AbuseIPDB » 82.224.41.17
82.224.41.17
This IP was reported 8 times. Confidence of
Abuse
is 19% : ?
ISP
Proxad / Free SAS
Usage Type
Fixed Line ISP
ASN
AS12322
Hostname(s)
82-224-41-17.subs.proxad.net
Domain Name
free.fr
Country
๐ซ๐ท
France
City
Aubagne, Provence-Alpes-Cote d'Azur
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 82.224.41.17 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
82.224.41.17 was first reported on
August 11th 2026 , and the most recent report was
2 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
2 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฌ๐ท
setupgr
2026-10-11 21:53:16
(2 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 82.224.41.17 (FR/France/Bouches-du-Rhรยดne/Aub ...
show more
(mod_security) mod_security (id:11000011) triggered by 82.224.41.17 (FR/France/Bouches-du-Rhรยดne/Aubagne/-/[AS12322 Free SAS]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Oct 12 00:53:11.792509 2026] [security2:error] [pid 230551:tid 748929] [remote 82.224.41.17:11474] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "proxad.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 82-224-41-17.subs.proxad.net"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/%CE%BF%CE%B9-%CE%B5%CE%B3%CE%BA%CE%B1%CF%84%CE%B1%CF%83%CF%84%CE%AC%CF%83%CE%B5%CE%B9%CF%82-%CE%BC%CE%B1%CF%82/"] [unique_id "aswFR6MNy659KUfiYEqV0AABFBs"]
show less
Port Scan
๐ซ๐ท
dynamix
2026-09-23 00:17:28
(1 month ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
DUBREUIL
2026-09-16 10:15:00
(1 month ago)
Hacking
DDoS Attack
Brute-Force
Bad Web Bot
Web App Attack
SSH
Open Proxy
Port Scan
SQL Injection
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-14 07:24:13
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 82.224.41.17 (82-224-41-17.subs.proxad.net): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 82.224.41.17 (82-224-41-17.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 03:24:08.936827 2026] [security2:error] [pid 31181:tid 31181] [client 82.224.41.17:11021] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.glamorgirl.net|F|2"] [data ".vouyermedia.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.glamorgirl.net"] [uri "/galleries/www.vouyermedia.com"] [unique_id "aqehGDuSQEQvtROGQHhITgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-05 17:16:02
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
show less
Bad Web Bot
๐บ๐ธ
kosada.com
2026-08-26 09:49:13
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ฉ๐ช
klaus_ph
2026-08-12 11:28:54
(2 months ago)
82.224.41.17 - - [12/Aug/2026:02:08:50 +0200] "GET /lka/Record/a0007905/SMS HTTP/1.1" 200 10748 "-" ...
show more
82.224.41.17 - - [12/Aug/2026:02:08:50 +0200] "GET /lka/Record/a0007905/SMS HTTP/1.1" 200 10748 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.72 Safari/537.36"
...
show less
Bad Web Bot
2026-08-11 20:54:57
(2 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: