JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.215.82.137

82.215.82.137 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 60%: ?

60%

ISP	JC LLC Sarkor-Telecom
Usage Type	Fixed Line ISP
ASN	AS12365
Domain Name	sarkor.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.215.82.137

Whois 82.215.82.137

IP Abuse Reports for 82.215.82.137:

This IP address has been reported a total of 32 times from 14 distinct sources. 82.215.82.137 was first reported on June 29th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-10-26 14:18:30 (20 hours ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)	Hacking
🇺🇸 TPI-Abuse	2026-10-24 13:29:07 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 82.215.82.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 82.215.82.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 09:29:03.236710 2026] [security2:error] [pid 14763:tid 14835] [client 82.215.82.137:35842] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|testproperty.pref-realestate.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "testproperty.pref-realestate.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atyyn6SLd9Ef_FRlQEaGXgAAAQ4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-10-24 03:26:38 (3 days ago)	Fail2Ban banned 82.215.82.137 for security violations in jail wp-armour. Log: 2026/10/24 03:26:38 [e ... show more Fail2Ban banned 82.215.82.137 for security violations in jail wp-armour. Log: 2026/10/24 03:26:38 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 82.215.82.137 \| Target: wplogin" , client: 82.215.82.137, server: [REDACTED], request: "POST /wp-login.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://espsformacion.com/wp-login.php" ... show less	Web Spam
🇩🇪 big-cloud.nl	2026-10-23 07:52:18 (4 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 mnsf	2026-10-22 13:06:51 (4 days ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 17:32:55 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 82.215.82.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 82.215.82.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:32:50.500888 2026] [security2:error] [pid 4910:tid 4910] [client 82.215.82.137:17711] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|churchbehindthewalls.bridgital.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "churchbehindthewalls.bridgital.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "atj3Qoa1p-X_o9lH7NRn8QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 08:53:49 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 82.215.82.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 82.215.82.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 04:53:41.857085 2026] [security2:error] [pid 4774:tid 4774] [client 82.215.82.137:6079] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|arriagarealestate.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arriagarealestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ath9lR71x-rUm0A3yCF3zQAAAAk"], referer: https://arriagarealestate.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-10-19 16:09:05 (1 week ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 AlexEventfahrtenIPDB	2026-10-15 08:54:30 (1 week ago)	[Thu Oct 15 10:54:29.775237 2026] [authz_core:error] [pid 3833519:tid 3833526] [remote 82.215.82.137 ... show more [Thu Oct 15 10:54:29.775237 2026] [authz_core:error] [pid 3833519:tid 3833526] [remote 82.215.82.137:33606] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.spdns.de/wp-login.php [Thu Oct 15 10:54:30.010701 2026] [authz_core:error] [pid 3833519:tid 3833557] [remote 82.215.82.137:33606] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.spdns.de/wp-login.php ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 23:36:38 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 82.215.82.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 82.215.82.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:36:35.733086 2026] [security2:error] [pid 4957:tid 4957] [client 82.215.82.137:10383] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ussthresher.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ussthresher.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atASA-yRD4yAo1_WnRgzlgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 AbuseIPDB informer	2026-10-13 10:04:32 (2 weeks ago)	nfdump top talker: 82.215.82.137 \| first seen 2026-10-13 13:04:32.640 \| duration 00:00:00.254 \| flow ... show more nfdump top talker: 82.215.82.137 \| first seen 2026-10-13 13:04:32.640 \| duration 00:00:00.254 \| flows=25 \| packets=886941 \| bytes=652.5 M \| pps=3489 \| bps=20.5 M \| bpp=735 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-13 10:04:32 (2 weeks ago)	nfdump top talker: 82.215.82.137 \| first seen 2026-10-13 13:04:32.128 \| duration 00:00:00.254 \| flow ... show more nfdump top talker: 82.215.82.137 \| first seen 2026-10-13 13:04:32.128 \| duration 00:00:00.254 \| flows=63 \| packets=2.2 M \| bytes=1.6 G \| pps=8819 \| bps=51.3 M \| bpp=727 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-13 08:05:50 (2 weeks ago)	nfdump top talker: 82.215.82.137 \| first seen 2026-10-13 08:05:50.848 \| duration 00:00:00.221 \| flow ... show more nfdump top talker: 82.215.82.137 \| first seen 2026-10-13 08:05:50.848 \| duration 00:00:00.221 \| flows=16 \| packets=454212 \| bytes=329.1 M \| pps=2051 \| bps=11.9 M \| bpp=724 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-12 17:55:37 (2 weeks ago)	nfdump top talker: 82.215.82.137 \| first seen 2026-10-12 20:55:37.856 \| duration 00:00:00.157 \| flow ... show more nfdump top talker: 82.215.82.137 \| first seen 2026-10-12 20:55:37.856 \| duration 00:00:00.157 \| flows=13 \| packets=419430 \| bytes=302.9 M \| pps=2655 \| bps=15.3 M \| bpp=722 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-12 16:55:00 (2 weeks ago)	nfdump top talker: 82.215.82.137 \| first seen 2026-10-12 19:55:00.864 \| duration 00:00:00.283 \| flow ... show more nfdump top talker: 82.215.82.137 \| first seen 2026-10-12 19:55:00.864 \| duration 00:00:00.283 \| flows=14 \| packets=552420 \| bytes=400.7 M \| pps=1945 \| bps=11.3 M \| bpp=725 \| proto=udp show less	DDoS Attack Exploited Host

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.248.233.248

🇵🇱 162.158.101.212

🇵🇱 162.158.101.211

🇨🇲 154.70.102.114

🇩🇪 151.240.174.208

🇲🇾 113.211.214.224

🇩🇪 109.160.32.141

🇷🇺 91.202.233.48

🇺🇸 73.174.147.248

🇹🇿 41.93.82.201

🇸🇪 2.22.145.219

🇵🇭 223.25.26.101

🇦🇲 195.250.79.2

🇳🇱 185.4.226.128

🇵🇱 172.69.49.170

🇵🇱 172.69.49.169

🇵🇱 172.69.49.168

🇵🇱 172.64.201.12

🇵🇱 172.64.201.11

🇵🇱 172.64.199.12