This IP address has been reported a total of
371
times from
297 distinct
sources.
52.182.188.239 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-02 08:01:50 52.182.188.239 Too many redirects/missing files, blocking 52.182.188.239 for 5 m ...
show more2026-06-02 08:01:50 52.182.188.239 Too many redirects/missing files, blocking 52.182.188.239 for 5 minutes
show less
Automated ban via infra-monitor: php-known-backdoor, webshell-high-confidence, webshell-probe, +4 mo ...
show moreAutomated ban via infra-monitor: php-known-backdoor, webshell-high-confidence, webshell-probe, +4 more
show less
[TueJun0209:39:36.7439952026][security2:error][pid795592:tid795621][client52.182.188.239:0]ModSecuri ...
show more[TueJun0209:39:36.7439952026][security2:error][pid795592:tid795621][client52.182.188.239:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\|\?=\?f\(\?:open\|write\)\?\\\\\\\\\(\|\\\\\\\\b\(\?:passthru\|serialize\|php_uname\|phpinfo\|shell_exec\|preg_\\\\\\\\w \|mysql_query\|exec\|include\|eval\|create_function\|system\|base64_decode\|decode_base64\|base64_url_decode\|str_rot13\)\\\\\\\\b\?\(\?:\\\\\\\\\(\|\\\\\\\\:\)\)\"atARGS:l.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"724\"][id\"340195\"][rev\"4\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Base64EncodedPHPfunctioninArgument-thismaybeanattack.\"][data\"php_uname\(\"][severity\"CRITICAL\"][hostname\"support-ticino.ch\"][uri\"/wp-plain.php\"][unique_id\"ah6IuDBMF57L8sK617Q1JwAAAVc\"]\,referer:www.google.com
show less
Automated honeypot: scanner probed decoy URL on cdn.aldorand.fr (/wp-content/plugins/hellopress/wp_f ...
show moreAutomated honeypot: scanner probed decoy URL on cdn.aldorand.fr (/wp-content/plugins/hellopress/wp_filemanager.php)
show less