JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.39.244.139

41.39.244.139 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	TE Data
Usage Type	Fixed Line ISP
ASN	AS8452
Domain Name	tedata.net
Country	🇪🇬 Egypt
City	Al-'Ubur, Qalyubia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.39.244.139

Whois 41.39.244.139

IP Abuse Reports for 41.39.244.139:

This IP address has been reported a total of 38 times from 24 distinct sources. 41.39.244.139 was first reported on July 3rd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-09 23:58:47 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-07-09 22:30:01 (2 days ago)		Brute-Force Web App Attack
🇺🇸 etu brutus	2026-07-09 15:44:07 (3 days ago)	41.39.244.139 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇺🇸 TAY	2026-07-09 05:15:57 (3 days ago)	41.39.244.139 - - [09/Jul/2026:13:15:35 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5924 "-" "Jetpack by ... show more 41.39.244.139 - - [09/Jul/2026:13:15:35 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5924 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 41.39.244.139 - - [09/Jul/2026:13:15:46 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5924 "-" "Jetpack/12.1; WordPress/6.4; http://site54554111.com" 41.39.244.139 - - [09/Jul/2026:13:15:56 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5924 "-" "Jetpack by WordPress.com" ... show less	Brute-Force
🇩🇪 pscriptos	2026-07-08 09:37:35 (4 days ago)	{"ClientAddr":"41.39.244.139:58969","ClientHost":"41.39.244.139","ClientPort":"58969","ClientUsernam ... show more {"ClientAddr":"41.39.244.139:58969","ClientHost":"41.39.244.139","ClientPort":"58969","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":142098138,"OriginContentSize":418,"OriginDuration":138573286,"OriginStatus":403,"Overhead":3524852,"RequestAddr":"www.cleveradmin.de","RequestContentSize":707,"RequestCount":582827,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-07-08T11:37:14.406840988+02:00","StartUTC":"2026-07-08T09:37:14.406840988Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-08T11:37:14+02:00"} {"ClientAddr":"41.39.244.139:58969","ClientHost":"41.39.244.139","C ... show less	Brute-Force Web App Attack
🇫🇷 applemooz	2026-07-08 07:35:17 (4 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇫🇷 masterguru	2026-07-07 19:38:02 (4 days ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇳🇱 Site.eu	2026-07-07 18:37:21 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-07 05:50:10 (5 days ago)	Attac	Brute-Force
🇳🇿 Tripwire	2026-07-07 03:04:27 (5 days ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 21:30:11 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 41.39.244.139 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.39.244.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:30:04.126655 2026] [security2:error] [pid 16473:tid 16473] [client 41.39.244.139:53225] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.39.244.139 (+1 hits since last alert)\|rodandreelpiercam.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rodandreelpiercam.com"] [uri "/xmlrpc.php"] [unique_id "akweXOeYdTWoffGsukHorwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-06 19:54:05 (5 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 18:54:52 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 41.39.244.139 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.39.244.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 14:54:48.791362 2026] [security2:error] [pid 14803:tid 14803] [client 41.39.244.139:64543] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.39.244.139 (+1 hits since last alert)\|mainefirst.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mainefirst.org"] [uri "/xmlrpc.php"] [unique_id "akv5-KP6HHFpuZtgQgvhRgAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-06 17:20:59 (5 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 12:05:58 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 41.39.244.139 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 41.39.244.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 08:05:51.916103 2026] [security2:error] [pid 1492:tid 1492] [client 41.39.244.139:61145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 41.39.244.139 (+1 hits since last alert)\|bostonmarathonstories.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bostonmarathonstories.com"] [uri "/xmlrpc.php"] [unique_id "akuaH0gLW5YantY98d_wngAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 185.111.157.235

🇫🇷 104.28.164.251

🇺🇸 66.132.172.185

🇺🇸 198.57.162.173

🇺🇦 188.163.68.61

🇮🇳 168.144.76.52

🇺🇸 162.217.100.36

🇺🇸 152.32.183.163

🇺🇸 66.132.172.187

🇺🇸 64.62.156.45

🇳🇱 45.156.87.225

🇺🇸 35.86.189.70

🇯🇵 8.209.237.111

🇰🇷 1.212.225.99

🇲🇽 207.248.113.75

🇺🇸 207.90.244.20

🇭🇹 200.4.167.194

🇨🇱 190.164.195.165

🇲🇦 160.178.53.14

🇦🇷 153.67.13.158