JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.71.36.2

149.71.36.2 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 4%: ?

ISP	Cogent Communications, LLC
Usage Type	Fixed Line ISP
ASN	AS138655
Domain Name	cogentco.com
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.71.36.2

Whois 149.71.36.2

IP Abuse Reports for 149.71.36.2:

This IP address has been reported a total of 3 times from 2 distinct sources. 149.71.36.2 was first reported on April 26th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-29 15:26:13 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 149.71.36.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 149.71.36.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 11:26:09.852931 2026] [security2:error] [pid 26113:tid 26113] [client 149.71.36.2:36693] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.71.36.2 (+1 hits since last alert)\|rwabutazafoundation.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rwabutazafoundation.org"] [uri "/xmlrpc.php"] [unique_id "akKOkWD25WR0-_utcPmSkQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 14:55:27 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 149.71.36.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 149.71.36.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 10:55:22.890075 2026] [security2:error] [pid 19241:tid 19241] [client 149.71.36.2:36131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 149.71.36.2 (+1 hits since last alert)\|redlitephotos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "redlitephotos.com"] [uri "/xmlrpc.php"] [unique_id "akKHWu3gQR7Yh8aoQwTYxAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 bigorre.org	2026-04-26 15:25:48 (2 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 32.185.1.69

🇺🇸 2600:1f13:11b:9905:cc:561:69cd:a249

🇳🇱 204.76.203.206

🇲🇩 92.243.67.107

🇳🇱 45.142.193.169

🇸🇬 212.73.148.10

🇦🇷 190.246.132.146

🇭🇰 159.138.146.214

🇺🇸 143.198.111.83

🇳🇵 139.5.75.38

🇺🇸 20.237.251.56

🇨🇦 20.104.50.116

🇬🇧 2a06:4883:1000::22

🇺🇸 198.37.147.154

🇪🇸 81.60.238.225

🇧🇷 45.205.1.245

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇳🇱 45.148.10.26

🇯🇵 212.32.76.55