JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

82.29.128.145

Neutral Activity

Abuse confidence score ?

0% Low Risk

15 reports

8 reporters · latest 5 months ago

ISP	Hosteons Pte. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS142036
Hostname(s)	my.casjay.in
Domain Name	hosteons.com
Country	🇺🇸 United States of America
City	New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

82.29.128.145 has been reported 15 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 82.29.128.145

Export CSV

This IP address has been reported a total of 15 times from 8 distinct sources. 82.29.128.145 was first reported on June 25th 2025, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-29 14:00:34 (5 months ago)	2026-04-29 05:00:50,890 fail2ban.actions [1763860]: NOTICE [tor] Ban 82.29.128.145 2026-04-2 ... show more 2026-04-29 05:00:50,890 fail2ban.actions [1763860]: NOTICE [tor] Ban 82.29.128.145 2026-04-29 08:00:49,829 fail2ban.actions [1763860]: NOTICE [tor] Ban 82.29.128.145 2026-04-29 11:00:57,340 fail2ban.actions [1763860]: NOTICE [tor] Ban 82.29.128.145 2026-04-29 14:00:54,470 fail2ban.actions [1763860]: NOTICE [tor] Ban 82.29.128.145 2026-04-29 17:00:34,628 fail2ban.actions [1763860]: NOTICE [tor] Ban 82.29.128.145 show less	Brute-Force
🇫🇷 Hydra-Shield.fr	2025-08-01 23:23:26 (1 year ago)	Automated DDoS behavior detected targeting production services. Multiple anomalous connections and p ... show more Automated DDoS behavior detected targeting production services. Multiple anomalous connections and packet floods recorded. show less	Brute-Force SSH
🇺🇸 xmission.com	2025-08-01 09:22:51 (1 year ago)	Blocked by UFW (TCP on 59640) Source port: 8118 TTL: 52 Packet length: 186 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 59640) Source port: 8118 TTL: 52 Packet length: 186 TOS: 0x08 This report (for 82.29.128.145) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-07-18 23:57:11 (1 year ago)	Blocked by UFW (TCP on 43244) Source port: 8118 TTL: 52 Packet length: 1100 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 43244) Source port: 8118 TTL: 52 Packet length: 1100 TOS: 0x08 This report (for 82.29.128.145) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇰🇷 forgeban	2025-07-15 17:20:28 (1 year ago)	Session Report (UTC: 2025-07-15T17:20:28.477Z) Session Duration: 2025-07-15T17:20:24.474Z - 2025-07- ... show more Session Report (UTC: 2025-07-15T17:20:28.477Z) Session Duration: 2025-07-15T17:20:24.474Z - 2025-07-15T17:20:28.477Z Client: SSH-2.0-Go Source Port: 39702 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - PTY requested (40x80) - debug_channel_request - Command executed: echo a614c8a996553e89 > honeypot_test.txt && cat honeypot_test.txt \| xargs -I{} echo -e "{}\n{}" \| passwd root && rm honeypot_test.txt%!(EXTRA string=a614c8a996553e89, string=a614c8a996553e89) - session_close - connection_close show less	Hacking Brute-Force SSH
🇰🇷 forgeban	2025-07-15 16:52:31 (1 year ago)	Session Report (UTC: 2025-07-15T16:52:31.263Z) Session Duration: 2025-07-15T16:52:27.261Z - 2025-07- ... show more Session Report (UTC: 2025-07-15T16:52:31.263Z) Session Duration: 2025-07-15T16:52:27.261Z - 2025-07-15T16:52:31.263Z Client: SSH-2.0-Go Source Port: 60134 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - PTY requested (40x80) - debug_channel_request - Command executed: echo 84072dd90bd04d50 > honeypot_test.txt && cat honeypot_test.txt \| xargs -I{} echo -e "{}\n{}" \| passwd root && rm honeypot_test.txt%!(EXTRA string=84072dd90bd04d50, string=84072dd90bd04d50) - session_close - connection_close show less	Hacking Brute-Force SSH
🇰🇷 forgeban	2025-07-15 14:06:29 (1 year ago)	Session Report (UTC: 2025-07-15T14:06:29.186Z) Session Duration: 2025-07-15T14:06:24.183Z - 2025-07- ... show more Session Report (UTC: 2025-07-15T14:06:29.186Z) Session Duration: 2025-07-15T14:06:24.183Z - 2025-07-15T14:06:29.186Z Client: SSH-2.0-Go Source Port: 52046 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - PTY requested (40x80) - debug_channel_request - Command executed: echo 4c83aaa80cdff7ac > honeypot_test.txt && cat honeypot_test.txt \| xargs -I{} echo -e "{}\n{}" \| passwd root && rm honeypot_test.txt%!(EXTRA string=4c83aaa80cdff7ac, string=4c83aaa80cdff7ac) - session_close - connection_close show less	Hacking Brute-Force SSH
🇰🇷 forgeban	2025-07-15 13:32:59 (1 year ago)	Session Report (UTC: 2025-07-15T13:32:59.736Z) Session Duration: 2025-07-15T13:32:55.734Z - 2025-07- ... show more Session Report (UTC: 2025-07-15T13:32:59.736Z) Session Duration: 2025-07-15T13:32:55.734Z - 2025-07-15T13:32:59.736Z Client: SSH-2.0-Go Source Port: 41762 Activities: - no_auth - Login attempt - User: root (SUCCESS) - connection - debug_channel - session - debug_channel_request - PTY requested (40x80) - debug_channel_request - Command executed: echo c1fd8b9dd1f37bb6 > honeypot_test.txt && cat honeypot_test.txt \| xargs -I{} echo -e "{}\n{}" \| passwd root && rm honeypot_test.txt%!(EXTRA string=c1fd8b9dd1f37bb6, string=c1fd8b9dd1f37bb6) - session_close - connection_close show less	Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2025-07-15 03:23:37 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 82.29.128.145 (pihole.casjay.nl): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 82.29.128.145 (pihole.casjay.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 23:23:31.970032 2025] [security2:error] [pid 4167:tid 4167] [client 82.29.128.145:50886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.leobynum.com"] [uri "/.git/config"] [unique_id "aHXJs4VRk7G2SOdCTCqIAQAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-15 01:38:25 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 82.29.128.145 (pihole.casjay.nl): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 82.29.128.145 (pihole.casjay.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 21:38:22.461786 2025] [security2:error] [pid 486:tid 486] [client 82.29.128.145:36566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gestiofiscal.com"] [uri "/.git/config"] [unique_id "aHWxDpfPk7J9duffeQrc4AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-07-14 16:10:51 (1 year ago)	Blocked by UFW (TCP on 49553) Source port: 34354 TTL: 52 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 49553) Source port: 34354 TTL: 52 Packet length: 60 TOS: 0x08 This report (for 82.29.128.145) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 ᴀʀᴛ	2025-07-09 12:14:29 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from T1. ASN: 142036 (HOSTEONS-AS-AP Hosteons Pte. Ltd.) Protocol: ... show more Triggered Cloudflare WAF (l7ddos) from T1. ASN: 142036 (HOSTEONS-AS-AP Hosteons Pte. Ltd.) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-06-26 22:34:57 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 82.29.128.145 (pihole.casjay.nl): 1 in the last ... show more (mod_security) mod_security (id:210492) triggered by 82.29.128.145 (pihole.casjay.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 26 18:34:51.504772 2025] [security2:error] [pid 2546545:tid 2546545] [client 82.29.128.145:38502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ricardoagurcia.com.asociacioncopan.org"] [uri "/.git/config"] [unique_id "aF3LC8vQcrbbHBemy4RevgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2025-06-26 00:01:38 (1 year ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇦🇺 oncord	2025-06-25 19:49:29 (1 year ago)	Form spam	Web Spam

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 202.165.22.173

🇺🇸 167.99.107.219

🇫🇷 152.228.135.87

🇺🇸 142.93.113.198

🇮🇳 135.235.196.148

🇷🇺 109.68.184.155

🇺🇸 104.248.229.49

🇨🇳 101.34.212.234

🇫🇷 91.231.89.172

🇬🇧 64.205.72.171

🇧🇪 35.205.18.191

🇨🇳 27.8.44.168

🇷🇴 2.57.122.168

🇳🇱 213.177.179.80

🇺🇸 199.250.220.150

🇹🇼 198.235.24.124

🇲🇺 197.227.8.186

🇲🇽 189.206.189.150

🇩🇪 185.73.23.168

🇧🇷 177.126.132.44