AbuseIPDB » 82.118.30.80

82.118.30.80 was found in our database!

This IP was reported 177 times. Confidence of Abuse is 26%: ?

26%

ISP	Sheimo Scorpion Data AB
Usage Type	Fixed Line ISP
ASN	AS206092
Domain Name	scorpiondata.com
Country	Czechia
City	Prague, Prague

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 82.118.30.80

Whois 82.118.30.80

IP Abuse Reports for 82.118.30.80:

This IP address has been reported a total of 177 times from 34 distinct sources. 82.118.30.80 was first reported on January 21st 2022, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Penny Packer	2025-07-07 17:28:23 (6 days ago)	Fail2Ban apache-tripwires	Web App Attack
TPI-Abuse	2025-07-01 10:58:06 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.80 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 01 06:57:59.934322 2025] [security2:error] [pid 30868:tid 30868] [client 82.118.30.80:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sportsbookcommission.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sportsbookcommission.com"] [uri "/bak/wallet.dat"] [unique_id "aGO_N03ekYPVIxRff4BDzgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-29 14:40:23 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.80 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 10:40:18.673858 2025] [security2:error] [pid 727711:tid 727711] [client 82.118.30.80:37645] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||asiabeef.network|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "asiabeef.network"] [uri "/bak/wallet.dat"] [unique_id "aGFQUmOeLkN4PYfQV4XlegAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-16 19:59:09 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.80 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 16 15:59:03.800415 2025] [security2:error] [pid 1047998:tid 1047998] [client 82.118.30.80:31295] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.enriquelaw.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.enriquelaw.com"] [uri "/back/mysql.sql"] [unique_id "aFB3h2vTSxf_bGM2TIH3xgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-06-15 00:02:00 (4 weeks ago)	Automatic report: IP 82.118.30.80 detected 109 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-06-14 00:01:41 (4 weeks ago)	Automatic report: IP 82.118.30.80 detected 109 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
mikekarl	2025-06-13 15:40:41 (1 month ago)	Empty or bad user-agent.	Bad Web Bot
blackrooty	2025-06-13 00:01:38 (1 month ago)	Automatic report: IP 82.118.30.80 detected 109 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-06-12 00:01:35 (1 month ago)	Automatic report: IP 82.118.30.80 detected 109 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-06-11 00:01:32 (1 month ago)	Automatic report: IP 82.118.30.80 detected 109 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-06-10 00:01:31 (1 month ago)	Automatic report: IP 82.118.30.80 detected 109 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-06-09 00:01:27 (1 month ago)	Automatic report: IP 82.118.30.80 detected 109 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-07 05:22:55 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 82.118.30.80 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 82.118.30.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 07 01:22:50.100889 2025] [security2:error] [pid 817619:tid 817619] [client 82.118.30.80:29649] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||crypto-stamps.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "crypto-stamps.com"] [uri "/back/wallet.dat"] [unique_id "aEPMqtRZhDL9JWgSULeemwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-06-06 12:01:14 (1 month ago)	Automatic report: IP 82.118.30.80 detected 109 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
Penny Packer	2025-06-06 11:49:55 (1 month ago)	Fail2Ban apache-tripwires	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩