AbuseIPDB » 82.154.182.126

82.154.182.126 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 100%: ?

100%

ISP	PT Comunicacoes S.A.
Usage Type	Fixed Line ISP
ASN	AS3243
Hostname(s)	bl5-182-126.dsl.telepac.pt
Domain Name	meo.pt
Country	Portugal
City	Lisbon, Lisbon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 82.154.182.126

Whois 82.154.182.126

IP Abuse Reports for 82.154.182.126:

This IP address has been reported a total of 155 times from 56 distinct sources. 82.154.182.126 was first reported on April 13th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-05-03 01:20:53 (2 months ago)	IP banned by Fail2Ban due to multiple malicious requests on Nginx	Brute-Force Web App Attack SSH
rtbh.com.tr	2025-05-02 20:06:24 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
mnsf	2025-05-01 18:05:13 (2 months ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
Jason Howell	2025-04-29 07:42:21 (2 months ago)	82.154.182.126 - - [29/Apr/2025:02:38:23 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5. ... show more82.154.182.126 - - [29/Apr/2025:02:38:23 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 82.154.182.126 - - [29/Apr/2025:02:39:22 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 82.154.182.126 - - [29/Apr/2025:02:40:29 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 82.154.182.126 - - [29/Apr/2025:02:41:21 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 82.154.182.126 - - [29/Apr/2025:02:42:20 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C ... show less	Web App Attack
rtbh.com.tr	2025-04-28 20:06:20 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-04-28 00:06:19 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-04-27 20:06:19 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
SkyDancer	2025-04-27 06:55:00 (2 months ago)	Multiple web intrusion attempts or RDP/SSH hacking using wrong credentials. Attack automatically blo ... show moreMultiple web intrusion attempts or RDP/SSH hacking using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Ai-D show less	Hacking Brute-Force SSH
Anonymous	2025-04-26 22:46:21 (2 months ago)	Web Probe / Attack	Web App Attack
Anonymous	2025-04-24 21:28:04 (2 months ago)	(xmlrpc) Failed wordpress XMLRPC 82.154.182.126 (PT/Portugal/bl5-182-126.dsl.telepac.pt)	Brute-Force
TPI-Abuse	2025-04-24 17:47:05 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 82.154.182.126 (bl5-182-126.dsl.telepac.pt): 1 ... show more(mod_security) mod_security (id:225170) triggered by 82.154.182.126 (bl5-182-126.dsl.telepac.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 13:46:58.611593 2025] [security2:error] [pid 21766:tid 21766] [client 82.154.182.126:12655] [client 82.154.182.126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iostation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iostation.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aAp5EmevBX8_wCQKTnJLZgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
nationaleventpros.com	2025-04-24 14:19:51 (2 months ago)	WordPress login attempt	Brute-Force
Anonymous	2025-04-23 08:35:57 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
bescared	2025-04-22 22:30:27 (2 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
TPI-Abuse	2025-04-22 18:09:03 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 82.154.182.126 (bl5-182-126.dsl.telepac.pt): 1 ... show more(mod_security) mod_security (id:225170) triggered by 82.154.182.126 (bl5-182-126.dsl.telepac.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 14:08:57.998491 2025] [security2:error] [pid 1278070:tid 1278070] [client 82.154.182.126:3242] [client 82.154.182.126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||londongroup.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "londongroup.info"] [uri "/wp-json/wp/v2/users"] [unique_id "aAfbOdifQLkqKwny-_1b8QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩