AbuseIPDB » 82.21.141.12
82.21.141.12
This IP was reported 8 times. Confidence of
Abuse
is 32% : ?
ISP
Internet Utilities Europe and Asia Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
netutils.io
Country
🇬🇧
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 82.21.141.12 :
This IP address has been reported a total of
8
times from
4 distinct
sources.
82.21.141.12 was first reported on
July 26th 2026 , and the most recent report was
57 minutes ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-28 05:02:22
(57 minutes ago)
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 01:02:17.930677 2026] [security2:error] [pid 13599:tid 13599] [client 82.21.141.12:24140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "filmpolis.com"] [uri "/sftp-config.json"] [unique_id "amg32bGtyp7rXSsz26JIoAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 12:53:18
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:53:15.262267 2026] [security2:error] [pid 3625768:tid 3625768] [client 82.21.141.12:65488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "femdomchatbot.com"] [uri "/sftp-config.json"] [unique_id "amdUu_wYeJIdEQGoTWi8kwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-07-27 11:48:41
(18 hours ago)
[MonJul2713:48:34.7710082026][security2:error][pid324839:tid324879][client82.21.141.12:0]ModSecurity ...
show more
[MonJul2713:48:34.7710082026][security2:error][pid324839:tid324879][client82.21.141.12:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"felinescubicle.ch\"][uri\"/sftp-config.json\"][unique_id\"amdFkgIromGBcwWdWvIXbAAAANA\"]
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-07-27 10:27:11
(19 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 08:02:11
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:02:03.927753 2026] [security2:error] [pid 3947870:tid 3947870] [client 82.21.141.12:13954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "feathersolar.com"] [uri "/sftp-config.json"] [unique_id "amcQe9Fe_5lPGxRdQxk5hQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-07-27 03:35:29
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 00:56:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 20:56:31.258814 2026] [security2:error] [pid 311774:tid 311774] [client 82.21.141.12:60366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fastpc.biz"] [uri "/sftp-config.json"] [unique_id "amasv2viwjyi9Ab5zazNIwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 16:46:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.21.141.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 12:46:05.866048 2026] [security2:error] [pid 2934181:tid 2934181] [client 82.21.141.12:58962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fancycleaners.com"] [uri "/sftp-config.json"] [unique_id "amY5zVkLaJTSX_OXDBdTjgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: