AbuseIPDB » 82.118.29.80

82.118.29.80 was found in our database!

This IP was reported 215 times. Confidence of Abuse is 11%: ?

11%

ISP	Sheimo Scorpion Data AB
Usage Type	Data Center/Web Hosting/Transit
Domain Name	scorpiondata.com
Country	Sweden
City	Stockholm, Stockholms lan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 82.118.29.80

Whois 82.118.29.80

IP Abuse Reports for 82.118.29.80:

This IP address has been reported a total of 215 times from 52 distinct sources. 82.118.29.80 was first reported on January 31st 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Ma ma	2024-03-30 19:01:00 (5 months ago)	page scanning	Web App Attack
MPL	2024-03-26 03:13:10 (5 months ago)	tcp/2955 (15 or more attempts)	Port Scan
10dencehispahard SL	2024-03-19 06:00:04 (5 months ago)	Unauthorized login attempts [ wordpress-xmlrpc]	Brute-Force Web App Attack
TPI-Abuse	2024-03-03 16:45:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 03 11:45:20.718152 2024] [security2:error] [pid 15693] [client 82.118.29.80:9803] [client 82.118.29.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "olimpiacerda.com"] [uri "/backup/.env"] [unique_id "ZeSpIAUpzbjfKaECJBvuaAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-03-02 14:32:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 02 09:32:43.170325 2024] [security2:error] [pid 18526] [client 82.118.29.80:54335] [client 82.118.29.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crypto-stamps.com"] [uri "/back/.env"] [unique_id "ZeM4i0JMvAe8SkLjLH0MkgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-02-24 20:35:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 24 15:35:19.240285 2024] [security2:error] [pid 23519] [client 82.118.29.80:54765] [client 82.118.29.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayareamustangs.com"] [uri "/restore/.env"] [unique_id "ZdpTB17Rx3j-MK094Uoe8QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-02-18 04:28:01 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 17 23:27:55.660150 2024] [security2:error] [pid 13092] [client 82.118.29.80:45967] [client 82.118.29.80] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mjkhan.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mjkhan.com"] [uri "/bak/sql.sql"] [unique_id "ZdGHS46ubMjat_XlkmU--gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
hbrks	2024-02-17 22:02:32 (6 months ago)	HEAD http://crm.marche-be.com/backups/wallet.zip statusCode: 503	Web Spam Hacking Bad Web Bot
TPI-Abuse	2024-02-16 05:38:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 82.118.29.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 16 00:38:32.052551 2024] [security2:error] [pid 8257:tid 47950363371264] [client 82.118.29.80:40071] [client 82.118.29.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluetigertees.com"] [uri "/sftp-config.json"] [unique_id "Zc702OC82K9M_l7KJPv0sAAAAIY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-01-29 23:25:02 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2024-01-03 08:20:06 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2023-12-31 08:10:13 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2023-12-23 09:30:05 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2023-12-20 09:20:05 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2023-12-17 09:10:06 (8 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking