JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.193.210.134

130.193.210.134 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 74%: ?

74%

ISP	Allay Nawroz Telecom Company for Communication/Ltd.
Usage Type	Mobile ISP
ASN	AS21277
Domain Name	newroztelecom.com
Country	🇮🇶 Iraq
City	Dihok, Duhok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.193.210.134

Whois 130.193.210.134

IP Abuse Reports for 130.193.210.134:

This IP address has been reported a total of 13 times from 13 distinct sources. 130.193.210.134 was first reported on October 10th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-10-17 05:20:39 (2 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇨🇦 lakered	2026-10-16 05:44:02 (1 day ago)	Detectors: [NGINX] \| Reasons: Nginx Honeypot: Administration interface scan \| Evidence: Verified-Bot ... show more Detectors: [NGINX] \| Reasons: Nginx Honeypot: Administration interface scan \| Evidence: Verified-Bot-JA4-Match (t13d201200), High-Criminality-Signature (ja4:t13d201200 - Ratio:0.99), High-Criminality-Signature (p0f::128:0::65535,8:mss,nop,ws,nop,nop,sok:df,id+:0 - Ratio:0.96), OS-Signature-Mismatch (UA:Linux/p0f:Windows) \| UA: Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/75.0.0.0 Safari/537.36 \| TCP Fingerprint: Modern Windows (Link:PPPoE, Uptime:0m) show less	Port Scan Web App Attack
🇲🇹 Malta	2026-10-16 05:27:09 (1 day ago)	130.193.210.134 - - [16/Oct/2026:07:27:09 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 130.193.210.134 - - [16/Oct/2026:07:27:09 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/94.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 WellSpring	2026-10-15 20:44:42 (1 day ago)	xmlrpc exploit on wellspr.ing/xmlrpc.php — WellSpr.ing/NetSentinel civic-AI security layer	Brute-Force Web App Attack
Anonymous	2026-10-14 21:21:30 (2 days ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
🇩🇪 4server	2026-10-14 17:54:19 (2 days ago)	[WedOct1419:54:15.0751822026][security2:error][pid2825173:tid2825284][client130.193.210.134:0]ModSec ... show more [WedOct1419:54:15.0751822026][security2:error][pid2825173:tid2825284][client130.193.210.134:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"traslochiamo.ch\"][uri\"/xmlrpc.php\"][unique_id\"as_BxwvIV2Oh0JNpvnF7hQAAAgo\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-14 04:07:02 (3 days ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx02,wa01,w ... show more Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx02,wa01,wa02] show less	Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-10-13 16:17:25 (3 days ago)	(wordpress) Failed wordpress login from 130.193.210.134 (IQ/Iraq/-)	Brute-Force
Anonymous	2026-10-12 20:43:29 (4 days ago)	[redacted] 130.193.210.134 - - [12/Oct/2026:22:42:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 449 "-" ... show more [redacted] 130.193.210.134 - - [12/Oct/2026:22:42:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 449 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.0.0 Safari/537.36" [redacted] 130.193.210.134 - - [12/Oct/2026:22:42:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 449 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/83.0.0.0 Safari/537.36" [redacted] 130.193.210.134 - - [12/Oct/2026:22:42:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 449 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/72.0.0.0 Safari/537.36" [redacted] 130.193.210.134 - - [12/Oct/2026:22:42:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 449 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36" [redacted] 130.193.210.134 - - [12/Oct/2026:22:42:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 449 "-" "Mozilla/5.0 (Wi ... show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-10-12 16:24:05 (4 days ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-10-12 15:46:50 (4 days ago)	WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 10.0; x ... show more WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36 show less	Web App Attack Hacking
🇩🇪 stinpriza	2026-10-10 20:37:44 (6 days ago)	Web App Attack	Web App Attack
🇳🇱 Alt255	2026-10-10 19:46:15 (6 days ago)	[ti-01ov] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail <name>. Example: ... show more [ti-01ov] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail <name>. Example: 130.193.210.134 - - \[10/Oct/2026:21:41:03 +0200\] "POST /xmlrpc.php HTTP/1.1" 403 7650 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Edge/87.0.0.0 Safari/537.36" 130.193.210.134 - - \[10/Oct/2026:21:41:56 +0200\] "POST /xmlrpc.php HTTP/1.1" 403 7650 "-" "Mozilla/5.0 \(Windows NT 6.2\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Safari/13.0.0.0 Safari/537.36" 130.193.210.134 - - \[10/Oct/2026:21:46:10 +0200\] "POST /xmlrpc.php HTTP/1.1" 403 7634 "-" "Mozilla/5.0 \(Windows NT 10.0\; arm64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Opera/74.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 213.136.64.185

🇺🇸 204.48.29.153

🇭🇰 152.32.213.175

🇻🇳 113.177.27.200

🇳🇱 45.148.10.151

🇻🇳 42.118.233.106

🇬🇧 35.203.211.212

🇷🇺 213.242.50.228

🇲🇴 182.93.50.90

🇰🇭 175.100.107.238

🇫🇮 147.185.133.63

🇵🇰 144.48.130.137

🇻🇳 113.161.227.201

🇦🇹 109.70.100.9

🇮🇩 103.113.170.231

🇫🇷 91.231.89.169

🇺🇿 89.126.211.166

🇳🇱 85.203.40.248

🇱🇹 62.60.130.253

🇺🇸 52.186.171.157