JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.49.31.42

82.49.31.42 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 71%: ?

71%

ISP	Telecom Italia S.p.A. TIN EASY LITE
Usage Type	Fixed Line ISP
ASN	AS3269
Hostname(s)	host-82-49-31-42.retail.telecomitalia.it
Domain Name	tim.it
Country	🇮🇹 Italy
City	Cagliari, Sardinia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.49.31.42

Whois 82.49.31.42

IP Abuse Reports for 82.49.31.42:

This IP address has been reported a total of 15 times from 13 distinct sources. 82.49.31.42 was first reported on July 5th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 inlink.ltd	2026-07-13 19:52:14 (17 hours ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 19:23:37 (17 hours ago)	(mod_security) mod_security (id:225170) triggered by 82.49.31.42 (host-82-49-31-42.retail.telecomita ... show more (mod_security) mod_security (id:225170) triggered by 82.49.31.42 (host-82-49-31-42.retail.telecomitalia.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 15:23:32.467004 2026] [security2:error] [pid 22365:tid 22516] [client 82.49.31.42:55292] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|campingcosmetics.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "campingcosmetics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alU7NKqIbQShGQk-Cpk4NwAAAdA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 srtzero	2026-07-13 16:24:16 (20 hours ago)	82.49.31.42 - - [13/Jul/2026:18:24:16 +0200] "POST /xmlrpc.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 (W ... show more 82.49.31.42 - - [13/Jul/2026:18:24:16 +0200] "POST /xmlrpc.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/88.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
Anonymous	2026-07-13 13:06:48 (1 day ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (11/60 min)'; Requests=11	Port Scan
🇩🇪 big-cloud.nl	2026-07-13 09:41:54 (1 day ago)	Try to access /xmlrpc.php	Web App Attack
Anonymous	2026-07-13 00:19:14 (1 day ago)	Blocked by siteaihub.com: auto: matched wildcard:/xmlrpc.php	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-07-12 19:44:29 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 82.49.31.42 (host-82-49-31-42.retail.telecomita ... show more (mod_security) mod_security (id:225170) triggered by 82.49.31.42 (host-82-49-31-42.retail.telecomitalia.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 15:44:24.540467 2026] [security2:error] [pid 8848:tid 8848] [client 82.49.31.42:54721] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|arsenalfordemocracy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alPumOdlbnOE3872psZ6TAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-09 14:20:37 (4 days ago)	Web attack blocked by Wordfence on gedichtenlangsdegeul.nl (1 hit). Reported by CRMON.	Web App Attack
🇨🇭 4server	2026-07-09 13:00:16 (5 days ago)	[ThuJul0915:00:10.6952622026][security2:error][pid720498:tid721010][client82.49.31.42:0]ModSecurity: ... show more [ThuJul0915:00:10.6952622026][security2:error][pid720498:tid721010][client82.49.31.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"edomustech.ch\"][uri\"/xmlrpc.php\"][unique_id\"ak-bWokC8WQXzDVIyv3ZzAAAAAQ\"] show less	Hacking Web App Attack
Anonymous	2026-07-09 12:32:23 (5 days ago)	[redacted] 82.49.31.42 - - [09/Jul/2026:14:31:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Moz ... show more [redacted] 82.49.31.42 - - [09/Jul/2026:14:31:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" laufzeit.de 82.49.31.42 - - [09/Jul/2026:14:31:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.0.0 Safari/537.36" laufzeit.de 82.49.31.42 - - [09/Jul/2026:14:32:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36" [redacted] 82.49.31.42 - - [09/Jul/2026:14:32:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36" laufzeit.de 82.49.31.42 - - [09/Jul/2026:14:32:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT ... show less	Hacking Web App Attack
🇺🇸 oralunal	2026-07-07 16:25:20 (6 days ago)	IP banned by Fail2Ban in jail its-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 09:47:23 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 82.49.31.42 (host-82-49-31-42.retail.telecomita ... show more (mod_security) mod_security (id:225170) triggered by 82.49.31.42 (host-82-49-31-42.retail.telecomitalia.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 05:47:19.427985 2026] [security2:error] [pid 25696:tid 25696] [client 82.49.31.42:60433] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|casadelsolmexico.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "casadelsolmexico.net"] [uri "/wp-json/wp/v2/users"] [unique_id "akzLJx43U0uu1LMwy2mzpgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 billfor	2026-07-05 22:29:56 (1 week ago)	82.49.31.42 - - [05/Jul/2026:18:29:53 -0400] "POST /xmlrpc.php HTTP/1.1" 404 571 "-" "Mozilla/5.0 (W ... show more 82.49.31.42 - - [05/Jul/2026:18:29:53 -0400] "POST /xmlrpc.php HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇹 Inartis	2026-07-05 11:34:42 (1 week ago)	82.49.31.42 - - [05/Jul/2026:13:34:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4979 "-" "Mozilla/5.0 ( ... show more 82.49.31.42 - - [05/Jul/2026:13:34:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4979 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/76.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Peter-Johann Sarbach	2026-07-05 03:46:54 (1 week ago)	Hacking website	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 196.51.164.93

🇨🇳 180.140.129.41

🇺🇸 147.185.132.100

🇯🇵 118.193.61.170

🇷🇺 85.93.45.33

🇧🇷 45.237.81.184

🇺🇸 44.247.76.172

🇨🇭 37.120.213.13

🇧🇩 202.134.14.235

🇮🇳 152.57.232.200

🇺🇦 88.154.13.56

🇺🇸 71.6.199.65

🇺🇸 66.132.186.228

🇺🇸 45.55.92.85

🇺🇸 44.81.193.59

🇺🇸 37.140.223.159

🇳🇱 2a00:1450:4013:c22::121

🇳🇱 185.132.176.56

🇺🇸 172.93.106.153

🇧🇷 172.71.238.61