JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.78.75.106

82.78.75.106 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 79%: ?

79%

ISP	RCS & RDS Residential CGN
Usage Type	Fixed Line ISP
ASN	AS8708
Hostname(s)	82-78-75-106.rdsnet.ro
Domain Name	digi.ro
Country	🇷🇴 Romania
City	Slatina, Olt

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.78.75.106

Whois 82.78.75.106

IP Abuse Reports for 82.78.75.106:

This IP address has been reported a total of 24 times from 16 distinct sources. 82.78.75.106 was first reported on July 8th 2024, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-06-18 22:09:45 (4 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-18 10:02:45 (16 hours ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇦🇺 screwlooseit.com.au	2026-06-17 23:25:42 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC RO/Romania/82-78-75-106.rdsnet.ro	Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 00:05:58 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 82.78.75.106 (82-78-75-106.rdsnet.ro): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 82.78.75.106 (82-78-75-106.rdsnet.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 20:05:54.371064 2026] [security2:error] [pid 29693:tid 29693] [client 82.78.75.106:53667] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 82.78.75.106 (+1 hits since last alert)\|fusteriafontane.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fusteriafontane.com"] [uri "/xmlrpc.php"] [unique_id "ajHk4hLD3GE7dJ7W86nk9wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Dunham Support	2026-06-16 19:49:02 (2 days ago)	(wordpress) Failed wordpress login from 82.78.75.106 (RO/Romania/82-78-75-106.rdsnet.ro)	Brute-Force
Anonymous	2026-06-16 17:08:15 (2 days ago)		Bad Web Bot Web App Attack
Anonymous	2026-06-16 15:43:58 (2 days ago)	[redacted] 82.78.75.106 - - [16/Jun/2026:17:43:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 82.78.75.106 - - [16/Jun/2026:17:43:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 82.78.75.106 - - [16/Jun/2026:17:43:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 82.78.75.106 - - [16/Jun/2026:17:43:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 82.78.75.106 - - [16/Jun/2026:17:43:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 82.78.75.106 - - [16/Jun/2026:17:43:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" ... show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-06-16 15:13:33 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-06-16 11:46:51 (2 days ago)	[redacted] 82.78.75.106 - - [16/Jun/2026:13:45:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 82.78.75.106 - - [16/Jun/2026:13:45:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 82.78.75.106 - - [16/Jun/2026:13:46:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 82.78.75.106 - - [16/Jun/2026:13:46:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.1; http://site65776309.com" [redacted] 82.78.75.106 - - [16/Jun/2026:13:46:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site67951638.com" [redacted] 82.78.75.106 - - [16/Jun/2026:13:46:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" ... show less	Hacking Web App Attack
🇺🇸 WeekendWeb	2026-06-15 20:10:44 (3 days ago)	Wordpress Vunerability attack	Web App Attack
Anonymous	2026-06-15 19:17:53 (3 days ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=diadromi.com; logs=/var/log/httpd/domains/diadromi.com.log; sa ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=diadromi.com; logs=/var/log/httpd/domains/diadromi.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-06-14 22:51:49 (4 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-14 22:51:48 (4 days ago)	[redacted] 82.78.75.106 - - [15/Jun/2026:00:51:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 82.78.75.106 - - [15/Jun/2026:00:51:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 82.78.75.106 - - [15/Jun/2026:00:51:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 82.78.75.106 - - [15/Jun/2026:00:51:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 82.78.75.106 - - [15/Jun/2026:00:51:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 82.78.75.106 - - [15/Jun/2026:00:51:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" ... show less	Hacking Web App Attack
🇺🇸 TAY	2026-06-14 17:57:54 (4 days ago)	82.78.75.106 - - [15/Jun/2026:01:57:32 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4491 "-" "Jetpack by W ... show more 82.78.75.106 - - [15/Jun/2026:01:57:32 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4491 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" 82.78.75.106 - - [15/Jun/2026:01:57:43 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4491 "-" "Jetpack by WordPress.com" 82.78.75.106 - - [15/Jun/2026:01:57:53 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4491 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-14 15:27:32 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 82.78.75.106 (82-78-75-106.rdsnet.ro): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 82.78.75.106 (82-78-75-106.rdsnet.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 11:27:24.626072 2026] [security2:error] [pid 22617:tid 22617] [client 82.78.75.106:5047] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 82.78.75.106 (+1 hits since last alert)\|digitaldatatechnologies.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "digitaldatatechnologies.net"] [uri "/xmlrpc.php"] [unique_id "ai7IXLUBm7q53PZKg_CtngAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.238

🇬🇧 193.163.125.85

🇳🇱 188.166.25.251

🇺🇸 157.245.9.59

🇨🇳 117.50.226.213

🇪🇸 200.234.236.58

🇬🇧 194.50.235.146

🇬🇧 193.163.125.3

🇷🇴 193.46.255.86

🇺🇸 192.178.115.212

🇷🇺 95.26.152.35

🇺🇿 84.54.70.79

🇺🇸 75.67.144.240

🇩🇪 69.5.169.238

🇻🇪 45.182.141.173

🇳🇱 5.255.117.127

🇳🇱 193.176.31.148

🇳🇱 176.65.148.158

🇧🇴 131.0.197.173

🇹🇭 118.193.56.171