JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.198.228.166

82.198.228.166 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Hostinger International Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Domain Name	hostinger.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.198.228.166

Whois 82.198.228.166

IP Abuse Reports for 82.198.228.166:

This IP address has been reported a total of 38 times from 26 distinct sources. 82.198.228.166 was first reported on June 6th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-07 15:25:43 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 11:25:37.439572 2026] [security2:error] [pid 31156:tid 31156] [client 82.198.228.166:36372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bikinipageone.com"] [uri "/api/.env"] [unique_id "aiWNcTbJnXnp5y8rMkwkegAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-06-07 13:36:36 (5 hours ago)	dot file probe	Web App Attack
🇫🇷 masterguru	2026-06-07 13:21:14 (5 hours ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇳🇱 wlt-blocker	2026-06-07 11:08:22 (8 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 Matthew Ping	2026-06-07 11:00:01 (8 hours ago)	ModSecurity rule 949110 triggered on dedicated4785. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇫🇮 as211431.net	2026-06-07 10:55:30 (8 hours ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 4server	2026-06-07 07:56:54 (11 hours ago)	[SunJun0709:56:48.6375862026][security2:error][pid2146813:tid2147078][client82.198.228.166:0]ModSecu ... show more [SunJun0709:56:48.6375862026][security2:error][pid2146813:tid2147078][client82.198.228.166:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"viaggi-marocco-lugano.ch\"][uri\"/.env\"][unique_id\"aiUkQNGGkCeQBBHuru2cEwAAAQg\"] show less	Hacking Web App Attack
Anonymous	2026-06-07 07:15:13 (11 hours ago)	(caddyscan) Scanner path probe from 82.198.228.166 (DE/Germany/-): 5 in the last 3600 secs; Ports: * ... show more (caddyscan) Scanner path probe from 82.198.228.166 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 82.198.228.166 - - [07/Jun/2026:07:15:10 +0000] "GET /api/.env HTTP/1.1" [REDACTED] 200 2627 82.198.228.166 - - [07/Jun/2026:07:15:10 +0000] "GET /laravel/.env HTTP/1.1" [REDACTED] 200 2627 82.198.228.166 - - [07/Jun/2026:07:15:10 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 82.198.228.166 - - [07/Jun/2026:07:15:10 +0000] "GET /api/.env.save HTTP/1.1" [REDACTED] 200 2627 82.198.228.166 - - [07/Jun/2026:07:15:10 +0000] "GET /.env.save HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-07 06:59:42 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 02:59:36.860787 2026] [security2:error] [pid 21465:tid 21465] [client 82.198.228.166:60262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "utd.net"] [uri "/core/.env.save"] [unique_id "aiUW2IifZfrXhumIu_g26wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-07 06:50:01 (12 hours ago)	suspicious request in access.log	Web App Attack
🇩🇪 itsolon	2026-06-07 06:28:32 (12 hours ago)	[07/Jun/2026:08:28:31 +0200] 178081371160.036387 82.198.228.166 20084 217.154.7.177 443 [07/Jun/2026 ... show more [07/Jun/2026:08:28:31 +0200] 178081371160.036387 82.198.228.166 20084 217.154.7.177 443 [07/Jun/2026:08:28:31 +0200] 178081371173.295120 82.198.228.166 20044 217.154.7.177 443 [07/Jun/2026:08:28:31 +0200] 17808137117.210624 82.198.228.166 20104 217.154.7.177 443 [07/Jun/2026:08:28:31 +0200] 178081371122.554385 82.198.228.166 20098 217.154.7.177 443 [07/Jun/2026:08:28:31 +0200] 178081371134.934399 82.198.228.166 20102 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 05:08:30 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 01:08:24.253951 2026] [security2:error] [pid 2408:tid 2408] [client 82.198.228.166:38928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karenjoyce.com"] [uri "/api/.env.save"] [unique_id "aiT8yFhwexWtT04ivBxQ3QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 04:03:25 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 00:03:18.337386 2026] [security2:error] [pid 23989:tid 23989] [client 82.198.228.166:50896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ridgerunners.biz"] [uri "/admin/.env"] [unique_id "aiTthu2lyawqm6sBKYgDhQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-07 03:52:41 (15 hours ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 03:35:43 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 82.198.228.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 23:35:38.928421 2026] [security2:error] [pid 3614:tid 3614] [client 82.198.228.166:32136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plasterprose.com"] [uri "/app/.env"] [unique_id "aiTnCiJH41_BGfatkqLpWwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a00:1450:4013:c14::123

🇺🇿 185.213.230.47

🇳🇱 172.253.82.213

🇺🇸 142.93.199.200

🇺🇸 66.132.172.247

🇺🇸 18.118.107.104

🇲🇽 186.96.145.241

🇧🇷 177.76.134.111

🇸🇬 165.154.205.128

🇳🇱 45.142.193.53

🇹🇭 43.173.252.20

🇨🇳 221.226.39.202

🇬🇧 185.192.69.170

🇺🇸 52.224.109.126

🇳🇱 45.198.224.7

🇹🇷 149.50.240.190

🇮🇳 135.235.138.43

🇫🇷 104.28.211.187

🇮🇳 103.181.161.42

🇺🇸 66.78.171.126