JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 179.109.82.138

179.109.82.138 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 33%: ?

33%

ISP	PONTO SAT CONECT EIRELI ME
Usage Type	Fixed Line ISP
ASN	AS263582
Hostname(s)	179-109-82-138.dynamic.pontosat.net.br
Domain Name	pontosat.net.br
Country	🇧🇷 Brazil
City	Imarui, Santa Catarina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 179.109.82.138

Whois 179.109.82.138

IP Abuse Reports for 179.109.82.138:

This IP address has been reported a total of 40 times from 21 distinct sources. 179.109.82.138 was first reported on July 25th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-14 06:00:13 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 179.109.82.138 (179-109-82-138.dynamic.pontosat ... show more (mod_security) mod_security (id:240335) triggered by 179.109.82.138 (179-109-82-138.dynamic.pontosat.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:00:04.067211 2026] [security2:error] [pid 29454:tid 29454] [client 179.109.82.138:23536] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 179.109.82.138 (+1 hits since last alert)\|ashwoodsecurity.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ashwoodsecurity.com"] [uri "/xmlrpc.php"] [unique_id "ai5DZJf4eRPBFI2U68kqLQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-06-14 05:36:34 (1 week ago)	(xmlrpc) Failed xmlrpc access from 179.109.82.138 (BR/Brazil/179-109-82-138.dynamic.pontosat.net.br) ... show more (xmlrpc) Failed xmlrpc access from 179.109.82.138 (BR/Brazil/179-109-82-138.dynamic.pontosat.net.br): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-13 03:34:05 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 179.109.82.138 (179-109-82-138.dynamic.pontosat ... show more (mod_security) mod_security (id:240335) triggered by 179.109.82.138 (179-109-82-138.dynamic.pontosat.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 23:33:58.188431 2026] [security2:error] [pid 30898:tid 30916] [client 179.109.82.138:23694] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 179.109.82.138 (+1 hits since last alert)\|willmanlawfirm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "willmanlawfirm.com"] [uri "/xmlrpc.php"] [unique_id "aizPpq999RQauAJgoNw_aQAAANA"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-13 03:03:32 (1 week ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
Anonymous	2026-06-09 02:35:42 (2 weeks ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=pikoulis.gr; logs=/var/log/httpd/domains/pikoulis.gr.log; samp ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=pikoulis.gr; logs=/var/log/httpd/domains/pikoulis.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇬🇧 cg-design.co.uk	2026-06-09 01:55:23 (2 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 179.109.82.138 (BR/Brazil/179-109-82-13 ... show more (mod_security) mod_security triggered on hostname [redacted] 179.109.82.138 (BR/Brazil/179-109-82-138.dynamic.pontosat.net.br) show less	SQL Injection
🇩🇪 abdubhai	2026-04-28 00:03:51 (1 month ago)	179.109.82.138 - - [28/Apr/2026: ...	Brute-Force
Anonymous	2026-04-27 19:05:28 (1 month ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (139/60 min)'; Requests=139	Port Scan
🇫🇷 Kenshin869	2026-04-23 13:06:58 (2 months ago)	Wordpress unauthorized access attempt	Brute-Force
Anonymous	2026-04-20 22:22:11 (2 months ago)	[redacted] 179.109.82.138 - - [21/Apr/2026:00:21:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 179.109.82.138 - - [21/Apr/2026:00:21:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 179.109.82.138 - - [21/Apr/2026:00:21:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 179.109.82.138 - - [21/Apr/2026:00:21:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 179.109.82.138 - - [21/Apr/2026:00:21:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 179.109.82.138 - - [21/Apr/2026:00:22:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.1; http://site93127657.com" ... show less	Hacking Web App Attack
Anonymous	2026-04-13 17:04:04 (2 months ago)	[redacted] 179.109.82.138 - - [13/Apr/2026:19:03:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" " ... show more [redacted] 179.109.82.138 - - [13/Apr/2026:19:03:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 179.109.82.138 - - [13/Apr/2026:19:03:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 179.109.82.138 - - [13/Apr/2026:19:03:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com" [redacted] 179.109.82.138 - - [13/Apr/2026:19:03:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 179.109.82.138 - - [13/Apr/2026:19:03:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com" [redacted] 179.109.82.138 - - [13/Apr/2026:19:03:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 179.109.82.138 - - [13/Apr/2026:19:03:48 +0200] "POST /xmlrpc.php HTTP/1. ... show less	Hacking Web App Attack
Anonymous	2026-04-13 12:24:11 (2 months ago)	179.109.82.138 - - [13/Apr/2026:14:23:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12. ... show more 179.109.82.138 - - [13/Apr/2026:14:23:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.0; WordPress/6.3; http://site92488194.com" 179.109.82.138 - - [13/Apr/2026:14:23:49 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack/12.0; WordPress/6.3; http://site92488194.com" 179.109.82.138 - - [13/Apr/2026:14:23:59 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "WordPress.com; https://wordpress.com" 179.109.82.138 - - [13/Apr/2026:14:24:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" 179.109.82.138 - - [13/Apr/2026:14:24:10 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" ... show less	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-04-13 12:04:01 (2 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-04-13 04:08:03 (2 months ago)	Unauthorized access to webpage admin	Web App Attack
🇨🇭 4server	2026-04-13 03:54:32 (2 months ago)	[MonApr1305:54:25.7662762026][security2:error][pid349158:tid349170][client179.109.82.138:0]ModSecuri ... show more [MonApr1305:54:25.7662762026][security2:error][pid349158:tid349170][client179.109.82.138:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"345\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"pmprogettazione.ch\"][uri\"/xmlrpc.php\"][unique_id\"adxo8ZIQaiSGs4sjYY6TlQAAAIY\"] show less	Hacking Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.64

🇵🇭 165.154.100.56

🇮🇳 103.226.202.38

🇱🇻 81.30.98.62

🇧🇪 34.78.206.8

🇨🇳 8.138.219.65

🇳🇱 2a10:3c0:101:0:1:16:0:5

🇩🇴 148.0.236.233

🇺🇸 147.185.132.117

🇨🇳 121.40.231.19

🇳🇴 93.89.113.60

🇨🇦 85.217.149.51

🇳🇱 83.172.169.195

🇳🇱 45.148.10.152

🇳🇱 176.65.139.181

🇺🇸 172.110.223.147

🇺🇸 162.216.149.24

🇮🇳 128.185.208.42

🇨🇳 106.75.163.199

🇿🇦 102.36.141.7