AbuseIPDB » 149.34.213.217
149.34.213.217
This IP was reported 10 times. Confidence of
Abuse
is 42% : ?
ISP
GIBIRNET ILETISIM HIZMETLERI SANAYI VE TICARET LIMITED SIRKETI
Usage Type
Fixed Line ISP
ASN
AS208972
Hostname(s)
undefined.hostname.localhost
Domain Name
gibir.net.tr
Country
🇹🇷
Turkey
City
Istanbul, Istanbul
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 149.34.213.217 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
149.34.213.217 was first reported on
May 26th 2026 , and the most recent report was
8 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
sthoyer.de
2026-09-19 08:22:44
(8 hours ago)
Sep 19 10:22:43 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Sep 19 10:22:43 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=149.34.213.217 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=1954 DF PROTO=TCP SPT=48135 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇩🇪
mist x
2026-09-19 06:37:57
(10 hours ago)
Honeypot SMB Probe: Port 445 SMB scan and exploit handshake probe.
Port Scan
Hacking
🇩🇪
check-the-sum.fr
2026-09-19 02:55:06
(13 hours ago)
Port Scanning
Port Scan
🇫🇷
sthoyer.de
2026-09-18 22:21:55
(18 hours ago)
Sep 19 00:21:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Sep 19 00:21:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=149.34.213.217 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=28346 DF PROTO=TCP SPT=5997 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
2026-09-18 18:09:54
(22 hours ago)
Port-Scan
Port Scan
2026-09-18 09:56:37
(1 day ago)
denied traffic to a honeypot network. destination port 445.
Port Scan
Hacking
🇩🇪
Luhte
2026-09-18 04:52:46
(1 day ago)
Unsolicited TCP connection from 149.34.213.217 to port 0 at 2026-09-18T04:52:46Z. Source IP complete ...
show more
Unsolicited TCP connection from 149.34.213.217 to port 0 at 2026-09-18T04:52:46Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
Port Scan
Hacking
🇺🇸
Rayulcifer
2026-05-28 12:59:08
(3 months ago)
149.34.213.217 - - [28/May/2026:07:59:05 -0500] "GET http://istitan.xyz:8080/player_api.php?username ...
show more
149.34.213.217 - - [28/May/2026:07:59:05 -0500] "GET http://istitan.xyz:8080/player_api.php?username=cl9szd2abhm&password=baris974 HTTP/1.1" 200 908 "-" "Lavf/58.76.100"
149.34.213.217 - - [28/May/2026:07:59:05 -0500] "GET http://kokocutv.xyz:8080/player_api.php?username=ayzgmompsa&password=iptv613 HTTP/1.1" 200 908 "-" "VLC/3.0.20 LibVLC/3.0.20"
149.34.213.217 - - [28/May/2026:07:59:06 -0500] "GET http://akellertv.xyz:8080/player_api.php?username=5g.ulkUyuk&password=ziya76635 HTTP/1.1" 200 908 "-" "TiviMate/4.7.0"
149.34.213.217 - - [28/May/2026:07:59:07 -0500] "GET http://ajansmedya.xyz:8080/player_api.php?username=kader27591&password=small056 HTTP/1.1" 200 908 "-" "TiviMate/4.7.0"
149.34.213.217 - - [28/May/2026:07:59:08 -0500] "GET http://istitan.xyz:8080/player_api.php?username=old776981&password=cool2319626 HTTP/1.1" 200 908 "-" "Lavf/58.76.100"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
🇺🇸
Rayulcifer
2026-05-27 12:59:06
(3 months ago)
149.34.213.217 - - [27/May/2026:07:58:52 -0500] "GET http://velvetip.xyz:8080/player_api.php?usernam ...
show more
149.34.213.217 - - [27/May/2026:07:58:52 -0500] "GET http://velvetip.xyz:8080/player_api.php?username=go5pvcjeh&password=YtSRJZJV HTTP/1.1" 200 908 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0 Safari/537.36"
149.34.213.217 - - [27/May/2026:07:58:52 -0500] "GET http://ajansmedya.xyz:8080/player_api.php?username=d9h2n8y6&password=7739565 HTTP/1.1" 200 908 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0 Safari/537.36"
149.34.213.217 - - [27/May/2026:07:58:56 -0500] "GET http://velvetip.xyz:8080/player_api.php?username=ferdifidan&password=zXDgOmbGF1 HTTP/1.1" 200 908 "-" "Lavf/58.76.100"
149.34.213.217 - - [27/May/2026:07:58:56 -0500] "GET http://marka4k.xyz:8080/player_api.php?username=5g.aliozkan942&password=adana59 HTTP/1.1" 200 908 "-" "VLC/3.0.20 LibVLC/3.0.20"
149.34.213.217 - - [27/May/2026:07:59:05 -0500] "GET http://efepr2.xyz:8080/player_api.php?username=sun28761817&password=kubra883253 HTTP/1.1"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
🇺🇸
Rayulcifer
2026-05-26 12:58:51
(3 months ago)
149.34.213.217 - - [26/May/2026:07:58:43 -0500] "GET http://velvetip.xyz:8080/player_api.php?usernam ...
show more
149.34.213.217 - - [26/May/2026:07:58:43 -0500] "GET http://velvetip.xyz:8080/player_api.php?username=tex8fsv&password=QSyPx3BpdbI HTTP/1.1" 200 908 "-" "VLC/3.0.20 LibVLC/3.0.20"
149.34.213.217 - - [26/May/2026:07:58:48 -0500] "GET http://marka4k.xyz:8080/player_api.php?username=cenkturk67&password=8H4KPfA1lq HTTP/1.1" 200 908 "-" "VLC/3.0.20 LibVLC/3.0.20"
149.34.213.217 - - [26/May/2026:07:58:48 -0500] "GET http://nanomid4k.xyz:8080/player_api.php?username=kaanars&password=izmir0228022 HTTP/1.1" 200 908 "-" "TiviMate/4.7.0"
149.34.213.217 - - [26/May/2026:07:58:48 -0500] "GET http://akellertv.xyz:8080/player_api.php?username=5g.fire7149966&password=red442149 HTTP/1.1" 200 908 "-" "VLC/3.0.20 LibVLC/3.0.20"
149.34.213.217 - - [26/May/2026:07:58:51 -0500] "GET http://kokocutv.xyz:8080/player_api.php?username=antalya0812&password=kubra7209 HTTP/1.1" 200 908 "-" "TiviMate/4.7.0"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: