JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.107.253.234

109.107.253.234 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 100%: ?

100%

ISP	Umniah Lil-Hawatef Al-Mutanaqelah Co
Usage Type	Fixed Line ISP
ASN	AS9038
Domain Name	umniah.com
Country	🇯🇴 Jordan
City	Amman, Amman

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.107.253.234

Whois 109.107.253.234

IP Abuse Reports for 109.107.253.234:

This IP address has been reported a total of 123 times from 74 distinct sources. 109.107.253.234 was first reported on July 3rd 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-07-20 05:42:55 (8 hours ago)	Bogus Useragent: 109.107.253.234 - - [20/Jul/2026:07:42:55 +0200] "GET /protocol?id=by_16_77&offset= ... show more Bogus Useragent: 109.107.253.234 - - [20/Jul/2026:07:42:55 +0200] "GET /protocol?id=by_16_77&offset=100 HTTP/1.1" 444 0 "-" "Opera/8.44.(X11; Linux x86_64; ja-JP) Presto/2.9.165 Version/10.00" asn=9038 org="Batelco Jordan" country=JO ... show less	Bad Web Bot
🇷🇴 INTEQ	2026-07-15 22:22:54 (4 days ago)	Web attack from 109.107.253.234	Web App Attack
🇺🇸 integrantservices.com	2026-07-15 21:07:57 (4 days ago)	(wordpress) Failed wordpress login from 109.107.253.234 (JO/Jordan/-)	Brute-Force
🇳🇱 Site.eu	2026-07-15 14:20:10 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-15 13:21:01 (5 days ago)	109.107.253.234 - - [15/Jul/2026:21:21:01 +0800] "POST /xmlrpc.php HTTP/1.1" 200 30686 "-" "Mozilla/ ... show more 109.107.253.234 - - [15/Jul/2026:21:21:01 +0800] "POST /xmlrpc.php HTTP/1.1" 200 30686 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/62.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-14 02:13:27 (6 days ago)	(wordpress) Failed wordpress login from 109.107.253.234 (JO/Jordan/-)	Brute-Force
🇬🇧 andypiper	2026-07-14 01:01:15 (6 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-14 00:17:04 (6 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-07-14 00:14:52 (6 days ago)	4.001 requests from abuseipdb.com blacklisted IP (2mos2w1d)	Brute-Force Bad Web Bot
🇨🇭 4server	2026-07-13 23:42:55 (6 days ago)	[TueJul1401:42:51.9167822026][security2:error][pid388789:tid389012][client109.107.253.234:0]ModSecur ... show more [TueJul1401:42:51.9167822026][security2:error][pid388789:tid389012][client109.107.253.234:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"fondazionemontgrand.ch\"][uri\"/xmlrpc.php\"][unique_id\"alV3-14HgilDoiPB2-WsiwAAANY\"] show less	Hacking Web App Attack
🇩🇪 Marc	2026-07-13 23:10:20 (6 days ago)	109.107.253.234 - - [14/Jul/2026:01:03:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3548 "-" "Mozilla/5 ... show more 109.107.253.234 - - [14/Jul/2026:01:03:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3548 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/89.0.0.0 Safari/537.36" 109.107.253.234 - - [14/Jul/2026:01:09:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3548 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/63.0.0.0 Safari/537.36" 109.107.253.234 - - [14/Jul/2026:01:10:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3548 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇩🇪 poseidon00	2026-07-13 20:04:41 (6 days ago)	109.107.253.234 - - [13/Jul/2026:19:56:04 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4895 "-" "Mozilla/5 ... show more 109.107.253.234 - - [13/Jul/2026:19:56:04 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4895 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/63.0.0.0 Safari/537.36" 109.107.253.234 - - [13/Jul/2026:20:03:01 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4898 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/86.0.0.0 Safari/537.36" 109.107.253.234 - - [13/Jul/2026:20:03:33 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4896 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/99.0.0.0 Safari/537.36" 109.107.253.234 - - [13/Jul/2026:20:04:07 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4896 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/88.0.0.0 Safari/537.36" 109.107.253.234 - - [13/Jul/2026:20:04:41 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4897 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/94.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 4server	2026-07-13 10:29:35 (1 week ago)	[MonJul1312:29:30.5992502026][security2:error][pid625691:tid625716][client109.107.253.234:0]ModSecur ... show more [MonJul1312:29:30.5992502026][security2:error][pid625691:tid625716][client109.107.253.234:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"studio-portale.ch\"][uri\"/xmlrpc.php\"][unique_id\"alS-CjEudrn_IWopDKawkAAAAJU\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-07-13 05:08:30 (1 week ago)	ntopng alert: blacklisted_server_contact	Hacking
🇳🇱 Site.eu	2026-07-13 04:41:06 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.75.123.227

🇳🇱 93.174.95.106

🇳🇱 31.77.131.189

🇨🇦 20.104.96.117

🇮🇷 5.237.109.89

🇨🇳 223.152.100.42

🇧🇷 138.97.132.214

🇫🇷 85.217.140.32

🇺🇸 70.184.250.71

🇫🇷 62.210.207.172

🇳🇱 45.148.10.183

🇦🇺 45.134.20.111

🇧🇪 35.195.138.45

🇫🇷 213.235.27.2

🇰🇭 202.79.29.108

🇩🇰 193.180.208.175

🇷🇴 193.32.162.82

🇨🇦 172.96.179.9

🇺🇸 146.19.49.45

🇺🇸 143.244.159.156