JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.60.80.214

39.60.80.214 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 60%: ?

60%

ISP	Pakistan Telecommuication company limited
Usage Type	Fixed Line ISP
ASN	AS17557
Domain Name	ptcl.net.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.60.80.214

Whois 39.60.80.214

IP Abuse Reports for 39.60.80.214:

This IP address has been reported a total of 13 times from 10 distinct sources. 39.60.80.214 was first reported on July 5th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-07-13 05:20:52 (1 day ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["WordPress.com; ht ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["WordPress.com; https://wordpress.com","Jetpack by WordPress.com","Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)","Jetpack by WordPress.com show less	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-07-12 19:29:23 (1 day ago)	5.611 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-12 15:33:28 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 39.60.80.214 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.60.80.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 11:33:25.028781 2026] [security2:error] [pid 3591:tid 3591] [client 39.60.80.214:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.60.80.214 (+1 hits since last alert)\|bbproductionsonline.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bbproductionsonline.com"] [uri "/xmlrpc.php"] [unique_id "alOzxTqFwN8Py2S0286JsgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-10 19:55:05 (3 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇩🇪 rh24	2026-07-10 19:11:59 (3 days ago)	(wordpress) Failed wordpress login from 39.60.80.214 (PK/Pakistan/-): (CF_ENABLE)	Brute-Force
🇬🇧 consul.to	2026-07-09 05:36:44 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 14:09:23 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 39.60.80.214 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.60.80.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 10:09:16.846317 2026] [security2:error] [pid 31182:tid 31182] [client 39.60.80.214:65407] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.60.80.214 (+1 hits since last alert)\|casadelsolmexico.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "casadelsolmexico.net"] [uri "/xmlrpc.php"] [unique_id "ak0IjBOgHuOJUTO3ybccZgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 08:11:01 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.60.80.214 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 39.60.80.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 04:10:54.008806 2026] [security2:error] [pid 9206:tid 9210] [client 39.60.80.214:65064] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.60.80.214 (+1 hits since last alert)\|eceinal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eceinal.com"] [uri "/xmlrpc.php"] [unique_id "aky0jg3UNyM9m0lxXfqLFAAAAME"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 marten_o	2026-07-05 18:25:07 (1 week ago)	39.60.80.214 - - [05/Jul/2026:20:25:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/13.0; ... show more 39.60.80.214 - - [05/Jul/2026:20:25:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/13.0; WordPress/6.4; http://site96235988.com" 1293 4350 ... show less	Bad Web Bot Web App Attack
🇪🇸 SweetHoneyPress	2026-07-05 10:44:56 (1 week ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=993751 \| UA: WordPress.com; https://wordpress.com	Web App Attack Brute-Force
Anonymous	2026-07-05 10:31:39 (1 week ago)		Bad Web Bot Web App Attack
🇪🇸 SweetHoneyPress	2026-07-05 10:29:50 (1 week ago)	WordPress honeypot: POST to /xmlrpc.php \| event_id=993661 \| UA: Jetpack by WordPress.com (Jetpack 12 ... show more WordPress honeypot: POST to /xmlrpc.php \| event_id=993661 \| UA: Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3) show less	Web App Attack Brute-Force
Anonymous	2026-07-05 10:03:28 (1 week ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=www.geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; s ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=www.geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.180.171.157

🇬🇧 209.97.141.74

🇳🇱 178.16.53.241

🇧🇷 168.228.160.123

🇹🇼 111.70.32.46

🇨🇭 104.251.181.55

🇺🇸 91.230.168.137

🇳🇱 81.19.216.75

🇳🇱 45.198.224.15

🇺🇸 34.145.161.9

🇸🇪 31.208.81.75

🇵🇱 176.53.159.197

🇦🇺 172.217.33.16

🇱🇻 151.242.43.229

🇷🇴 92.118.39.14

🇬🇧 35.203.211.93

🇺🇸 20.64.105.91

🇮🇳 223.181.80.96

🇵🇰 144.48.132.165

🇨🇳 115.190.115.237