JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.56.55.213

39.56.55.213 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 54%: ?

54%

ISP	Pakistan Telecommuication company limited
Usage Type	Fixed Line ISP
ASN	AS17557
Domain Name	ptcl.net.pk
Country	🇵🇰 Pakistan
City	Gujranwala, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.56.55.213

Whois 39.56.55.213

IP Abuse Reports for 39.56.55.213:

This IP address has been reported a total of 22 times from 11 distinct sources. 39.56.55.213 was first reported on June 13th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-09 11:45:12 (13 hours ago)	(mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 07:45:08.634441 2026] [security2:error] [pid 12218:tid 12218] [client 39.56.55.213:32751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.56.55.213 (+1 hits since last alert)\|jacquelineperriam.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jacquelineperriam.com"] [uri "/xmlrpc.php"] [unique_id "ak-JxBlgLP4SfixZWSfx-AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 17:18:00 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 13:17:55.186402 2026] [security2:error] [pid 25560:tid 25560] [client 39.56.55.213:23840] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.56.55.213 (+1 hits since last alert)\|lspfest.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lspfest.com"] [uri "/xmlrpc.php"] [unique_id "akqRw9ZEepCpownrRazD8QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-05 10:05:51 (4 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-05 01:04:40 (5 days ago)	Attac	Brute-Force
🇺🇸 TAY	2026-07-05 01:03:32 (5 days ago)	39.56.55.213 - - [05/Jul/2026:09:01:31 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "WordPress.co ... show more 39.56.55.213 - - [05/Jul/2026:09:01:31 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "WordPress.com; https://wordpress.com" 39.56.55.213 - - [05/Jul/2026:09:01:42 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "Jetpack/13.0; WordPress/6.4; http://site62132135.com" 39.56.55.213 - - [05/Jul/2026:09:03:31 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "Jetpack/13.0; WordPress/6.1; http://site52885319.com" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-04 18:55:46 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 14:55:40.555623 2026] [security2:error] [pid 4571:tid 4571] [client 39.56.55.213:40569] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.56.55.213 (+1 hits since last alert)\|bosdkbook.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bosdkbook.com"] [uri "/xmlrpc.php"] [unique_id "aklXLJkU1CAthEuJCirO-QAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 17:00:21 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 13:00:14.212766 2026] [security2:error] [pid 24907:tid 24907] [client 39.56.55.213:12147] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.56.55.213 (+1 hits since last alert)\|ramseycountycorruption.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ramseycountycorruption.com"] [uri "/xmlrpc.php"] [unique_id "akaZHuM6xwUxAAVZTtzGhAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 11:36:47 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 07:36:40.199310 2026] [security2:error] [pid 17970:tid 17970] [client 39.56.55.213:11699] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.56.55.213 (+1 hits since last alert)\|aroilcontrolsystem.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "aroilcontrolsystem.com"] [uri "/xmlrpc.php"] [unique_id "akEHSFCIeoT0KkYc7I4SSwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 factor1	2026-06-28 02:45:32 (1 week ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 15:28:32 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 11:28:29.058102 2026] [security2:error] [pid 29286:tid 29309] [client 39.56.55.213:2459] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.56.55.213 (+1 hits since last alert)\|nordicatrio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nordicatrio.com"] [uri "/xmlrpc.php"] [unique_id "aj6anZ_Aj_iaDXAmNVk5kAAAAZM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 12:36:42 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 08:36:34.998809 2026] [security2:error] [pid 25080:tid 25080] [client 39.56.55.213:12580] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.56.55.213 (+1 hits since last alert)\|amywoodruff.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "amywoodruff.com"] [uri "/xmlrpc.php"] [unique_id "aj5yUixx9wuLgRTsGCnYlwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-25 18:14:19 (2 weeks ago)	39.56.55.213 - - [25/Jun/2026:20:13:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 798 "-" "WordPress.com ... show more 39.56.55.213 - - [25/Jun/2026:20:13:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 798 "-" "WordPress.com; https://wordpress.com" 39.56.55.213 - - [25/Jun/2026:20:14:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" 39.56.55.213 - - [25/Jun/2026:20:14:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 798 "-" "Jetpack by WordPress.com" 39.56.55.213 - - [25/Jun/2026:20:14:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 39.56.55.213 - - [25/Jun/2026:20:14:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 798 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 12:04:40 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.56.55.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 08:04:35.357251 2026] [security2:error] [pid 32743:tid 32743] [client 39.56.55.213:44157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.56.55.213 (+1 hits since last alert)\|fishleadership.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fishleadership.org"] [uri "/xmlrpc.php"] [unique_id "aj0ZUxjqOJ-v2x516aZUrQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-22 15:06:06 (2 weeks ago)	Trying to access config files	Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-21 13:51:37 (2 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC PK/Pakistan/-	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.205.60.29

🇺🇸 162.216.150.179

🇫🇮 147.185.133.218

🇻🇳 116.99.171.121

🇻🇳 112.137.143.2

🇷🇴 92.118.39.49

🇫🇷 91.231.89.215

🇳🇱 45.148.10.152

🇲🇽 187.168.22.116

🇺🇸 162.216.150.16

🇨🇦 159.203.1.251

🇺🇸 147.185.132.111

🇨🇳 106.75.233.179

🇮🇳 103.54.101.248

🇺🇸 74.82.47.23

🇩🇪 68.183.221.217

🇳🇱 45.148.10.151

🇵🇰 39.34.187.227

🇬🇧 35.203.210.7

🇪🇸 217.154.106.153