JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.139.195.235

82.139.195.235 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	tal.de GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	tal.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.139.195.235

Whois 82.139.195.235

IP Abuse Reports for 82.139.195.235:

This IP address has been reported a total of 45 times from 30 distinct sources. 82.139.195.235 was first reported on April 30th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-07-17 14:52:10 (6 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-12 ... show more BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇺🇸 oralunal	2026-07-17 10:57:44 (10 hours ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-17 06:36:37 (14 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇳 evicky2002	2026-07-17 06:00:00 (15 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇷 setupgr	2026-07-17 05:33:54 (15 hours ago)	(mod_security) mod_security (id:1000001) triggered by 82.139.195.235 (EG/Egypt/Cairo/Cairo/-/[AS1374 ... show more (mod_security) mod_security (id:1000001) triggered by 82.139.195.235 (EG/Egypt/Cairo/Cairo/-/[AS137409 GSLNETWORKS-AS-AP GSL Networks Pty LTD]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Jul 17 08:33:51.364406 2026] [security2:error] [pid 499248:tid 499390] [client 82.139.195.235:31833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/db.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/themes/seotheme/db.php"] [severity "CRITICAL"] [tag "security"] [hostname "ions.gr"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "alm-v8atL5U51SlaimcYGwAABMo"], referer: www.google.com show less	Port Scan
🇩🇪 4server	2026-07-17 02:55:32 (18 hours ago)	[FriJul1704:55:26.4026052026][security2:error][pid1361464:tid1361469][client82.139.195.235:0]ModSecu ... show more [FriJul1704:55:26.4026052026][security2:error][pid1361464:tid1361469][client82.139.195.235:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\\|\?=\?f\(\?:open\\|write\)\?\\\\\\\\\(\\|\\\\\\\\b\(\?:passthru\\|serialize\\|php_uname\\|phpinfo\\|shell_exec\\|preg_\\\\\\\\w \\|mysql_query\\|exec\\|include\\|eval\\|create_function\\|system\\|base64_decode\\|decode_base64\\|base64_url_decode\\|str_rot13\)\\\\\\\\b\?\(\?:\\\\\\\\\(\\|\\\\\\\\:\)\)\"atARGS:l.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"724\"][id\"340195\"][rev\"4\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Base64EncodedPHPfunctioninArgument-thismaybeanattack.\"][data\"php_uname\(\"][severity\"CRITICAL\"][hostname\"noleggi.ch\"][uri\"/wp-plain.php\"][unique_id\"almZng6W7VmCeri8rv49RgAAAEI\"]\,referer:www.google.com show less	Port Scan Brute-Force Web App Attack
🇩🇪 maxpower	2026-07-17 02:26:42 (18 hours ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 82.139.195.235 (DZ/Algeria/-): 1 in the last 3600 s ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 82.139.195.235 (DZ/Algeria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 82.139.195.235 - - [17/Jul/2026:04:26:41 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 303 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" host=www.etag.it show less	Port Scan
🇫🇷 solution.it	2026-07-17 02:23:28 (18 hours ago)	[Fri Jul 17 04:23:27.648696 2026] [php7:error] [pid 361871:tid 361871] [client 82.139.195.235:32947] ... show more [Fri Jul 17 04:23:27.648696 2026] [php7:error] [pid 361871:tid 361871] [client 82.139.195.235:32947] script '/var/www/html/wp-plain.php' not found or unable to stat, referer: www.google.com show less	Web App Attack
🇫🇮 YF	2026-07-16 23:00:34 (22 hours ago)	WordPress content enumeration	Web App Attack
🇩🇪 expandmade.com	2026-07-16 21:30:07 (23 hours ago)	trolling for installation vulnerabilities [16/Jul/2026:21:30:06 "GET /plugins/content/apismtp/apismt ... show more trolling for installation vulnerabilities [16/Jul/2026:21:30:06 "GET /plugins/content/apismtp/apismtp.php?test=hello"] show less	Web App Attack
🇵🇱 lns.bz	2026-07-16 19:27:37 (1 day ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇳🇿 Antinson	2026-07-16 19:25:33 (1 day ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot
🇺🇸 masterguru	2026-07-16 17:25:07 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-16 ... show more BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-169) show less	Bad Web Bot
🇬🇷 setupgr	2026-07-16 16:55:33 (1 day ago)	(mod_security) mod_security (id:1000001) triggered by 82.139.195.235 (EG/Egypt/Cairo/Cairo/-/[AS1374 ... show more (mod_security) mod_security (id:1000001) triggered by 82.139.195.235 (EG/Egypt/Cairo/Cairo/-/[AS137409 GSLNETWORKS-AS-AP GSL Networks Pty LTD]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Jul 16 19:55:30.283170 2026] [security2:error] [pid 499747:tid 499949] [client 82.139.195.235:35033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/db.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/themes/seotheme/db.php"] [severity "CRITICAL"] [tag "security"] [hostname "asteriassantorini.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "alkNAoQ6ne_kzaWTe93imQAAA5g"], referer: www.google.com show less	Port Scan
Anonymous	2026-07-16 16:05:04 (1 day ago)	PHP file probing detected by Fail2Ban	Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 2.57.122.168

🇷🇴 92.118.39.225

🇺🇸 70.142.217.81

🇺🇸 69.165.69.206

🇬🇧 35.203.210.120

🇧🇷 205.210.31.172

🇺🇸 172.170.254.20

🇹🇷 94.154.43.56

🇳🇴 4.235.96.243

🇺🇸 2602:fb54:1533::1

🇺🇸 216.73.161.149

🇺🇸 205.210.31.88

🇺🇸 178.249.210.20

🇺🇸 173.239.224.40

🇺🇸 173.239.224.38

🇺🇸 172.202.29.124

🇺🇸 136.144.35.164

🇺🇸 104.234.53.69

🇳🇱 91.92.40.35

🇦🇪 86.98.119.172