JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.118.30.38

82.118.30.38 was found in our database!

This IP was reported 232 times. Confidence of Abuse is 51%: ?

51%

ISP	Sheimo Scorpion Data AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	scorpiondata.com
Country	🇨🇿 Czechia
City	Prague, Prague

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.118.30.38

Whois 82.118.30.38

IP Abuse Reports for 82.118.30.38:

This IP address has been reported a total of 232 times from 66 distinct sources. 82.118.30.38 was first reported on February 7th 2022, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-07-09 06:57:01 (17 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇬🇧 consul.to	2026-07-08 19:50:46 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 nyt	2026-07-08 18:11:01 (1 day ago)	Web Shell Upload	Hacking Web App Attack
🇫🇷 Octopuce	2026-07-08 11:40:43 (1 day ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/wordpress-seo/wp-seo-main-float.php / ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/wordpress-seo/wp-seo-main-float.php /wp-content/plugins/enhanced-text-widget/ana ... show less	Web App Attack
🇬🇧 SilverZippo	2026-06-30 14:50:38 (1 week ago)	Web App Attack	Web App Attack
🇯🇵 demonsword	2026-06-30 09:51:26 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.cyberghostvpn.com:443 show less	Open Proxy Port Scan
🇫🇷 IRISIO	2026-06-08 10:15:55 (1 month ago)	scans/SQL injection/spam posts : 307 queries	Web App Attack SQL Injection
🇫🇷 IRISIO	2026-06-08 08:02:34 (1 month ago)	scans/SQL injection/spam posts : 231 queries	Web App Attack SQL Injection
🇺🇸 TPI-Abuse	2026-05-28 02:28:09 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 22:28:03.441532 2026] [security2:error] [pid 16456:tid 16466] [client 82.118.30.38:30159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.doorways.dk"] [uri "/.env.production"] [unique_id "aheoM01KMAc3zsWOtejiDgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-05-28 01:35:29 (1 month ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/backend/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 16:53:26 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 12:53:17.234442 2026] [security2:error] [pid 13034:tid 13034] [client 82.118.30.38:41709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keystroke.info"] [uri "/.env.dev"] [unique_id "ahR-fS0Ei5e_2RdxwiIIfAAAADY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 16:10:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 12:09:55.967700 2026] [security2:error] [pid 7487:tid 7487] [client 82.118.30.38:54251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ficklepassion.com"] [uri "/.env"] [unique_id "ahR0U2j1OR8L1Bcutd6qrgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 14:59:31 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:59:25.474951 2026] [security2:error] [pid 13457:tid 13457] [client 82.118.30.38:47201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yerevanpress.am"] [uri "/api/.env"] [unique_id "ahRjzRbtdmdT9N8OKlPfGAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 14:33:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 82.118.30.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:32:52.169583 2026] [security2:error] [pid 23347:tid 23347] [client 82.118.30.38:40853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "venturecg.com"] [uri "/.env.staging"] [unique_id "ahRdlL6RsZY9_Kyz715FWgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Anytech	2026-05-25 13:33:57 (1 month ago)	Blocked by Conn-Monitor: Web scanning activity	Hacking Web App Attack

Showing 1 to 15 of 232 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 165.232.191.140

🇬🇧 92.27.101.99

🇺🇸 91.230.168.140

🇺🇸 54.203.138.147

🇮🇳 45.195.83.7

🇸🇦 37.126.137.16

🇺🇸 193.3.53.6

🇧🇷 189.0.88.13

🇹🇷 188.119.62.203

🇺🇸 173.0.84.1

🇯🇵 172.105.199.92

🇮🇳 165.232.189.76

🇮🇳 165.232.189.39

🇺🇸 165.154.255.63

🇺🇸 165.154.206.151

🇷🇴 151.242.30.212

🇺🇸 148.153.121.224

🇸🇬 139.59.113.252

🇰🇷 125.138.175.113

🇮🇳 125.16.27.190