JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.197.182.161

82.197.182.161 was found in our database!

This IP was reported 451 times. Confidence of Abuse is 56%: ?

56%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Init7 (Switzerland) Ltd.
Usage Type	Fixed Line ISP
ASN	AS13030
Hostname(s)	161-182-197-82.init7.net
Domain Name	init7.net
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.197.182.161

Whois 82.197.182.161

IP Abuse Reports for 82.197.182.161:

This IP address has been reported a total of 451 times from 209 distinct sources. 82.197.182.161 was first reported on July 14th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ✨	2026-06-01 23:54:10 (3 days ago)	Rule : PLESK BOT 2026-06-02 01:53:17 Unauthorized login attempt to Plesk Panel from IP 82.197.182.16 ... show more Rule : PLESK BOT 2026-06-02 01:53:17 Unauthorized login attempt to Plesk Panel from IP 82.197.182.161 with username admin show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 11:30:55 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 82.197.182.161 (161-182-197-82.init7.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 82.197.182.161 (161-182-197-82.init7.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 07:30:49.782192 2026] [security2:error] [pid 6201:tid 6201] [client 82.197.182.161:35321] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|onlineteacher.info\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "onlineteacher.info"] [uri "/dump.sql"] [unique_id "ahwb6SnmOcVRC0Lx9kkzFgAAAAE"], referer: onlineteacher.info/dump.sql show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-05-31 07:42:00 (5 days ago)	907 limiting connections by zone (2w9h35m)	DDoS Attack
🇨🇦 leithzz	2026-05-30 18:27:59 (5 days ago)	Report by Cloudflare.Time: 2026-05-30T18:27:32Z	DDoS Attack
🇧🇩 Md Sakibur Rahman	2026-05-27 08:39:39 (1 week ago)	2026-05-27T14:39:37.254354+06:00 zabbix sshd[231622]: Invalid user dev from 82.197.182.161 port 8717 ... show more 2026-05-27T14:39:37.254354+06:00 zabbix sshd[231622]: Invalid user dev from 82.197.182.161 port 8717 2026-05-27T14:39:37.950787+06:00 zabbix sshd[231622]: Failed none for invalid user dev from 82.197.182.161 port 8717 ssh2 ... show less	Brute-Force SSH
🇪🇸 librebit	2026-05-27 01:38:15 (1 week ago)	Brute force	Brute-Force
🇺🇸 xmission.com	2026-05-26 03:10:39 (1 week ago)	Blocked by UFW (TCP on 18731) Source port: 8897 TTL: 41 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 18731) Source port: 8897 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 82.197.182.161) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-24 14:34:08 (1 week ago)	(mod_security) mod_security (id:949110) triggered by 82.197.182.161 (161-182-197-82.init7.net): 1 in ... show more (mod_security) mod_security (id:949110) triggered by 82.197.182.161 (161-182-197-82.init7.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 10:34:02.497706 2026] [security2:error] [pid 17456:tid 17456] [client 82.197.182.161:17608] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "jrwoodsrentals.com"] [uri "/dump.sql"] [unique_id "ahMMWohK_Aum46Vx_630BQAAABM"], referer: jrwoodsrentals.com/dump.sql show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Kotiacat_one	2026-05-24 12:03:12 (1 week ago)	2026-05-24T15:03:11.686558+03:00 kotiacat.nexus sshd-session[13376]: Invalid user 1 from 82.197.182. ... show more 2026-05-24T15:03:11.686558+03:00 kotiacat.nexus sshd-session[13376]: Invalid user 1 from 82.197.182.161 port 28056 ... show less	Brute-Force SSH
🇳🇱 Kotiacat_one	2026-05-23 09:57:01 (1 week ago)	2026-05-23T12:57:00.499633+03:00 kotiacat.nexus sshd-session[6087]: Invalid user 1 from 82.197.182.1 ... show more 2026-05-23T12:57:00.499633+03:00 kotiacat.nexus sshd-session[6087]: Invalid user 1 from 82.197.182.161 port 12127 ... show less	Brute-Force SSH
🇺🇸 xmission.com	2026-05-17 03:38:39 (2 weeks ago)	Blocked by UFW (TCP on 65535) Source port: 50142 TTL: 42 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 65535) Source port: 50142 TTL: 42 Packet length: 60 TOS: 0x08 This report (for 82.197.182.161) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-14 11:17:52 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 82.197.182.161 (161-182-197-82.init7.net): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 82.197.182.161 (161-182-197-82.init7.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 07:17:45.612566 2026] [security2:error] [pid 21716:tid 21724] [client 82.197.182.161:46843] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.nimbll.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nimbll.com"] [uri "/"] [unique_id "agWvWZiISADtyI30Oy7uwAAAAMQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 gaztronics	2026-05-07 03:04:51 (4 weeks ago)	2026-05-07T03:04:45.093988 liberator sendmail[203750]: 64734hMh203750: 161-182-197-82.init7.net [82. ... show more 2026-05-07T03:04:45.093988 liberator sendmail[203750]: 64734hMh203750: 161-182-197-82.init7.net [82.197.182.161] (may be forged) did not issue MAIL/EXPN/VRFY/ETRN during connection to TLSMTA ... show less	Brute-Force
🇺🇸 oncord	2026-04-30 13:44:38 (1 month ago)	Form spam	Web Spam
🇫🇷 pr0vieh	2026-04-25 16:50:50 (1 month ago)	2026-04-25T18:50:37.789551+02:00 Linux08 sshd[38410]: Failed password for invalid user oracle from 8 ... show more 2026-04-25T18:50:37.789551+02:00 Linux08 sshd[38410]: Failed password for invalid user oracle from 82.197.182.161 port 50090 ssh2 2026-04-25T18:50:40.662947+02:00 Linux08 sshd[38410]: Failed password for invalid user oracle from 82.197.182.161 port 50090 ssh2 2026-04-25T18:50:43.167909+02:00 Linux08 sshd[38646]: Invalid user oracle from 82.197.182.161 port 52273 2026-04-25T18:50:44.101770+02:00 Linux08 sshd[38410]: Failed password for invalid user oracle from 82.197.182.161 port 50090 ssh2 2026-04-25T18:50:43.497220+02:00 Linux08 sshd[38646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.197.182.161 2026-04-25T18:50:45.279785+02:00 Linux08 sshd[38646]: Failed password for invalid user oracle from 82.197.182.161 port 52273 ssh2 2026-04-25T18:50:46.910713+02:00 Linux08 sshd[38410]: Failed password for invalid user oracle from 82.197.182.161 port 50090 ssh2 2026-04-25T18:50:47.576900+02:00 Linux08 sshd[38646]: Failed password for invalid user ... show less	Brute-Force SSH

Showing 1 to 15 of 451 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.62.156.67

🇳🇱 45.148.10.240

🇮🇱 2.55.85.4

🇨🇳 220.180.166.214

🇳🇿 219.89.197.82

🇮🇹 195.32.124.27

🇲🇽 177.227.56.31

🇩🇪 167.94.146.44

🇨🇳 219.128.15.190

🇨🇳 218.59.201.12

🇪🇨 193.30.14.161

🇺🇸 162.216.150.12

🇫🇮 147.185.133.60

🇺🇸 45.45.237.206

🇸🇬 43.172.197.103

🇺🇸 34.181.229.236

🇺🇬 196.0.242.54

🇨🇳 171.115.28.180

🇸🇬 165.154.236.104

🇺🇸 135.237.81.94