JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.118.29.216

82.118.29.216 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 52%: ?

52%

ISP	Sheimo Scorpion Data AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	scorpiondata.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.118.29.216

Whois 82.118.29.216

IP Abuse Reports for 82.118.29.216:

This IP address has been reported a total of 116 times from 51 distinct sources. 82.118.29.216 was first reported on August 11th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 AutosOnShow	2026-06-28 14:14:08 (2 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-28 14:13:33.309 \|	Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 11:35:41 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.216 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 07:34:47.094765 2026] [security2:error] [pid 877:tid 877] [client 82.118.29.216:53009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.johneiden.com"] [uri "/.env"] [unique_id "aj-1V5_AmmzrC0hB81gHyAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 10:56:05 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.216 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:55:52.369349 2026] [security2:error] [pid 15396:tid 15396] [client 82.118.29.216:30203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heytechiesshow.com"] [uri "/.env"] [unique_id "aj-sOCKlbalkPrzkCc9A1gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 10:28:31 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.216 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:28:15.232608 2026] [security2:error] [pid 20559:tid 20559] [client 82.118.29.216:25645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lyounglaw.com"] [uri "/.env.prod"] [unique_id "aj-lv2Z8FFCL6VT2T_wj1QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-27 08:53:38 (4 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/laravel/.env, Method:GET, UA:Mozilla/5.0 (Wi ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/laravel/.env, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-27 07:56:00 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.216 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 03:55:38.230969 2026] [security2:error] [pid 6101:tid 6101] [client 82.118.29.216:51089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.iwsa.info"] [uri "/.env"] [unique_id "aj-B-lkMmyOAJQH_8OgMhgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Marten Mark	2026-06-27 06:16:23 (4 days ago)	82.118.29.216 - - [27/Jun/2026:06:16:19 +0000] "GET /.git/config HTTP/1.1" 200 259 "-" "Mozilla/5.0 ... show more 82.118.29.216 - - [27/Jun/2026:06:16:19 +0000] "GET /.git/config HTTP/1.1" 200 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-27 05:23:04 (4 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/database.yml, Method:GET, UA:Mozilla/5.0 (Ma ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/database.yml, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.4 Safari/605.1.15 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-27 04:42:37 (4 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.gitconfig, Method:GET, UA:Mozilla/5.0 (X11; ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/.gitconfig, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-27 03:55:16 (4 days ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.prod, Method:GET, UA:Mozilla/5.0 (X11; L ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.prod, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-27 02:55:09 (4 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env.local, Method:GET, UA:Mozilla/5.0 (X11; ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env.local, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇺🇸 mccsoft.io	2026-06-27 00:07:01 (4 days ago)	Web application attack / vulnerability scanning. Source sent 1 HTTP request(s) (1 distinct paths) to ... show more Web application attack / vulnerability scanning. Source sent 1 HTTP request(s) (1 distinct paths) to our public nginx web server on TCP 80/443, probing blocked/sensitive paths; all returned HTTP 444 (connection closed by security rule, jail nginx-444). Sample requests: GET /.git/config. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36. Observed 2026-06-27 00:06:02 UTC. TCP handshake completed (requests fully received). Categories: Web App Attack / Bad Web Bot. show less	Bad Web Bot Web App Attack
Anonymous	2026-06-26 18:58:33 (4 days ago)	fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [uri "/.env. ... show more fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [uri "/.env.backup"] show less	Bad Web Bot Web App Attack
Anonymous	2026-06-26 18:37:16 (4 days ago)	82.118.29.216 - - [26/Jun/2026:18:37:16 +0000] "GET /.env.local HTTP/1.1" 404 6970 "-" "Mozilla/5.0 ... show more 82.118.29.216 - - [26/Jun/2026:18:37:16 +0000] "GET /.env.local HTTP/1.1" 404 6970 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" ... show less	Brute-Force Web App Attack
Anonymous	2026-06-26 17:58:51 (4 days ago)	82.118.29.216 - - [26/Jun/2026:19:58:50 +0200] "GET /.env.travis HTTP/1.1" 403 2368 "-" "Mozilla/5.0 ... show more 82.118.29.216 - - [26/Jun/2026:19:58:50 +0200] "GET /.env.travis HTTP/1.1" 403 2368 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 188.53.231.104

🇫🇷 176.139.16.144

🇨🇳 106.117.115.242

🇷🇺 84.47.135.154

🇺🇸 216.24.219.117

🇺🇸 195.184.76.170

🇨🇴 181.51.90.4

🇸🇬 145.223.130.13

🇧🇷 138.99.80.102

🇵🇭 131.226.102.124

🇨🇳 106.117.107.133

🇨🇳 106.117.106.4

🇺🇸 103.250.83.36

🇧🇬 79.124.62.134

🇫🇷 62.210.209.225

🇨🇳 14.103.115.162

🇺🇸 13.89.125.254

🇫🇷 2400:cb00:533:1024::8d65:5fbd

🇺🇿 213.230.111.14

🇨🇦 209.209.8.197