AbuseIPDB » 82.180.145.186

82.180.145.186 was found in our database!

This IP was reported 279 times. Confidence of Abuse is 86%: ?

86%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ind.lknodeserver.com
Domain Name	contabo.com
Country	India
City	Mumbai, Maharashtra

Report 82.180.145.186

Whois 82.180.145.186

IP Abuse Reports for 82.180.145.186:

This IP address has been reported a total of 279 times from 102 distinct sources. 82.180.145.186 was first reported on October 12th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Rizzy	2024-10-20 14:19:50 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
robotstxt	2024-10-20 13:18:57 (1 month ago)	82.180.145.186 - - [20/Oct/2024:13:17:22 +0000] "GET /cgi-bin/plugins.php HTTP/1.1" 404 40736 "-" rt ... show more82.180.145.186 - - [20/Oct/2024:13:17:22 +0000] "GET /cgi-bin/plugins.php HTTP/1.1" 404 40736 "-" rt="0.159" "-" "-" h="www.wphospitalet.com" sn="www.wphospitalet.com" ru="/cgi-bin/plugins.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wphospitalet82.sock" us="404" uct="0.000" urt="0.159" 82.180.145.186 - - [20/Oct/2024:13:17:26 +0000] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 40736 "-" rt="0.160" "-" "-" h="www.wphospitalet.com" sn="www.wphospitalet.com" ru="/cgi-bin/xmrlpc.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wphospitalet82.sock" us="404" uct="0.000" urt="0.160" 82.180.145.186 - - [20/Oct/2024:13:17:22 +0000] "GET /cgi-bin/plugins.php HTTP/1.1" 404 40736 "-" "-" "-" 82.180.145.186 - - [20/Oct/2024:13:17:26 +0000] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 40736 "-" "-" "-" 82.180.145.186 - - [20/Oct/2024:13:18:18 +0000] "GET /cgi-bin/file.php HTTP/1.1" 404 40736 "-" rt="0.168" "-" "-" h="www.wphospitalet.com" sn="www.wphospitalet.com" ru="/cgi-bin/file.php" u="/index.php" uc ... show less	Bad Web Bot
myagent.site	2024-10-20 08:35:51 (1 month ago)	Blocking for trying to access an exploit file: /cgi-bin/xmrlpc.php	Hacking
ToDi	2024-10-20 04:07:24 (1 month ago)	WebAttack or semilar from 82.180.145.186	Web App Attack
Anonymous	2024-10-20 01:52:24 (1 month ago)	wordpress-trap	Web App Attack
dwmp	2024-10-19 23:50:21 (1 month ago)	[Sat Oct 19 21:23:43.932172 2024] [authz_core:error] [pid 1038685:tid 140037921064704] [client 82.18 ... show more[Sat Oct 19 21:23:43.932172 2024] [authz_core:error] [pid 1038685:tid 140037921064704] [client 82.180.145.186:62894] AH01630: client denied by server configuration: /var/www/vhosts/feikar-karate-difesapersonale.it/httpdocs/wp-admin/css/license.php [Sat Oct 19 21:24:17.192121 2024] [authz_core:error] [pid 1038685:tid 140037811336960] [client 82.180.145.186:62894] AH01630: client denied by server configuration: /var/www/vhosts/feikar-karate-difesapersonale.it/httpdocs/wp-admin/license.php [Sat Oct 19 21:25:44.523157 2024] [authz_core:error] [pid 1038685:tid 140037912672000] [client 82.180.145.186:62894] AH01630: client denied by server configuration: /var/www/vhosts/feikar-karate-difesapersonale.it/httpdocs/wp-content/plugins/Cache [Sun Oct 20 01:49:20.055121 2024] [authz_core:error] [pid 1536788:tid 140037802944256] [client 82.180.145.186:62108] AH01630: client denied by server configuration: /var/www/vhosts/123marketing.it/httpdocs/readme.php [Sun Oct 20 01:50:21.616278 2024] [authz_co ... show less	Brute-Force
Anonymous	2024-10-19 23:22:38 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 82.180.145.186 (IN/India/vmi2200755.con ... show more(mod_security) mod_security triggered on hostname [redacted] 82.180.145.186 (IN/India/vmi2200755.contaboserver.net) show less	SQL Injection
Gwyneth Llewelyn	2024-10-19 22:18:11 (1 month ago)	82.180.145.186 - - [19/Oct/2024:23:18:09 +0100] "GET /cgi-bin/plugins.php HTTP/2.0" 404 96 "-" "-"	Bad Web Bot
rtbh.com.tr	2024-10-19 20:53:43 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-10-19 17:33:43 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
OuverneY	2024-10-19 15:49:16 (1 month ago)	FW-PortScan: Traffic Blocked (Port=443 <- 27 attempts), (Port=80 <- 26 attempts), Total connections ... show moreFW-PortScan: Traffic Blocked (Port=443 <- 27 attempts), (Port=80 <- 26 attempts), Total connections: 106, Total destination IPs: 1 show less	Port Scan
SpeedIT Solutions	2024-10-19 14:29:39 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 82.180.145.186 (IN/India/vmi2200755.con ... show more(mod_security) mod_security triggered on hostname [redacted] 82.180.145.186 (IN/India/vmi2200755.contaboserver.net): (CF_ENABLE) show less	SQL Injection
TrafficAnalyser	2024-10-19 08:25:45 (1 month ago)	Probing "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1"	Web App Attack
Bon I.T	2024-10-19 07:41:00 (1 month ago)	POST /alfacgiapi/perl.alfa HTTP/1.1 GET /wp-content/themes/seotheme/db.php?u HTTP/1.1 ... show morePOST /alfacgiapi/perl.alfa HTTP/1.1 GET /wp-content/themes/seotheme/db.php?u HTTP/1.1 POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1 show less	Hacking Web App Attack
gurnip	2024-10-19 05:47:31 (1 month ago)	Vulnerability probe of page /wp-content/themes/seotheme/db.php?u, not found on server.	Brute-Force Web App Attack