JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.156.229.39

82.156.229.39 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 26%: ?

26%

ISP	Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.156.229.39

Whois 82.156.229.39

IP Abuse Reports for 82.156.229.39:

This IP address has been reported a total of 5 times from 5 distinct sources. 82.156.229.39 was first reported on September 9th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mutebot.net	2026-10-17 04:17:21 (4 hours ago)	SRC=82.156.229.39, PROTO=TCP, SPT=45480, DPT=8443 SRC=82.156.229.39, PROTO=TCP, SPT=45480, DPT=8443 ... show more SRC=82.156.229.39, PROTO=TCP, SPT=45480, DPT=8443 SRC=82.156.229.39, PROTO=TCP, SPT=45480, DPT=8443 SRC=82.156.229.39, PROTO=TCP, SPT=45480, DPT=8443 SRC=82.156.229.39, PROTO=TCP, SPT=45480, DPT=8443 SRC=82.156.229.39, PROTO=TCP, SPT=45480, DPT=8443 show less	Port Scan
🇺🇸 TPI-Abuse	2026-09-28 08:39:40 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 82.156.229.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 82.156.229.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:39:35.281307 2026] [security2:error] [pid 28959:tid 28959] [client 82.156.229.39:39920] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.jerusalem-korczak-home.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.jerusalem-korczak-home.com"] [uri "/np/ur/09/WS_FTP.LOG"] [unique_id "aronxzVz1RUv9wsFDHX_3wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 vtchost.com	2026-09-22 02:09:56 (3 weeks ago)	requested HTTP honeypot page - ignored robots.txt - bad crawler ...	Bad Web Bot Exploited Host
Anonymous	2026-09-21 20:55:28 (3 weeks ago)	Blocked by ModSec and CSF	Port Scan
🇺🇸 kosada.com	2026-09-09 04:04:49 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /events?topics%5B2%5D=66 ... show more Repeated requests classified as pathological web bot behavior, for example: /events?topics%5B2%5D=66&topics%5B6%5D=61&topics%5B7%5D=65&topics%5B8%5D=51&topics%5B9%5D=62 GET /events?topics%5B2%5D=66&topics%5B6%5D=61&topics%5B7%5D=65&topics%5B8%5D=51&topics%5B9%5D=62 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.86.68

🇩🇪 130.12.180.32

🇨🇳 124.88.113.186

🇺🇸 198.44.87.36

🇬🇧 77.67.26.154

🇺🇸 35.93.51.26

🇳🇱 192.253.248.223

🇳🇱 178.16.55.155

🇨🇦 159.203.7.132

🇮🇳 121.242.112.205

🇨🇳 117.50.70.169

🇧🇩 103.112.54.86

🇬🇧 77.67.26.56

🇨🇳 219.159.79.49

🇷🇴 193.32.162.84

🇺🇸 192.253.209.58

🇨🇳 180.165.57.28

🇰🇷 180.70.154.248

🇮🇳 49.206.21.177

🇧🇪 35.233.23.36