Total reports
9 from
7 distinct
reporters
First reported
May 10th 2026
Most recent report
5 days ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
1
Most common categories
Hacking
1
Exploited Host
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
GreekCity
2026-10-23 06:49:49
(5 days ago)
bad-bot hacking for vulnerable links.
Hacking
Exploited Host
🇨🇦
polycoda
2026-05-29 09:46:29
(4 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-27 22:00:59
(5 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-26.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-27 19:18:06
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 82.29.210.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 15:17:58.468825 2026] [security2:error] [pid 16867:tid 16867] [client 82.29.210.39:45505] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.29.210.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 15:17:58.468825 2026] [security2:error] [pid 16867:tid 16867] [client 82.29.210.39:45505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soviaenterprises.com"] [uri "/.env.dev"] [unique_id "ahdDZkEqINgqoLy5C3TTiwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-05-27 00:56:55
(5 months ago)
[WedMay2702:56:47.6144912026][security2:error][pid366229:tid366405][client82.29.210.39:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\" ...
show more
[WedMay2702:56:47.6144912026][security2:error][pid366229:tid366405][client82.29.210.39:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"carolin-mizio.ch\"][uri\"/.env.development\"][unique_id\"ahZBTw4gdtan8RdqNWI64QAAAIY\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 00:30:58
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 82.29.210.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:30:47.913875 2026] [security2:error] [pid 22352:tid 22352] [client 82.29.210.39:50409] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.29.210.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:30:47.913875 2026] [security2:error] [pid 22352:tid 22352] [client 82.29.210.39:50409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gapanda.unionega.com"] [uri "/wp-config.php~"] [unique_id "ahY7NxzrACrhxh2kx9HWJwAAAAU"], referer: https://www.google.com/search?q=gapanda.unionega.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-26 22:00:05
(5 months ago)
Auto-ban: >3000 req/min op 2026-05-26
Web App Attack
SSH
Hacking
2026-05-26 18:45:01
(5 months ago)
suspicious request in access.log
Web App Attack
🇫🇷
ingroscart.it
2026-05-10 23:47:01
(5 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 82.29.210.39 (FR/France/-)
Bad Web Bot
