JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.118.29.250

82.118.29.250 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 0%: ?

ISP	Sheimo Scorpion Data AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	scorpiondata.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.118.29.250

Whois 82.118.29.250

IP Abuse Reports for 82.118.29.250:

This IP address has been reported a total of 123 times from 62 distinct sources. 82.118.29.250 was first reported on August 10th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-08-13 03:11:24 (1 month ago)	(wordpress) Failed wordpress login from 82.118.29.250 (SE/Sweden/-): (CF_ENABLE)	Brute-Force
🇦🇺 AWW-Admin	2026-07-17 13:03:48 (2 months ago)	(wordpress) Failed wordpress login from 82.118.29.250 (SE/Sweden/-)	Brute-Force
Anonymous	2026-07-17 05:13:59 (2 months ago)	[email.tmg.gr] wp-login-spray-user: sites=tmg.gr; samples=target_user=tmgnikos \| distinct_ips=34 \| t ... show more [email.tmg.gr] wp-login-spray-user: sites=tmg.gr; samples=target_user=tmgnikos \| distinct_ips=34 \| total_fails=81 show less	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-07-07 06:51:25 (2 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-27 15:54:36 (2 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇬🇧 Smish	2026-06-27 11:58:46 (2 months ago)	HONEYPOT HIT --> Fail2ban time=1782561524 log=2026-06-27T12:58:44+01:00 ip=82.118.29.250 host=direct ... show more HONEYPOT HIT --> Fail2ban time=1782561524 log=2026-06-27T12:58:44+01:00 ip=82.118.29.250 host=direct.smishcraft.com method=GET uri="/_ignition/health-check" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" ref="-" rid=f7c588aa42494c98e473cc222ab68949 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 11:35:36 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.250 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 07:34:40.483053 2026] [security2:error] [pid 20811:tid 20811] [client 82.118.29.250:33305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.johneiden.com"] [uri "/.env"] [unique_id "aj-1UHMDHIV935VlakZCoAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 10:28:43 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.250 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:28:27.277495 2026] [security2:error] [pid 24055:tid 24055] [client 82.118.29.250:26451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lyounglaw.com"] [uri "/.env.development"] [unique_id "aj-ly952yv7NKno4xGHgCQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-27 09:36:38 (2 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/artisan, Method:GET, UA:Mozilla/5.0 (Windows ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/artisan, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0 show less	Port Scan Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-27 07:56:28 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.250 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 03:56:15.617191 2026] [security2:error] [pid 6386:tid 6386] [client 82.118.29.250:52181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.iwsa.info"] [uri "/.env.bak"] [unique_id "aj-CH0WgTxTCzcIWFwNRjgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-27 04:55:34 (2 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/settings.json, Method:GET, UA:Mozilla/5.0 (Wi ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/settings.json, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-27 03:44:36 (2 months ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env.prod, Method:GET, UA:Mozilla/5.0 (Windo ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env.prod, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-27 02:55:06 (2 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/config.json, Method:GET, UA:Mozilla/5.0 (Wind ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/config.json, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0 show less	Port Scan Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-27 02:10:51 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.250 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.118.29.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 22:09:26.344112 2026] [security2:error] [pid 19197:tid 19197] [client 82.118.29.250:28145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trafficstopper.com"] [uri "/.env.production"] [unique_id "aj8w1glK10eh24yzv3mmfwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mccsoft.io	2026-06-27 00:08:07 (2 months ago)	Web application attack / vulnerability scanning. Source sent 3 HTTP request(s) (3 distinct paths) to ... show more Web application attack / vulnerability scanning. Source sent 3 HTTP request(s) (3 distinct paths) to our public nginx web server on TCP 80/443, probing blocked/sensitive paths; all returned HTTP 444 (connection closed by security rule, jail nginx-444). Sample requests: GET /.htaccess \| GET /_ignition/execute-solution \| GET /.user.ini. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.4 Safari/6. Observed 2026-06-27 00:06:06 to 2026-06-27 00:06:22 UTC. TCP handshake completed (requests fully received). Categories: Web App Attack / Bad Web Bot. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.215

🇩🇪 36.255.97.185

🇮🇶 195.7.10.98

🇧🇷 177.36.214.46

🇺🇦 176.101.194.80

🇰🇷 152.32.139.96

🇺🇸 136.144.35.123

🇷🇺 95.165.140.133

🇺🇸 70.183.236.202

🇺🇸 67.83.163.136

🇺🇸 45.56.79.53

🇸🇬 43.173.132.93

🇰🇷 39.120.34.60

🇬🇧 35.203.210.153

🇺🇸 2001:470:1:c84::220

🇸🇾 185.224.124.118

🇳🇵 160.30.132.222

🇨🇳 125.35.109.214

🇻🇳 123.16.32.150

🇮🇩 103.154.81.166