JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.34.210.136

149.34.210.136 was found in our database!

This IP was reported 202 times. Confidence of Abuse is 100%: ?

100%

ISP	GIBIRNET ILETISIM HIZMETLERI SANAYI VE TICARET LIMITED SIRKETI
Usage Type	Fixed Line ISP
ASN	AS208972
Hostname(s)	undefined.hostname.localhost
Domain Name	gibir.net.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.34.210.136

Whois 149.34.210.136

IP Abuse Reports for 149.34.210.136:

This IP address has been reported a total of 202 times from 77 distinct sources. 149.34.210.136 was first reported on February 27th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-03-15 12:30:08 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2026-03-14 13:50:43 (2 months ago)	Fail2ban filtered ...	Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 04:19:23 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 149.34.210.136 (undefined.hostname.localhost): ... show more (mod_security) mod_security (id:225170) triggered by 149.34.210.136 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 00:19:18.590478 2026] [security2:error] [pid 27920:tid 27920] [client 149.34.210.136:59602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rimaine.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rimaine.org"] [uri "/wp-json/wp/v2/users"] [unique_id "abThxld0v72cSaLUua81JQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-03-13 23:15:04 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-12 23:04:09 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 149.34.210.136 (undefined.hostname.localhost): ... show more (mod_security) mod_security (id:225170) triggered by 149.34.210.136 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 19:04:00.956584 2026] [security2:error] [pid 3253:tid 3253] [client 149.34.210.136:57172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ohiohca.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ohiohca.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abNGYIsqJzghP6lUBa2_GQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Block Rockin' Beats	2026-03-12 22:23:03 (2 months ago)	Scanning for exploitable scripts	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-12 04:37:28 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 149.34.210.136 (undefined.hostname.localhost): ... show more (mod_security) mod_security (id:225170) triggered by 149.34.210.136 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 00:37:23.624461 2026] [security2:error] [pid 29659:tid 29681] [client 149.34.210.136:59093] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vinylnotespodcast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vinylnotespodcast.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abJDA-HLEXvGlL7uV8iYmgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-12 00:07:20 (2 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-03-12 00:00:38 (2 months ago)	(wordpress) Failed wordpress login from 149.34.210.136 (TR/Türkiye/-/-/undefined.hostname.localhost)	Brute-Force
🇩🇪 LRob.fr	2026-03-11 23:45:06 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-03-10 02:48:41 (2 months ago)	(wordpress) Failed wordpress login from 149.34.210.136 (TR/Türkiye/-/-/undefined.hostname.localhost)	Brute-Force
🇺🇸 etu brutus	2026-03-09 23:39:42 (2 months ago)	149.34.210.136 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-03-09 19:34:02 (2 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-03-09 13:31:29 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 149.34.210.136 (undefined.hostname.localhost): ... show more (mod_security) mod_security (id:225170) triggered by 149.34.210.136 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 09:31:22.405965 2026] [security2:error] [pid 26643:tid 26643] [client 149.34.210.136:57197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|enriquejezik.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "enriquejezik.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aa7LqkqVov5k1VFodo0-ogAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2026-03-09 04:07:32 (2 months ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack

Showing 181 to 195 of 202 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 209.20.170.119

🇺🇸 195.184.76.166

🇺🇸 162.216.149.72

🇺🇸 162.216.149.25

🇳🇱 45.148.10.183

🇺🇸 2602:fb54:1a00::19b

🇰🇷 220.95.208.142

🇨🇦 217.181.82.189

🇩🇪 213.209.159.235

🇸🇬 152.42.160.174

🇵🇰 121.52.147.5

🇬🇷 92.112.82.119

🇺🇸 76.183.120.186

🇪🇨 45.224.97.245

🇳🇱 45.148.10.151

🇺🇸 23.94.136.36

🇮🇪 4.210.91.174

🇩🇪 217.79.213.82

🇦🇺 158.178.141.16

🇻🇳 103.153.254.96