JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.118.30.35

82.118.30.35 was found in our database!

This IP was reported 230 times. Confidence of Abuse is 34%: ?

34%

ISP	Sheimo Scorpion Data AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	scorpiondata.com
Country	🇨🇿 Czechia
City	Prague, Prague

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.118.30.35

Whois 82.118.30.35

IP Abuse Reports for 82.118.30.35:

This IP address has been reported a total of 230 times from 64 distinct sources. 82.118.30.35 was first reported on February 14th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-30 16:53:20 (1 day ago)	Attempted access to sensitive endpoint (/adminer.php) detected. Automated scan or unauthorized probi ... show more Attempted access to sensitive endpoint (/adminer.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇬🇧 SilverZippo	2026-06-30 14:50:37 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 IRISIO	2026-06-08 10:15:54 (3 weeks ago)	scans/SQL injection/spam posts : 95 queries	Web App Attack SQL Injection
🇫🇷 IRISIO	2026-06-08 08:02:30 (3 weeks ago)	scans/SQL injection/spam posts : 93 queries	Web App Attack SQL Injection
🇺🇸 TPI-Abuse	2026-05-28 05:19:28 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 82.118.30.35 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 82.118.30.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 01:19:23.586113 2026] [security2:error] [pid 22600:tid 22600] [client 82.118.30.35:55787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arzoma.com"] [uri "/.env"] [unique_id "ahfQW-rf3KeAyv5w8t2lxgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 14:47:53 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 82.118.30.35 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 82.118.30.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:47:45.490922 2026] [security2:error] [pid 8070:tid 8070] [client 82.118.30.35:45323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thewaywework.com"] [uri "/.env.development"] [unique_id "ahRhEWs4AZHUkZIc08DpkgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-05-25 12:37:10 (1 month ago)	[Mon May 25 22:37:09.442856 2026] [security2:error] [pid 122950] [client 82.118.30.35:56903] [client ... show more [Mon May 25 22:37:09.442856 2026] [security2:error] [pid 122950] [client 82.118.30.35:56903] [client 82.118.30.35] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rjryanpartners.com.au"] [uri "/.env.example"] [unique_id "ahRCdaNv0Mgfz0TCQ2ic5wAAAAA"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-05-25 11:32:07 (1 month ago)	[Mon May 25 21:32:06.629848 2026] [security2:error] [pid 111264] [client 82.118.30.35:22153] [client ... show more [Mon May 25 21:32:06.629848 2026] [security2:error] [pid 111264] [client 82.118.30.35:22153] [client 82.118.30.35] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.info"] [uri "/config/.env"] [unique_id "ahQzNjtYJK9oO2xhCB6wSgAAAA4"] ... show less	Web App Attack
🇬🇧 consul.to	2026-05-25 09:18:37 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇦🇺 screwlooseit.com.au	2026-05-14 08:50:53 (1 month ago)	Blocked by CSF 13 firewall - Rule: XMLRPC SE/Sweden/-	Web App Attack
🇩🇪 raph	2026-05-11 14:37:32 (1 month ago)	[SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%2 ... show more [SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%20and%20\|%20OR%20\|%20or%20).* HTTP/1.1$ show less	SQL Injection
🇫🇮 YF	2026-05-08 12:41:59 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
Anonymous	2026-04-26 21:37:25 (2 months ago)	82.118.30.35 - - [26/Apr/2026:21:37:24 +0000] "GET /bothole/stinkwell.php?t=45190%27%29%29+ORDER+BY+ ... show more 82.118.30.35 - - [26/Apr/2026:21:37:24 +0000] "GET /bothole/stinkwell.php?t=45190%27%29%29+ORDER+BY+12--+- HTTP/1.1" 307 726 "https://www.atari-forum.com/viewtopic.php?t=45190%27%29%29+ORDER+BY+12--+-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	SQL Injection
🇬🇧 Oakley	2026-04-26 04:40:26 (2 months ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇷🇺 sms.ru	2026-04-21 07:39:55 (2 months ago)	/wp-admin/images/module.php	Web App Attack

Showing 1 to 15 of 230 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 160.22.161.209

🇰🇷 222.232.176.7

🇺🇸 209.50.54.123

🇺🇦 195.216.210.172

🇳🇱 192.42.116.97

🇨🇦 185.98.171.206

🇺🇸 172.234.25.61

🇺🇸 167.253.17.103

🇨🇭 107.189.3.148

🇫🇷 91.196.152.200

🇬🇧 89.37.172.133

🇪🇸 79.117.209.143

🇺🇸 69.229.227.44

🇧🇷 45.205.1.222

🇺🇸 44.9.90.126

🇷🇴 2.57.121.112

🇷🇴 2.57.121.25

🇺🇸 2001:470:1:fb5::1f9

🇲🇽 189.174.75.82

🇬🇧 185.216.145.171