JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.39.206.116

82.39.206.116 was found in our database!

This IP was reported 281 times. Confidence of Abuse is 100%: ?

100%

ISP	Chunkserve Mateusz Peplinski
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214481
Domain Name	abuseradar.com
Country	🇩🇪 Germany
City	Dusseldorf, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.39.206.116

Whois 82.39.206.116

IP Abuse Reports for 82.39.206.116:

This IP address has been reported a total of 281 times from 160 distinct sources. 82.39.206.116 was first reported on June 29th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 rvsdi	2026-08-12 06:33:39 (2 days ago)	[OGWAF] path_traversal attack blocked \| severity: high \| GET /.git/HEAD \| UA: Mozilla/5.0 (Macintosh ... show more [OGWAF] path_traversal attack blocked \| severity: high \| GET /.git/HEAD \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 show less	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-08-12 05:14:46 (2 days ago)	2 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇺🇦 URAN Publishing Service	2026-08-12 05:04:28 (2 days ago)	[12/Aug/2026:08:04:27 +0300] -- 82.39.206.116 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git ... show more [12/Aug/2026:08:04:27 +0300] -- 82.39.206.116 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/HEAD HTTP/1.1 show less	Bad Web Bot Web App Attack
🇬🇧 Marten Mark	2026-08-12 04:20:22 (2 days ago)	82.39.206.116 - - [12/Aug/2026:04:20:21 +0000] "GET /.aws/credentials HTTP/2.0" 404 8265 "-" "Mozill ... show more 82.39.206.116 - - [12/Aug/2026:04:20:21 +0000] "GET /.aws/credentials HTTP/2.0" 404 8265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" ... show less	Web App Attack Bad Web Bot
🇩🇪 juutis	2026-08-12 02:19:35 (2 days ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
Anonymous	2026-08-11 20:15:51 (3 days ago)	(caddyscan) Scanner path probe from 82.39.206.116 (PL/Poland/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 82.39.206.116 (PL/Poland/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:20:15:44 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:20:15:46 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:20:15:50 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:20:15:50 +0000] "GET /.aws/credentials HTTP/1.1" [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:20:15:50 +0000] "GET /api/.env HTTP/1.1" show less	Port Scan
🇩🇪 ut-addicted.com	2026-08-11 18:22:01 (3 days ago)	\[Tue Aug 11 20:21:59.755489 2026\] \[:error\] \[pid 10058:tid 140352598038272\] \[client 82.39.206. ... show more \[Tue Aug 11 20:21:59.755489 2026\] \[:error\] \[pid 10058:tid 140352598038272\] \[client 82.39.206.116:33144\] \[client 82.39.206.116\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/.git/HEAD"\] \[unique_id "antoR@a19WRvzPeq7btEnwAAAQM"\] show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-08-11 18:07:20 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 kosada.com	2026-08-11 17:33:23 (3 days ago)	Web vulnerability probing: /config.json	Web App Attack
🇨🇭 4server	2026-08-11 15:15:10 (3 days ago)	[TueAug1117:15:05.5907392026][security2:error][pid609825:tid609908][client82.39.206.116:0]ModSecurit ... show more [TueAug1117:15:05.5907392026][security2:error][pid609825:tid609908][client82.39.206.116:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"465\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"creazione-siti-internet-ticino.ch.hosting-domini.ch\"][uri\"/.git/config\"][unique_id\"ans8eYxbm5csFHtklcgGtgAAAME\"] show less	Hacking Web App Attack
Anonymous	2026-08-11 14:19:33 (3 days ago)	(caddyscan) Scanner path probe from 82.39.206.116 (PL/Poland/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 82.39.206.116 (PL/Poland/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:14:19:26 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:14:19:27 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:14:19:31 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:14:19:31 +0000] "GET /api/.env HTTP/1.1" [REDACTED] 200 2627 82.39.206.116 - - [11/Aug/2026:14:19:31 +0000] "GET /.env.development HTTP/1.1" show less	Port Scan
🇩🇪 big-cloud.nl	2026-08-11 12:52:06 (3 days ago)	Try to access /.git/HEAD	Web App Attack
🇫🇷 masterguru	2026-08-11 12:13:02 (3 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇬🇧 Interceptor_HQ	2026-08-11 04:18:14 (3 days ago)	request_uri: / -- automatic report --	Brute-Force Hacking
🇩🇪 dbmwebdesign	2026-08-11 03:10:20 (3 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack

Showing 1 to 15 of 281 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.132.107

🇧🇷 131.100.205.203

🇸🇦 95.218.136.94

🇨🇦 85.217.149.11

🇺🇸 74.7.242.6

🇳🇱 45.142.193.164

🇳🇱 31.58.51.55

🇨🇳 180.76.184.79

🇮🇱 130.185.101.32

🇺🇸 91.230.168.91

🇩🇪 64.89.163.169

🇹🇷 45.67.155.168

🇺🇸 216.25.89.73

🇨🇳 175.150.107.180

🇸🇬 134.209.96.149

🇮🇩 103.77.106.196

🇺🇸 35.243.42.29

🇺🇸 12.124.186.10

🇬🇧 195.140.214.30

🇺🇦 193.34.172.53