JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 82.96.130.171

82.96.130.171 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Free Pro SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS199636
Hostname(s)	017043827.box.freepro.com
Domain Name	freepro.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 82.96.130.171

Whois 82.96.130.171

IP Abuse Reports for 82.96.130.171:

This IP address has been reported a total of 38 times from 24 distinct sources. 82.96.130.171 was first reported on July 2nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-07-14 09:59:30 (1 day ago)	(wordpress) Failed wordpress login from 82.96.130.171 (FR/France/017043827.box.freepro.com): (CF_EN ... show more (wordpress) Failed wordpress login from 82.96.130.171 (FR/France/017043827.box.freepro.com): (CF_ENABLE) show less	Brute-Force
🇺🇸 interbiznw.com	2026-07-14 01:52:58 (1 day ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 maxpower	2026-07-13 15:27:59 (1 day ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 82.96.130.171 (FR/France/017043827.box.freepro ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 82.96.130.171 (FR/France/017043827.box.freepro.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 82.96.130.171 - - [13/Jul/2026:17:27:58 +0200] "POST /xmlrpc.php HTTP/1.1" 404 104937 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" "-" host=britishlanguagecentre.it show less	Port Scan
🇦🇺 FireGuard Server	2026-07-13 10:55:08 (2 days ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443	Port Scan Hacking
🇩🇪 4server	2026-07-13 10:21:20 (2 days ago)	[MonJul1312:21:16.9645882026][security2:error][pid734736:tid734742][client82.96.130.171:0]ModSecurit ... show more [MonJul1312:21:16.9645882026][security2:error][pid734736:tid734742][client82.96.130.171:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"specialfood.ch\"][uri\"/xmlrpc.php\"][unique_id\"alS8HJMgWVOPocOdRkWJ7gAAAAM\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-13 06:45:35 (2 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇮🇩 origrata	2026-07-13 05:15:12 (2 days ago)	[OGWAF] xmlrpc_bruteforce attack blocked \| severity: critical \| POST /xmlrpc.php \| UA: Mozilla/5.0 ( ... show more [OGWAF] xmlrpc_bruteforce attack blocked \| severity: critical \| POST /xmlrpc.php \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/82.0.0.0 Sa \| payload: <?xml version="1.0"?><methodCall><methodName>metaWeblog.newPost</methodName><params><param><value><string>1</string></value></param><param><value><string>92234</string></value></param><param><value><s show less	Web App Attack
🇨🇭 4server	2026-07-13 01:09:06 (2 days ago)	[MonJul1303:09:00.1608512026][security2:error][pid203554:tid203704][client82.96.130.171:0]ModSecurit ... show more [MonJul1303:09:00.1608512026][security2:error][pid203554:tid203704][client82.96.130.171:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"duoacaja.com\"][uri\"/xmlrpc.php\"][unique_id\"alQ6rHTZSdWZA2KVdLZ3fgAAAEg\"] show less	Hacking Web App Attack
🇫🇮 inlink.ltd	2026-07-12 15:38:14 (2 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 lnklnx	2026-07-12 07:34:01 (3 days ago)	www.lincolnclan.com:443 82.96.130.171 - - [12/Jul/2026:02:33:59 -0500] "POST /xmlrpc.php HTTP/1.1" 4 ... show more www.lincolnclan.com:443 82.96.130.171 - - [12/Jul/2026:02:33:59 -0500] "POST /xmlrpc.php HTTP/1.1" 401 4128 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 Site.eu	2026-07-11 20:27:28 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-11 09:48:09 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 82.96.130.171 (017043827.box.freepro.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 82.96.130.171 (017043827.box.freepro.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 05:48:02.186631 2026] [security2:error] [pid 25536:tid 25536] [client 82.96.130.171:58861] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mayiasteadman.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mayiasteadman.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alIRUmLwU-5GVScUq-x4BQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 05:54:26 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 82.96.130.171 (017043827.box.freepro.com): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 82.96.130.171 (017043827.box.freepro.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 01:54:17.789160 2026] [security2:error] [pid 15060:tid 15060] [client 82.96.130.171:53700] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|grabagame.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grabagame.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alHaiXCb8gDms1pBvxzwqgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 dominioz	2026-07-11 02:45:46 (4 days ago)	2026-07-11 02:45:20 POST /xmlrpc.php - - 82.96.130.171 HTTP/1.1 Mozilla/5.0+(Linux;+Android+10;+arm6 ... show more 2026-07-11 02:45:20 POST /xmlrpc.php - - 82.96.130.171 HTTP/1.1 Mozilla/5.0+(Linux;+Android+10;+arm64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/110.0.0.0+Safari/537.36 - 301 798 2026-07-11 02:45:20 GET /err/ 404;https://dominioz.com.br:443/xmlrpc.php - 82.96.130.171 HTTP/1.1 Mozilla/5.0+(Linux;+Android+10;+arm64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/110.0.0.0+Safari/537.36 - 301 890 2026-07-11 02:45:22 GET /err/ 404;https://dominioz.com.br:443/err/index.asp?404;https://dominioz.com.br:443/xmlrpc.php - 82.96.130.171 HTTP/1.1 Mozilla/5.0+(Linux;+Android+10;+arm64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/110.0.0.0+Safari/537.36 - 301 982 2026-07-11 02:45:22 GET /err/ 404;https://dominioz.com.br:443/err/index.asp?404;https://dominioz.com.br:443/err/index.asp?404;https://dominioz.com.br:443/xmlrpc.php - 82.96.130.171 HTTP/1.1 Mozilla/5.0+(Linux;+Android+10;+arm64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/110.0.0.0+Safari/537.36 - 301 1074 ... show less	Web App Attack
🇩🇪 big-cloud.nl	2026-07-10 23:15:40 (4 days ago)	Try to access /xmlrpc.php	Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 194.165.16.11

🇺🇸 172.239.51.96

🇧🇬 91.92.47.128

🇳🇱 91.92.40.176

🇳🇱 64.89.162.37

🇳🇱 45.148.10.152

🇺🇸 40.121.179.100

🇫🇷 185.177.72.49

🇩🇪 167.94.146.34

🇱🇹 62.60.130.219

🇺🇸 52.167.144.216

🇲🇾 49.124.152.174

🇵🇰 39.37.66.171

🇻🇳 2402:800:61ef:cfdb:41c:c091:5293:4416

🇲🇽 206.135.11.234

🇳🇱 188.166.50.26

🇺🇸 172.253.185.16

🇺🇸 172.200.228.35

🇫🇷 91.231.89.227

🇲🇾 49.124.149.47