.141 port 52416 Jul 23 02:48:05 13860 sshd[13184]: Failed password for invalid user test1 from 82.115.13.141 port 52416 ssh2 Jul 23 02:48:32 13860 sshd[13194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.115.13.141 user=root Jul 23 02:48:34 13860 sshd[13194]: Failed password for root from 82.115.13.141 port 36212 ssh2 Jul 23 02:48:59 13860 sshd[13203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.115.13.141 user=root show less	Brute-Force SSH
🇺🇸 MPL	2024-07-23 07:31:54 (2 years ago)	tcp ports: 22,23 (2 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2024-07-23 07:23:10 (2 years ago)	(mod_security) mod_security (id:211220) triggered by 82.115.13.141 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211220) triggered by 82.115.13.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 23 03:23:05.708229 2024] [security2:error] [pid 15913:tid 15913] [client 82.115.13.141:33012] [client 82.115.13.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\?(?!xml\\\\s)" at ARGS_NAMES:/<?echo(md5("hi"));?> /tmp/index1.php. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "70"] [id "211220"] [rev "4"] [msg "COMODO WAF: PHP Injection Attack\|\|192.64.150.159:80\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.159"] [uri "/index.php"] [unique_id "Zp9aWTQMsCHR_LgX5Ld3ZgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2024-07-23 07:20:57 (2 years ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇬🇧 SilverZippo	2024-07-23 06:58:02 (2 years ago)	Web App Attack	Web App Attack
🇺🇸 bigscoots.com	2024-07-23 06:55:45 (2 years ago)	(sshd) Failed SSH login from 82.115.13.141 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: * ... show more (sshd) Failed SSH login from 82.115.13.141 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 23 01:54:40 15101 sshd[30698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.115.13.141 user=root Jul 23 01:54:43 15101 sshd[30698]: Failed password for root from 82.115.13.141 port 50154 ssh2 Jul 23 01:55:04 15101 sshd[30772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.115.13.141 user=nginx Jul 23 01:55:07 15101 sshd[30772]: Failed password for nginx from 82.115.13.141 port 50738 ssh2 Jul 23 01:55:29 15101 sshd[30780]: Invalid user cyber from 82.115.13.141 port 50322 show less	Brute-Force SSH
🇩🇪 ps-center	2024-07-23 06:52:56 (2 years ago)	HHV-W: TCP-Scanner. Port: 23	Port Scan
🇺🇸 Like Ma	2024-07-23 06:32:39 (2 years ago)	Jul 23 02:32:16 newage sshd[20501]: Failed password for root from 82.115.13.141 port 53560 ssh2 ...	Brute-Force SSH
🇩🇪 KPS	2024-07-23 04:54:57 (2 years ago)	PortscanM	Port Scan
🇧🇷 diego	2024-07-23 04:39:10 (2 years ago)	[rede-166-249] 82.115.13.141 (AU/Australia/-), more than 10 Apache 404 hits in the last 3600 secs; P ... show more [rede-166-249] 82.115.13.141 (AU/Australia/-), more than 10 Apache 404 hits in the last 3600 secs; Ports: *; Direction: in; Trigger: LF_APACHE_404; Logs: show less	Port Scan
Anonymous	2024-07-23 04:29:09 (2 years ago)	sshd	Brute-Force SSH

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 20.219.189.206

🇰🇷 221.156.241.83

🇧🇪 198.235.24.134

🇮🇳 182.156.35.238

🇺🇸 180.92.136.160

🇫🇷 172.69.222.154

🇩🇪 159.100.13.116

🇫🇮 157.180.125.151

🇭🇰 152.32.172.191

🇦🇺 146.88.22.2

🇨🇳 120.48.148.35

🇺🇸 107.174.111.7

🇨🇳 94.231.206.159

🇺🇿 89.126.208.27

🇺🇸 64.247.178.22

🇦🇲 46.70.207.20

🇺🇦 37.221.150.11

🇺🇸 35.255.45.68

🇺🇸 34.172.244.43

🇩🇪 2.28.235.95