JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.27.233.158

82.27.233.158 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS30860
Domain Name	netutils.io
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.27.233.158

Whois 82.27.233.158

IP Abuse Reports for 82.27.233.158:

This IP address has been reported a total of 8 times from 2 distinct sources. 82.27.233.158 was first reported on May 26th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-29 11:42:19 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 07:41:27.394458 2026] [security2:error] [pid 13135:tid 13135] [client 82.27.233.158:54483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rankinpollination.com"] [uri "/wp-config.old"] [unique_id "ahl7Z6bVvpGXgw8Jhoi7HAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-05-28 16:26:23 (2 months ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 18:40:44 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 14:40:40.765753 2026] [security2:error] [pid 28132:tid 28178] [client 82.27.233.158:38821] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|2291106.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "2291106.com"] [uri "/backup.sql"] [unique_id "ahc6qN8ERVirhnxMIneyfgAAAMg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 02:56:37 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 22:56:33.328360 2026] [security2:error] [pid 3639:tid 3671] [client 82.27.233.158:40879] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|riversideturners.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "riversideturners.com"] [uri "/backup.sql"] [unique_id "ahZdYWay8LleTjGPygFNwgAAARg"], referer: https://www.google.com/search?q=riversideturners.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 00:58:44 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:58:40.372678 2026] [security2:error] [pid 20795:tid 20795] [client 82.27.233.158:33317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brunerdevelopment.littlehorndesign.com"] [uri "/wp-config.php~"] [unique_id "ahZBwNyhARs104pBGhkUqgAAAAE"], referer: https://www.google.com/search?q=www.brunerdevelopment.littlehorndesign.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 00:21:35 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:21:29.888575 2026] [security2:error] [pid 27055:tid 27055] [client 82.27.233.158:33583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.insurance4you.agency.polish-boat-registration.com"] [uri "/.env"] [unique_id "ahY5CWjR0LXdqA3mKXUKfgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 18:14:30 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 14:14:01.086982 2026] [security2:error] [pid 9836:tid 9836] [client 82.27.233.158:51511] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|amybeam.info\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "amybeam.info"] [uri "/.config/gcloud/credentials.db"] [unique_id "ahXi6YyTbTQmHCP_9hDxkwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 17:54:33 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 82.27.233.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 13:54:17.542332 2026] [security2:error] [pid 22956:tid 22956] [client 82.27.233.158:60811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hogfiddlesandsuch.com"] [uri "/.env.development"] [unique_id "ahXeSWtTWJOeybyai0tD4QAAAA0"], referer: https://www.google.com/search?q=hogfiddlesandsuch.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.251.201.47

🇮🇳 203.192.211.180

🇺🇸 172.90.128.97

🇧🇬 158.173.89.1

🇮🇳 103.97.215.11

🇨🇦 62.169.135.107

🇨🇳 27.20.95.100

🇮🇷 212.16.86.15

🇦🇷 181.46.66.72

🇮🇳 122.187.234.54

🇨🇳 116.114.84.246

🇫🇮 80.223.163.253

🇮🇩 49.0.24.107

🇺🇸 45.131.195.188

🇰🇪 41.90.172.242

🇬🇧 35.203.211.222

🇺🇸 2600:1f1c:a8f:a800:deb3:8ca7:2a22:41cf

🇰🇷 2406:da12:c4c:af02:3729:ed62:8fdb:32ca

🇨🇴 190.108.76.181

🇭🇰 104.208.99.163