JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.79.141.139

82.79.141.139 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 53%: ?

53%

ISP	RCS & RDS Residential CGN
Usage Type	Fixed Line ISP
ASN	AS8708
Domain Name	digi.ro
Country	🇷🇴 Romania
City	Oradea, Bihor County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.79.141.139

Whois 82.79.141.139

IP Abuse Reports for 82.79.141.139:

This IP address has been reported a total of 14 times from 10 distinct sources. 82.79.141.139 was first reported on June 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Kenshin869	2026-07-06 18:09:01 (1 day ago)	Wordpress unauthorized access attempt	Brute-Force
Anonymous	2026-07-02 22:35:02 (5 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇫🇷 dynamix	2026-06-29 21:34:29 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 rh24	2026-06-29 20:31:52 (1 week ago)	(wordpress) Failed wordpress login from 82.79.141.139 (RO/Romania/-): (CF_ENABLE)	Brute-Force
Anonymous	2026-06-28 21:16:54 (1 week ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=eumedline.com; logs=/var/log/httpd/domains/eumedline.com.lo ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=eumedline.com; logs=/var/log/httpd/domains/eumedline.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2026-06-28 21:09:58 (1 week ago)	[redacted] 82.79.141.139 - - [28/Jun/2026:23:09:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 82.79.141.139 - - [28/Jun/2026:23:09:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" [redacted] 82.79.141.139 - - [28/Jun/2026:23:09:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site21221103.com" [redacted] 82.79.141.139 - - [28/Jun/2026:23:09:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 82.79.141.139 - - [28/Jun/2026:23:09:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site82440376.com" [redacted] 82.79.141.139 - - [28/Jun/2026:23:09:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇫🇷 masterguru	2026-06-26 12:36:37 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇫🇷 SpaceHost-Server	2026-06-25 16:52:17 (1 week ago)	82.79.141.139 - - [25/Jun/2026:18:51:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12. ... show more 82.79.141.139 - - [25/Jun/2026:18:51:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.5; WordPress/6.4; http://site15596349.com" 82.79.141.139 - - [25/Jun/2026:18:52:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.1; WordPress/6.2; http://site17664511.com" 82.79.141.139 - - [25/Jun/2026:18:52:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.1; WordPress/6.2; http://site70890718.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-06-25 16:36:54 (1 week ago)	82.79.141.139 - - [25/Jun/2026:18:36:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "WordPress.c ... show more 82.79.141.139 - - [25/Jun/2026:18:36:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "WordPress.com; https://wordpress.com" 82.79.141.139 - - [25/Jun/2026:18:36:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.5; WordPress/6.3; http://site56622964.com" 82.79.141.139 - - [25/Jun/2026:18:36:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" show less	Hacking Web App Attack
🇳🇱 ConsulHosting	2026-06-22 09:10:05 (2 weeks ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 22:05:09 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 82.79.141.139 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 82.79.141.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 18:05:02.190584 2026] [security2:error] [pid 3422:tid 3422] [client 82.79.141.139:59831] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 82.79.141.139 (+1 hits since last alert)\|abeltours.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "abeltours.com"] [uri "/xmlrpc.php"] [unique_id "ajW9Djf52dYSGz6_zMRuxQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-06-18 20:06:01 (2 weeks ago)	(wordpress) Failed wordpress login from 82.79.141.139 (RO/Romania/-): (CF_ENABLE)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-17 16:04:37 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 82.79.141.139 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 82.79.141.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 12:04:33.572104 2026] [security2:error] [pid 30003:tid 30003] [client 82.79.141.139:53703] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 82.79.141.139 (+1 hits since last alert)\|difusionens.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "difusionens.org"] [uri "/xmlrpc.php"] [unique_id "ajLFkfLvuyEvRfjjwQf7JAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 15:36:30 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 82.79.141.139 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 82.79.141.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 11:36:25.372113 2026] [security2:error] [pid 17933:tid 17933] [client 82.79.141.139:63412] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 82.79.141.139 (+1 hits since last alert)\|dianamead.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dianamead.com"] [uri "/xmlrpc.php"] [unique_id "ajK--UxhnujdhP_LO54gBAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.126.224.191

🇫🇮 172.102.223.130

🇷🇴 80.96.70.151

🇩🇪 45.144.233.139

🇺🇸 23.159.216.63

🇲🇽 201.163.63.74

🇵🇱 191.44.113.143

🇦🇲 178.160.211.25

🇷🇺 176.195.104.31

🇫🇷 104.28.211.189

🇷🇴 92.118.39.71

🇳🇱 91.92.40.25

🇧🇬 79.124.56.138

🇫🇷 46.16.40.36

🇩🇪 43.157.51.145

🇮🇩 43.129.33.244

🇺🇸 195.184.76.204

🇺🇸 195.184.76.56

🇨🇴 190.157.13.210

🇵🇹 176.223.17.77