JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.118.30.45

82.118.30.45 was found in our database!

This IP was reported 236 times. Confidence of Abuse is 28%: ?

28%

ISP	Sheimo Scorpion Data AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	scorpiondata.com
Country	🇨🇿 Czechia
City	Prague, Prague

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.118.30.45

Whois 82.118.30.45

IP Abuse Reports for 82.118.30.45:

This IP address has been reported a total of 236 times from 65 distinct sources. 82.118.30.45 was first reported on February 28th 2022, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 SilverZippo	2026-06-30 14:50:36 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 IRISIO	2026-06-09 07:45:41 (3 weeks ago)	scans/SQL injection/spam posts : 189 queries	Web App Attack SQL Injection
🇫🇷 IRISIO	2026-06-08 19:02:46 (3 weeks ago)	scans/SQL injection/spam posts : 178 queries	Web App Attack SQL Injection
🇫🇷 IRISIO	2026-06-08 08:02:39 (3 weeks ago)	scans/SQL injection/spam posts : 81 queries	Web App Attack SQL Injection
🇪🇸 librebit	2026-06-03 04:07:07 (1 month ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-05-25 17:40:38 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 82.118.30.45 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 82.118.30.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 13:40:32.924222 2026] [security2:error] [pid 6806:tid 6806] [client 82.118.30.45:54187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "auditleverage.com"] [uri "/src/.env"] [unique_id "ahSJkAvNan2ETAdLCzKqbQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-05-25 17:09:39 (1 month ago)	[Tue May 26 03:09:38.865908 2026] [security2:error] [pid 145276] [client 82.118.30.45:25289] [client ... show more [Tue May 26 03:09:38.865908 2026] [security2:error] [pid 145276] [client 82.118.30.45:25289] [client 82.118.30.45] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "balcomberetreat.com.au"] [uri "/.env.local"] [unique_id "ahSCUogGNlhMzceH_uhTlQAAAAE"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 08:55:22 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 82.118.30.45 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 82.118.30.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 04:55:18.343743 2026] [security2:error] [pid 4862:tid 4862] [client 82.118.30.45:51157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kennedysplace.com"] [uri "/.env"] [unique_id "ahQOdtfMvMPdFsbwVYSC0QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-05-25 08:48:59 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 dbmwebdesign	2026-05-14 09:46:38 (1 month ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇮 YF	2026-05-08 13:19:50 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
Anonymous	2026-04-26 21:36:28 (2 months ago)	82.118.30.45 - - [26/Apr/2026:21:36:28 +0000] "GET /bothole/stinkwell.php?t=45190%27%29+ORDER+BY+92- ... show more 82.118.30.45 - - [26/Apr/2026:21:36:28 +0000] "GET /bothole/stinkwell.php?t=45190%27%29+ORDER+BY+92--+- HTTP/1.1" 307 720 "https://www.atari-forum.com/viewtopic.php?t=45190%27%29+ORDER+BY+92--+-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	SQL Injection
🇸🇬 Cloudkul Cloudkul	2026-04-20 13:48:30 (2 months ago)	Multiple unauthorized attempts to access web resources	Brute-Force Web App Attack
🇭🇺 DumaNet	2026-04-20 13:04:00 (2 months ago)	WordPress plugin attack attempts. Date: 2026 Apr 17. 02:34:25 Source IP: 82.118.30.45 Portion o ... show more WordPress plugin attack attempts. Date: 2026 Apr 17. 02:34:25 Source IP: 82.118.30.45 Portion of the log(s): 82.118.30.45 - [17/Apr/2026:02:34:24 +0200] "GET /wp-includes/css/dist/components/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 82.118.30.45 - [17/Apr/2026:02:34:24 +0200] "GET /wp-includes/blocks/archives/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 82.118.30.45 - [17/Apr/2026:02:34:24 +0200] "GET /wp-includes/blocks/code/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 82.118.30.45 - [17/Apr/2026:02:34:24 +0200] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/53 show less	Web App Attack Hacking
🇩🇪 Ba-Yu	2026-04-18 13:33:37 (2 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 236 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.228.19.232

🇱🇹 62.60.130.219

🇺🇸 20.169.49.156

🇨🇳 218.75.165.74

🇺🇸 193.19.109.174

🇺🇿 185.139.137.68

🇺🇸 148.72.64.140

🇸🇬 101.47.15.26

🇨🇳 1.85.216.177

🇧🇷 200.155.66.2

🇷🇴 193.46.255.86

🇫🇮 147.185.133.173

🇺🇸 147.185.132.189

🇳🇱 45.148.10.147

🇬🇧 35.203.211.3

🇧🇬 193.24.211.107

🇦🇷 181.104.2.87

🇰🇷 112.151.178.49

🇮🇩 103.44.26.197

🇫🇷 62.210.89.150