This IP address has been reported a total of
9
times from
6 distinct
sources.
210.79.129.152 was first reported on
September 28th 2026 , and the most recent report was
10 hours ago United States of America
with 5
reports;
Brazil
with 1
report;
Czechia
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Brute-Force
5
times;
Bad Web Bot
4
times;
SQL Injection
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-03 03:40:14
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 210.79.129.152 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 210.79.129.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 23:40:06.862832 2026] [security2:error] [pid 2258641:tid 2258641] [client 210.79.129.152:60034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gre-home.com"] [uri "/wp-config.php_"] [unique_id "asB5Fq8nV8ThWT5fYqw2pgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-02 22:53:51
(15 hours ago)
Excessive 404/403 errors
Brute-Force
2026-10-02 06:11:42
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇺🇸
TPI-Abuse
2026-10-02 03:57:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 210.79.129.152 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 210.79.129.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 23:57:20.570473 2026] [security2:error] [pid 10394:tid 10394] [client 210.79.129.152:53594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grimone.com"] [uri "/wp-config.php_"] [unique_id "ar8roE_Coe97c8IwV1KcXgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-30 23:42:10
(2 days ago)
Banned by Fail2Ban on server
Web App Attack
2026-09-30 08:05:51
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇧🇷
Host One
2026-09-30 05:45:34
(3 days ago)
Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 differen ...
show more
Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /.vscode/ftp-sync.json, /.vscode/sftp.json, /blog/wp-config.old, /config.json, /config.old. Automated report.
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 06:02:48
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 210.79.129.152 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 210.79.129.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:02:40.664630 2026] [security2:error] [pid 1224:tid 1224] [client 210.79.129.152:40992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grupoimaginarte.com"] [uri "/wp-config.php_"] [unique_id "artUgBtwFIouiF4-cDcpxwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-28 20:39:07
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
Showing 1 to
9
of 9 reports
