JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

83.182.98.5

Activity Trending Down

Abuse Confidence Score

35% Elevated

15 reports

10 reporters · latest 3 weeks ago

ISP: Mobile Services
Usage Type: Fixed Line ISP
ASN: AS1257
Hostname(s): m83-182-98-5.cust.tele2.se
Domain Name: tele2.com
Country: 🇸🇪 Sweden
City: Alingsas, Vastra Gotaland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 10 distinct reporters

First reported

September 16th 2026

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 7 🇫🇷 France 3 🇺🇸 United States of America 2

Most common categories Web App Attack 10 Bad Web Bot 5 Brute-Force 5 Hacking 3 Exploited Host 3

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-10-21 22:25:02 UTC · (3 weeks ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
🇲🇹 Malta	2026-10-20 03:22:13 UTC · (3 weeks ago)	83.182.98.5 - - [20/Oct/2026:05:22:13 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt	Hacking Web App Attack Brute-Force
🇫🇷 LRob	2026-10-19 20:39:17 UTC · (3 weeks ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36	Bad Web Bot
🇩🇪 big-cloud.nl	2026-10-18 04:55:13 UTC · (3 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 FeG Deutschland	2026-10-16 13:04:50 UTC · (4 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 22:51:27 UTC · (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 83.182.98.5 (m83-182-98-5.cust.tele2.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:51:23.951967 2026] [security2:error] [pid 29685:tid 29685] [client ... show more (mod_security) mod_security (id:225170) triggered by 83.182.98.5 (m83-182-98-5.cust.tele2.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:51:23.951967 2026] [security2:error] [pid 29685:tid 29685] [client 83.182.98.5:45046] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|heatherweathers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heatherweathers.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atAHa1gZSIjxq1Zqa4sinQAAADQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-14 12:20:53 UTC · (4 weeks ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)	Hacking
🇺🇸 TPI-Abuse	2026-10-13 22:43:00 UTC · (1 month ago)	(mod_security) mod_security (id:225170) triggered by 83.182.98.5 (m83-182-98-5.cust.tele2.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:42:53.209289 2026] [security2:error] [pid 6611:tid 6611] [client 8 ... show more (mod_security) mod_security (id:225170) triggered by 83.182.98.5 (m83-182-98-5.cust.tele2.se): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:42:53.209289 2026] [security2:error] [pid 6611:tid 6611] [client 83.182.98.5:46820] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|magacine.tv\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "magacine.tv"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as6z7cVAsEaY4Ti_VX6w0QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-10-11 01:59:23 UTC · (1 month ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 FeG Deutschland	2026-10-11 00:23:43 UTC · (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 palzer.IT	2026-10-10 12:13:38 UTC · (1 month ago)	Fail2ban automatic report for plesk-wordpress: 83.182.98.5 - - [10/Oct/2026:14:12:59 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8939 [DOMAIN_REMOVED] Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/5 ... show more Fail2ban automatic report for plesk-wordpress: 83.182.98.5 - - [10/Oct/2026:14:12:59 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8939 [DOMAIN_REMOVED] Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 83.182.98.5 - - [10/Oct/2026:14:13:02 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8939 [DOMAIN_REMOVED] Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 83.182.98.5 - - [10/Oct/2026:14:13:04 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8939 [DOMAIN_REMOVED] Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-09 10:28:23 UTC · (1 month ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 83.182.98.5 (SE/Sweden/m83-182-98-5.cust.tele2.se): 1 in the last 3600 secs (0-195)	Hacking
🇩🇪 LRob	2026-09-25 19:10:21 UTC · (1 month ago)	This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. \| method: GET \| path: / \| 2026-09-25 19:10 UTC show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-09-16 14:51:38 UTC · (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇮🇹 CoreTech srl	2026-09-16 13:08:56 UTC · (1 month ago)	cloudlinux2 fail2ban: 2026-09-16 15:03:57,897 fail2ban.filter [1818]: INFO [plesk-wordpress] Found 37.212.1.184 - 2026-09-16 15:03:56cloudlinux2 fail2ban: 2026-09-16 15:04:08,963 fail2ban.filter [1818]: INFO [plesk-modsecurity] ... show more cloudlinux2 fail2ban: 2026-09-16 15:03:57,897 fail2ban.filter [1818]: INFO [plesk-wordpress] Found 37.212.1.184 - 2026-09-16 15:03:56cloudlinux2 fail2ban: 2026-09-16 15:04:08,963 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 223.27.224.121 - 2026-09-16 15:04:08cloudlinux2 fail2ban: 2026-09-16 15:05:12,958 fail2ban.filter [1818]: INFO [plesk-wordpress] Found 104.234.19.139 - 2026-09-16 15:05:12cloudlinux2 fail2ban: 2026-09-16 15:05:18,037 fail2ban.filter [1818]: INFO [plesk-wordpress] Found 193.36.224.36 - 2026-09-16 15:05:17cloudlinux2 fail2ban: 2026-09-16 15:05:22,539 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 223.27.224.121 - 2026-09-16 15:05:22cloudlinux2 fail2ban: 2026-09-16 15:05:17,293 fail2ban.filter [1818]: INFO [plesk-wordpress] Found 104.234.19.139 - 2026-09-16 15:05:17cloudlinux2 fail2ban: 2026-09-16 15:05:22,846 fail2ban.filter [1818]: INFO [recidive] Found 223.27.224.121 - 2026-09-16 15:05:22cloudlin show less	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 104.244.79.113

🇵🇱 81.162.210.192

🇩🇪 77.83.27.193

🇺🇸 66.132.172.185

🇦🇺 20.28.214.139

🇷🇴 2.57.121.112

🇧🇷 189.90.1.22

🇰🇷 175.115.29.122

🇺🇸 162.216.149.221

🇻🇳 103.110.87.57

🇦🇴 102.130.192.17

🇷🇺 87.224.228.66

🇬🇧 35.203.211.35

🇺🇸 199.165.159.49

🇺🇸 195.184.76.52

🇨🇳 183.63.125.162

🇹🇼 122.118.28.47

🇨🇳 116.128.253.187

🇨🇳 111.113.88.247

🇨🇳 106.75.222.86