JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.118.29.214

82.118.29.214 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 28%: ?

28%

ISP	Sheimo Scorpion Data AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	scorpiondata.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.118.29.214

Whois 82.118.29.214

IP Abuse Reports for 82.118.29.214:

This IP address has been reported a total of 136 times from 74 distinct sources. 82.118.29.214 was first reported on August 10th 2022, and the most recent report was 52 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-09-19 14:09:20 (52 minutes ago)	CMS/framework probe: 82.118.29.214 - - [19/Sep/2026:16:09:19 +0200] "GET /_profiler/phpinfo HTTP/1.1 ... show more CMS/framework probe: 82.118.29.214 - - [19/Sep/2026:16:09:19 +0200] "GET /_profiler/phpinfo HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" asn=206092 org="F.N.S. HOLDINGS LIMITED" country=SE ... show less	Web App Attack
🇺🇸 Charlesiv	2026-09-19 10:00:33 (5 hours ago)	Triggered Cloudflare WAF (firewallCustom) from SE. Action taken: BLOCK ASN: 206092 (F.N.S. HOLDINGS ... show more Triggered Cloudflare WAF (firewallCustom) from SE. Action taken: BLOCK ASN: 206092 (F.N.S. HOLDINGS LIMITED) Protocol: HTTP/1.1 (POST method) Endpoint: / Timestamp: 2026-09-19T09:48:39Z Ray ID: a3d7ad0cd9a0618c UA: python-requests/2.32.5 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-19 08:16:10 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 04:16:04.083959 2026] [security2:error] [pid 10569:tid 10569] [client 82.118.29.214:47137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wearywillie.com"] [uri "/.git/config"] [unique_id "aq5ExDDpsXsm6fyORAKDuQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-19 08:54:01 (1 month ago)	FPROCO WEBFORM SPAM 82.118.29.214 (82.118.29.214)	Web Spam
Anonymous	2026-07-17 05:02:52 (2 months ago)	[email.tmg.gr] wp-login-spray-user: sites=tmg.gr; samples=target_user=tmgnikos \| distinct_ips=16 \| t ... show more [email.tmg.gr] wp-login-spray-user: sites=tmg.gr; samples=target_user=tmgnikos \| distinct_ips=16 \| total_fails=41 show less	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-07-07 06:51:16 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-06-28 19:19:07 (2 months ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-06-28 19:18:08.546 \|	Web App Attack
Anonymous	2026-06-27 15:54:05 (2 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇬🇧 Smish	2026-06-27 11:58:47 (2 months ago)	HONEYPOT HIT --> Fail2ban time=1782561527 log=2026-06-27T12:58:47+01:00 ip=82.118.29.214 host=direct ... show more HONEYPOT HIT --> Fail2ban time=1782561527 log=2026-06-27T12:58:47+01:00 ip=82.118.29.214 host=direct.smishcraft.com method=GET uri="/.env.local" status=404 ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36" ref="-" rid=d579ca827303c04273cf4d036bd98ac9 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 11:35:27 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 07:35:15.562177 2026] [security2:error] [pid 5932:tid 5932] [client 82.118.29.214:57677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.johneiden.com"] [uri "/.gitignore"] [unique_id "aj-1c3vFZ-Rm5lwMK8Y3ugAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 10:56:14 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:56:01.417941 2026] [security2:error] [pid 29163:tid 29163] [client 82.118.29.214:36513] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|heytechiesshow.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "heytechiesshow.com"] [uri "/database.ini"] [unique_id "aj-sQQ9yv6O7gJjIG0WdKwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 10:28:28 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:28:10.084866 2026] [security2:error] [pid 19602:tid 19602] [client 82.118.29.214:55355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lyounglaw.com"] [uri "/.env.local"] [unique_id "aj-lukCxlUUaIOzqdxuO9AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 07:56:24 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 03:55:56.792754 2026] [security2:error] [pid 4310:tid 4310] [client 82.118.29.214:40393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.iwsa.info"] [uri "/.git/description"] [unique_id "aj-CDDLh5XZ85h7IC6AYKAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Marten Mark	2026-06-27 06:16:37 (2 months ago)	82.118.29.214 - - [27/Jun/2026:06:16:36 +0000] "GET /.env.development HTTP/1.1" 404 150 "-" "Mozilla ... show more 82.118.29.214 - - [27/Jun/2026:06:16:36 +0000] "GET /.env.development HTTP/1.1" 404 150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-27 05:25:40 (2 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/config/config.json, Method:GET, UA:Mozilla/5. ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/config/config.json, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.93.88.9

🇬🇧 165.220.144.89

🇺🇸 134.33.64.214

🇫🇷 91.231.89.66

🇩🇪 89.163.152.144

🇳🇱 85.137.251.208

🇺🇸 46.18.90.116

🇧🇬 46.10.201.90

🇨🇳 14.103.201.137

🇬🇧 5.252.83.153

🇭🇰 203.185.56.59

🇳🇱 195.178.110.227

🇧🇷 189.125.111.177

🇮🇩 103.154.179.151

🇭🇰 101.36.112.205

🇺🇸 93.157.28.22

🇮🇹 79.3.96.178

🇳🇱 69.33.65.30

🇫🇷 51.91.156.22

🇺🇸 51.81.119.252