JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.249.64.187

134.249.64.187 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 90%: ?

90%

ISP	Kyivstar GSM
Usage Type	Fixed Line ISP
ASN	AS15895
Hostname(s)	134-249-64-187.broadband.kyivstar.net
Domain Name	kyivstar.ua
Country	🇺🇦 Ukraine
City	Lviv, Lviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.249.64.187

Whois 134.249.64.187

IP Abuse Reports for 134.249.64.187:

This IP address has been reported a total of 39 times from 26 distinct sources. 134.249.64.187 was first reported on June 24th 2026, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-21 19:28:23 (22 hours ago)	(mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivst ... show more (mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 15:28:18.001009 2026] [security2:error] [pid 4743:tid 4743] [client 134.249.64.187:49266] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|yogawithbubba.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "yogawithbubba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al_IUZRUcLEkO8dY-2Tc3QAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-21 16:33:35 (1 day ago)	Try to access /stellingia/xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 08:19:14 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivst ... show more (mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 04:19:09.727332 2026] [security2:error] [pid 2635326:tid 2635326] [client 134.249.64.187:64107] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|camasmarket.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "camasmarket.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al8rfYP_nIU-pAi-EJrY3gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-21 07:57:47 (1 day ago)	(wordpress) Failed wordpress login from 134.249.64.187 (UA/Ukraine/134-249-64-187.broadband.kyivstar ... show more (wordpress) Failed wordpress login from 134.249.64.187 (UA/Ukraine/134-249-64-187.broadband.kyivstar.net) show less	Brute-Force
🇬🇧 consul.to	2026-07-21 05:22:06 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 01:20:33 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivst ... show more (mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 21:20:30.212782 2026] [security2:error] [pid 8482:tid 8482] [client 134.249.64.187:61122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ruthbalser.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ruthbalser.org"] [uri "/wp-json/wp/v2/users"] [unique_id "al7JXnVWD6yzUp6MCyYIJgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 23:40:58 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivst ... show more (mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 19:40:52.591785 2026] [security2:error] [pid 427:tid 438] [client 134.249.64.187:58656] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|plumeraproductions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "plumeraproductions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al6yBDj8iOLBj4D1z7WonAAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-20 20:14:17 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 10:06:44 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivst ... show more (mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 06:06:38.372527 2026] [security2:error] [pid 12708:tid 12708] [client 134.249.64.187:61142] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|faithlines.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "faithlines.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alitLuJGeMgtIhxrA7_mUAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-15 19:49:18 (6 days ago)	CrowdSec: lrob/wp-xmlrpc-bf \| req: /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit ... show more CrowdSec: lrob/wp-xmlrpc-bf \| req: /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇫🇷 Baking333	2026-07-15 12:52:07 (1 week ago)	[redacted] 134.249.64.187 - - [15/Jul/2026:13:48:03 +0100] "POST /[redacted] HTTP/1.1" 405 6367 0/73 ... show more [redacted] 134.249.64.187 - - [15/Jul/2026:13:48:03 +0100] "POST /[redacted] HTTP/1.1" 405 6367 0/73940 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.0.0 Safari/537.36" [redacted] 134.249.64.187 - - [15/Jul/2026:13:52:05 +0100] "POST /[redacted] HTTP/1.1" 405 6367 0/132478 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/60.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-07-14 06:02:59 (1 week ago)	IP banned by Fail2Ban due to multiple malicious requests on Nginx	Brute-Force SSH Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 19:21:01 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivst ... show more (mod_security) mod_security (id:225170) triggered by 134.249.64.187 (134-249-64-187.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 15:20:54.455172 2026] [security2:error] [pid 19495:tid 19495] [client 134.249.64.187:60813] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|caddydad.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "caddydad.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alU6llerEr-dQI7k_kiEeQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-03 09:55:45 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 4server	2026-07-02 15:04:56 (2 weeks ago)	[ThuJul0217:04:52.8809872026][security2:error][pid3134186:tid3134298][client134.249.64.187:0]ModSecu ... show more [ThuJul0217:04:52.8809872026][security2:error][pid3134186:tid3134298][client134.249.64.187:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"formet.ch\"][uri\"/xmlrpc.php\"][unique_id\"akZ-FOdgJ4bGXyCeT90aTAAAANA\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 89.37.172.151

🇧🇷 45.6.36.150

🇰🇷 211.254.212.59

🇺🇸 172.237.150.22

🇩🇪 141.11.32.150

🇸🇪 135.116.20.17

🇸🇬 47.84.115.38

🇧🇷 201.149.100.34

🇧🇷 177.22.44.30

🇳🇱 172.94.9.49

🇺🇸 162.216.149.14

🇫🇷 143.244.57.90

🇺🇸 129.151.9.139

🇻🇳 103.90.225.155

🇲🇲 103.59.163.133

🇱🇹 81.30.98.47

🇲🇳 66.181.171.136

🇺🇸 47.251.33.148

🇺🇸 2602:80d:1007::5b

🇳🇱 195.178.110.227