JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.139.195.189

82.139.195.189 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	tal.de GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	tal.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.139.195.189

Whois 82.139.195.189

IP Abuse Reports for 82.139.195.189:

This IP address has been reported a total of 36 times from 28 distinct sources. 82.139.195.189 was first reported on May 8th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-24 06:00:00 (6 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇲🇽 octageeks.com	2026-07-24 04:22:45 (6 days ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇬🇧 Greg Poulson	2026-07-24 03:24:02 (6 days ago)	Our website was hit by this DDOS at a rate of 12 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇩🇪 maxpower	2026-07-24 00:31:24 (6 days ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 82.139.195.189 (DZ/Algeria/-): 1 in the last 3600 s ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 82.139.195.189 (DZ/Algeria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 82.139.195.189 - - [24/Jul/2026:02:31:20 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 299 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" host=etag.it show less	Port Scan
🇳🇱 i-turnradio.nl	2026-07-23 23:42:46 (6 days ago)	2026-07-24 @ 01:42:46 (CET) ~ Blocked for trying to access: /wp-content/plugins/fix/up.php	Web App Attack
🇺🇸 mnsf	2026-07-23 21:05:16 (6 days ago)	Too many Status 40X (15)	Brute-Force Web App Attack
🇩🇪 itsolon	2026-07-23 19:54:44 (6 days ago)	[23/Jul/2026:21:54:43 +0200] 17848364836.864511 82.139.195.189 0 217.154.7.177 443 [23/Jul/2026:21:5 ... show more [23/Jul/2026:21:54:43 +0200] 17848364836.864511 82.139.195.189 0 217.154.7.177 443 [23/Jul/2026:21:54:43 +0200] 178483648377.724964 82.139.195.189 0 217.154.7.177 443 [23/Jul/2026:21:54:43 +0200] 178483648371.955132 82.139.195.189 0 217.154.7.177 443 [23/Jul/2026:21:54:43 +0200] 178483648373.332588 82.139.195.189 0 217.154.7.177 443 [23/Jul/2026:21:54:43 +0200] 178483648395.984946 82.139.195.189 0 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
Anonymous	2026-07-23 18:26:51 (6 days ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇦🇺 clapper	2026-07-23 18:15:11 (6 days ago)	(mod_security) mod_security (id:980001) triggered by 82.139.195.189 (DZ/Algeria/-): 5 in the last 36 ... show more (mod_security) mod_security (id:980001) triggered by 82.139.195.189 (DZ/Algeria/-): 5 in the last 3600 secs; ID: Clar show less	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-07-23 17:07:12 (6 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-20 ... show more BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-201) show less	Bad Web Bot
🇧🇪 taivas.nl	2026-07-23 17:02:11 (6 days ago)	Bad_requests	Bad Web Bot
🇮🇩 rvsdi	2026-07-23 16:55:39 (6 days ago)	[OGWAF] path_traversal attack blocked \| severity: high \| POST /wp-plain.php \| UA: Mozilla/5.0 (Linux ... show more [OGWAF] path_traversal attack blocked \| severity: high \| POST /wp-plain.php \| UA: Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) V show less	Hacking Web App Attack
🇫🇮 oh.mg	2026-07-23 16:07:16 (1 week ago)	[Thu Jul 23 18:07:16.140859 2026] [security2:error] [pid 2044554:tid 2044576] [client 82.139.195.189 ... show more [Thu Jul 23 18:07:16.140859 2026] [security2:error] [pid 2044554:tid 2044576] [client 82.139.195.189:0] [client 82.139.195.189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.mmn.eco"] [uri "/"] [unique_id "amI8NGcCtfglfYIt-KpQ8QAAANQ"] [Thu Jul 23 18:07:16.215215 2026] [security2:error] [pid 2044554:tid 2044574] [client 82.139.195.189:0] [client 82.139.195.189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-e ... show less	Web App Attack Bad Web Bot
🇩🇪 maxpower	2026-07-23 15:25:43 (1 week ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 82.139.195.189 (DZ/Algeria/-): 1 in the last 3600 s ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 82.139.195.189 (DZ/Algeria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 82.139.195.189 - - [23/Jul/2026:17:25:41 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 17593 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "82.139.195.189" host=olscitaly.com show less	Port Scan
🇪🇨 icp77	2026-07-23 14:41:00 (1 week ago)	Abuse DDoS	DDoS Attack Port Scan Brute-Force Exploited Host Web App Attack SSH FTP Brute-Force Hacking SQL Injection

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.195.248.205

🇫🇮 150.251.152.242

🇩🇪 141.11.187.248

🇺🇸 104.28.161.197

🇺🇸 205.210.31.51

🇮🇹 188.219.104.210

🇬🇪 178.217.77.166

🇪🇸 158.158.41.78

🇭🇰 156.251.179.157

🇨🇳 122.231.203.88

🇺🇸 34.197.70.90

🇺🇸 34.73.179.251

🇺🇸 2607:f8b0:4001:c5c::120

🇺🇸 162.217.103.70

🇺🇸 162.216.150.172

🇨🇳 121.227.232.53

🇭🇰 118.193.44.213

🇲🇾 113.211.123.99

🇻🇳 103.75.183.177

🇫🇷 92.205.177.212