AbuseIPDB » 82.118.30.43

82.118.30.43 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 18%: ?

18%

ISP	Sheimo Scorpion Data AB
Usage Type	Fixed Line ISP
ASN	AS206092
Domain Name	scorpiondata.com
Country	Czechia
City	Prague, Prague

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 82.118.30.43

Whois 82.118.30.43

IP Abuse Reports for 82.118.30.43:

This IP address has been reported a total of 125 times from 28 distinct sources. 82.118.30.43 was first reported on February 7th 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2025-06-29 19:03:40 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 15:03:37.833233 2025] [security2:error] [pid 1545866:tid 1545866] [client 82.118.30.43:12307] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||doubloonswap.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "doubloonswap.com"] [uri "/back/backup.sql"] [unique_id "aGGOCeUV2COWvfenH-bynwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-25 03:30:14 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 24 23:30:06.132691 2025] [security2:error] [pid 85950:tid 85950] [client 82.118.30.43:16035] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pcga.golf|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pcga.golf"] [uri "/restore/wallet.dat"] [unique_id "aFttPouSGVhT5kahy3INDgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Peter Chargen	2025-06-14 08:58:05 (1 month ago)	PHP email form abuse/SPAM attempt	Email Spam
oncord	2025-06-14 04:42:39 (1 month ago)	Form spam	Web Spam
TPI-Abuse	2025-06-11 10:45:24 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 11 06:45:21.190792 2025] [security2:error] [pid 865653:tid 865653] [client 82.118.30.43:3291] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||keychainfilms.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "keychainfilms.com"] [uri "/back/backup.sql"] [unique_id "aEleQcfgl92mX3qcDLdqfgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
hbrks	2025-06-07 22:38:03 (1 month ago)	GET http://marche-be.com/	Web Spam Hacking Bad Web Bot
TPI-Abuse	2025-06-06 08:55:32 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 06 04:55:28.201196 2025] [security2:error] [pid 3018:tid 3071] [client 82.118.30.43:19203] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bluetigertees.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluetigertees.com"] [uri "/backups/dump.sql"] [unique_id "aEKtALLYxttB09-EKS639QAAAEs"] show less	Brute-Force Bad Web Bot Web App Attack
URAN Publishing Service	2025-05-15 02:08:06 (2 months ago)	82.118.30.43 - - [15/May/2025:05:06:57 +0300] "GET //wp-includes/IXR/wp-login.php HTTP/1.1" 404 277 ... show more82.118.30.43 - - [15/May/2025:05:06:57 +0300] "GET //wp-includes/IXR/wp-login.php HTTP/1.1" 404 277 "-" "Go-http-client/1.1" 82.118.30.43 - - [15/May/2025:05:08:05 +0300] "GET //wp-includes/SimplePie/index.php HTTP/1.1" 404 277 "-" "Go-http-client/1.1" ... show less	Web App Attack
mnsf	2025-05-14 19:05:24 (2 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
Penny Packer	2025-05-09 03:58:03 (2 months ago)	Fail2Ban apache-tripwires	Web App Attack
Anonymous	2025-05-04 23:13:06 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
TPI-Abuse	2025-04-28 02:36:03 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 22:35:59.414826 2025] [security2:error] [pid 980405:tid 980405] [client 82.118.30.43:7799] [client 82.118.30.43] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||intercotrading.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "intercotrading.com"] [uri "/restore/dump.sql"] [unique_id "aA7pjy-yAY1TI-00xDrupgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-04-27 10:44:36 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 06:44:33.320111 2025] [security2:error] [pid 2584019:tid 2584019] [client 82.118.30.43:53967] [client 82.118.30.43] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||linnardfinancial.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "linnardfinancial.com"] [uri "/bak/backup.sql"] [unique_id "aA4KkYJ2FNusfcPOmfOxHwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
bescared	2025-04-20 01:32:03 (2 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
Penny Packer	2025-04-14 12:36:59 (3 months ago)	Fail2Ban apache-tripwires	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩