JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 79.112.82.249

79.112.82.249 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	DIGI SPAIN TELECOM S.A
Usage Type	Fixed Line ISP
ASN	AS57269
Hostname(s)	79-112-82-249.digimobil.es
Domain Name	digimobil.es
Country	🇪🇸 Spain
City	Valencia, Valencia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 79.112.82.249

Whois 79.112.82.249

IP Abuse Reports for 79.112.82.249:

This IP address has been reported a total of 32 times from 26 distinct sources. 79.112.82.249 was first reported on August 13th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-26 07:31:11 (2 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-08-25 09:27:52 (1 day ago)	Scanner hitting /xmlrpc.php on () — aaguard	Brute-Force Port Scan
🇩🇪 Holger	2026-08-24 02:24:02 (2 days ago)	WordPress WebAttack	Brute-Force Web App Attack
Anonymous	2026-08-23 13:47:28 (2 days ago)	Scanner hitting /xmlrpc.php on () — aaguard	Brute-Force Port Scan
🇺🇦 URAN Publishing Service	2026-08-23 12:59:43 (2 days ago)	[23/Aug/2026:15:59:42 +0300] -- 79.112.82.249 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /xml ... show more [23/Aug/2026:15:59:42 +0300] -- 79.112.82.249 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /xmlrpc.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 oralunal	2026-08-23 07:29:56 (3 days ago)	IP banned by Fail2Ban in jail oral-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇫🇷 Little Iguana	2026-08-22 15:29:35 (3 days ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
Anonymous	2026-08-22 04:12:44 (4 days ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2026-08-22 02:13:32 (4 days ago)	Automated web probe/scanner blocked at the edge (WorldTree fleet). Signature: probe_path. Example re ... show more Automated web probe/scanner blocked at the edge (WorldTree fleet). Signature: probe_path. Example request: /xmlrpc.php on teacher-tea.com show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-22 01:41:47 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 79.112.82.249 (79-112-82-249.digimobil.es): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 79.112.82.249 (79-112-82-249.digimobil.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 21:41:43.716968 2026] [security2:error] [pid 24387:tid 24387] [client 79.112.82.249:63745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|josephshv.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "josephshv.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoj-V-IofNyM4NZ3yWxjsAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 lenz	2026-08-21 22:45:10 (4 days ago)	Aug 22 00:44:24 hosting wordpress(grupa-ddd.pl)[1215]: XML-RPC authentication failure for admin from ... show more Aug 22 00:44:24 hosting wordpress(grupa-ddd.pl)[1215]: XML-RPC authentication failure for admin from 79.112.82.249 Aug 22 00:44:36 hosting wordpress(grupa-ddd.pl)[1216]: XML-RPC authentication failure for admin from 79.112.82.249 Aug 22 00:44:48 hosting wordpress(grupa-ddd.pl)[161105]: XML-RPC authentication failure for admin from 79.112.82.249 Aug 22 00:45:00 hosting wordpress(grupa-ddd.pl)[10315]: XML-RPC authentication failure for admin from 79.112.82.249 Aug 22 00:45:09 hosting wordpress(grupa-ddd.pl)[1212]: XML-RPC authentication failure for admin from 79.112.82.249 ... show less	Brute-Force Web App Attack
🇺🇸 ArturShelby	2026-08-21 22:03:55 (4 days ago)	Honeypot triggered: /xmlrpc.php	Web App Attack
🇳🇱 ipoac.nl	2026-08-21 18:58:21 (4 days ago)	-:443 79.112.82.249 - - [21/Aug/2026:20:58:20 +0200] - "POST /xmlrpc.php HTTP/1.1" 404 6052 "-" "Moz ... show more -:443 79.112.82.249 - - [21/Aug/2026:20:58:20 +0200] - "POST /xmlrpc.php HTTP/1.1" 404 6052 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-21 13:38:11 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 79.112.82.249 (79-112-82-249.digimobil.es): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 79.112.82.249 (79-112-82-249.digimobil.es): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 09:38:05.124505 2026] [security2:error] [pid 11568:tid 11568] [client 79.112.82.249:62849] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|waterjetsolutions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "waterjetsolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aohUvYswtr62GDc3yZcyNAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 abdubhai	2026-08-21 11:12:35 (4 days ago)	79.112.82.249 - - [21/Aug/2026:1 ...	Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.67

🇲🇽 189.158.161.36

🇷🇺 94.154.87.15

🇺🇸 91.230.168.123

🇺🇦 91.225.6.191

🇺🇦 91.221.6.179

🇨🇳 59.36.75.227

🇳🇱 45.148.10.141

🇺🇸 43.135.145.117

🇺🇸 34.172.255.183

🇺🇸 20.84.59.27

🇬🇧 2a06:4883:d000::f8

🇺🇸 2600:1f16:119:be00:3ccb:eb95:d96e:d17e

🇱🇹 213.176.26.69

🇺🇸 195.184.76.31

🇬🇧 193.32.209.233

🇧🇷 190.89.58.200

🇧🇷 189.37.66.231

🇲🇽 186.96.145.241

🇳🇱 185.190.25.168