JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 179.179.217.166

179.179.217.166 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 59%: ?

59%

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS18881
Hostname(s)	179.179.217.166.dynamic.adsl.gvt.net.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Niteroi, Rio de Janeiro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 179.179.217.166

Whois 179.179.217.166

IP Abuse Reports for 179.179.217.166:

This IP address has been reported a total of 19 times from 10 distinct sources. 179.179.217.166 was first reported on July 7th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 YF	2026-07-08 19:01:33 (3 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇳🇱 debestelapp	2026-07-08 19:01:26 (3 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 18:20:55 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.g ... show more (mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 14:20:51.486266 2026] [security2:error] [pid 18772:tid 18772] [client 179.179.217.166:51938] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 179.179.217.166 (+1 hits since last alert)\|medusakenya.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "medusakenya.com"] [uri "/xmlrpc.php"] [unique_id "ak6VA1wqf8FWnA-mkv3bxAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 17:47:49 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.g ... show more (mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 13:47:43.389905 2026] [security2:error] [pid 24254:tid 24254] [client 179.179.217.166:52894] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 179.179.217.166 (+1 hits since last alert)\|jerielster.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jerielster.com"] [uri "/xmlrpc.php"] [unique_id "ak6NP1H5pUjcdqzM7DS_5AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-08 17:17:44 (3 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 179.179.217.166 (BR/Brazil/179.179. ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 179.179.217.166 (BR/Brazil/179.179.217.166.dynamic.adsl.gvt.net.br): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-07-08 16:39:51 (4 days ago)	Blocked by YFC Security on https://fencingforward.com — type: xmlrpc_attempts	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-07-08 16:37:20 (4 days ago)	17.496 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-08 15:56:32 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.g ... show more (mod_security) mod_security (id:225170) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 11:56:27.320600 2026] [security2:error] [pid 16465:tid 16465] [client 179.179.217.166:50863] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|activethinkers.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "activethinkers.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ak5zK6Bm876CcLW123OlSwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-08 15:17:16 (4 days ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=www.geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; s ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=www.geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 14:10:00 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.g ... show more (mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 10:09:53.673810 2026] [security2:error] [pid 24502:tid 24502] [client 179.179.217.166:59468] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 179.179.217.166 (+1 hits since last alert)\|lusineweb.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lusineweb.com"] [uri "/xmlrpc.php"] [unique_id "ak5aMbKsL9gX_mvsy10NpgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 13:39:02 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.g ... show more (mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 09:38:58.301661 2026] [security2:error] [pid 3181:tid 3181] [client 179.179.217.166:59921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 179.179.217.166 (+1 hits since last alert)\|pakistanvision.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pakistanvision.com"] [uri "/xmlrpc.php"] [unique_id "ak5S8qphGZgaqELaskW1ngAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 13:18:01 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.g ... show more (mod_security) mod_security (id:225170) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 09:17:57.445610 2026] [security2:error] [pid 3406:tid 3406] [client 179.179.217.166:64071] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|theopinionatedowl.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theopinionatedowl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ak5OBevjoHfqYOo629XO-gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 13:01:13 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.g ... show more (mod_security) mod_security (id:240335) triggered by 179.179.217.166 (179.179.217.166.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 09:01:07.275214 2026] [security2:error] [pid 28768:tid 28768] [client 179.179.217.166:55998] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 179.179.217.166 (+1 hits since last alert)\|stop902.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stop902.org"] [uri "/xmlrpc.php"] [unique_id "ak5KE_I7osmVPKBGdl3mJgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-07-08 13:00:11 (4 days ago)	(wordpress) Failed wordpress login from 179.179.217.166 (BR/Brazil/179.179.217.166.dynamic.adsl.gvt. ... show more (wordpress) Failed wordpress login from 179.179.217.166 (BR/Brazil/179.179.217.166.dynamic.adsl.gvt.net.br) show less	Brute-Force
🇫🇷 Kenshin869	2026-07-07 20:51:20 (4 days ago)	Wordpress unauthorized access attempt	Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 125.16.27.190

🇳🇱 185.89.249.3

🇺🇸 172.245.197.49

🇺🇸 136.114.53.207

🇳🇱 45.148.10.152

🇦🇷 2800:2222:4000:e15:5d27:c9b0:4544:3999

🇺🇸 2607:f8b0:4004:1009::120

🇭🇰 219.78.63.235

🇦🇴 193.163.125.47

🇨🇴 186.87.33.35

🇺🇸 157.245.123.211

🇸🇪 157.52.122.30

🇧🇩 138.252.0.134

🇳🇱 91.92.42.227

🇺🇸 86.111.187.169

🇫🇷 85.204.70.98

🇧🇬 78.90.19.40

🇰🇷 59.24.133.197

🇺🇸 34.169.189.123

🇺🇸 34.139.188.230