JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.86.146.231

149.86.146.231 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	GIBIRNET ILETISIM HIZMETLERI SANAYI VE TICARET LIMITED SIRKETI
Usage Type	Fixed Line ISP
ASN	AS208972
Hostname(s)	undefined.hostname.localhost
Domain Name	gibir.net.tr
Country	🇹🇷 Turkey
City	Selcuklu, Konya

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.86.146.231

Whois 149.86.146.231

IP Abuse Reports for 149.86.146.231:

This IP address has been reported a total of 15 times from 11 distinct sources. 149.86.146.231 was first reported on February 11th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2025-12-14 13:50:13 (6 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 bigscoots.com	2025-12-09 19:33:39 (6 months ago)	(sshd) Failed SSH login from 149.86.146.231 (TR/Turkey/undefined.hostname.localhost): 5 in the last ... show more (sshd) Failed SSH login from 149.86.146.231 (TR/Turkey/undefined.hostname.localhost): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 9 13:27:54 15171 sshd[30179]: Invalid user httpd from 149.86.146.231 port 57671 Dec 9 13:27:55 15171 sshd[30179]: Failed password for invalid user httpd from 149.86.146.231 port 57671 ssh2 Dec 9 13:33:23 15171 sshd[31193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.86.146.231 user=root Dec 9 13:33:26 15171 sshd[31193]: Failed password for root from 149.86.146.231 port 40709 ssh2 Dec 9 13:33:33 15171 sshd[31209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.86.146.231 user=root show less	Brute-Force SSH
Anonymous	2025-12-01 04:41:40 (6 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Bad Web Bot Exploited Host
🇮🇹 Progetto1	2025-11-28 21:25:02 (6 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 SMARTNET	2025-11-26 02:37:10 (6 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
🇺🇸 bigscoots.com	2025-11-20 14:59:33 (6 months ago)	(sshd) Failed SSH login from 149.86.146.231 (TR/Turkey/undefined.hostname.localhost): 5 in the last ... show more (sshd) Failed SSH login from 149.86.146.231 (TR/Turkey/undefined.hostname.localhost): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Nov 20 08:48:14 16082 sshd[15761]: Invalid user tv from 149.86.146.231 port 57612 Nov 20 08:48:16 16082 sshd[15761]: Failed password for invalid user tv from 149.86.146.231 port 57612 ssh2 Nov 20 08:56:55 16082 sshd[16384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.86.146.231 user=root Nov 20 08:56:57 16082 sshd[16384]: Failed password for root from 149.86.146.231 port 49357 ssh2 Nov 20 08:59:30 16082 sshd[16604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.86.146.231 user=root show less	Brute-Force SSH
🇷🇺 ago.su	2025-11-13 03:15:25 (7 months ago)	F2B blocked nginx activity control ddos v1 [otd]	DDoS Attack
Anonymous	2025-11-11 14:13:04 (7 months ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
🇷🇺 ago.su	2025-11-10 21:49:35 (7 months ago)	F2B blocked nginx activity control ddos v1 [otd]	DDoS Attack
🇺🇸 SuperEvilLuke	2025-11-04 21:59:24 (7 months ago)	Malicious activity detected from 208972 GIBIRNET- towards host dash.embotic.xyz (GET HTTP/2) @ 2025- ... show more Malicious activity detected from 208972 GIBIRNET- towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T21:59:24Z (9 occurrences) show less	DDoS Attack Exploited Host
Anonymous	2025-11-04 19:13:59 (7 months ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
🇸🇬 Vano Ganzzz	2025-11-03 08:16:36 (7 months ago)	Triggered Cloudflare WAF (l7ddos) from TR. Action taken: BLOCK ASN: 208972 (GIBIRNET-) Protocol: HTT ... show more Triggered Cloudflare WAF (l7ddos) from TR. Action taken: BLOCK ASN: 208972 (GIBIRNET-) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-11-03T08:16:36Z Ray ID: 998a6e348bbcb132 UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 Edge/12.0 show less	DDoS Attack Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-11-02 12:51:50 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇦🇺 MAGIC	2025-03-11 14:30:58 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-02-11 21:24:49 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.178.247.182

🇪🇹 196.188.93.169

🇹🇭 184.82.184.6

🇫🇷 146.70.194.244

🇺🇸 107.173.70.115

🇨🇳 183.4.9.205

🇮🇳 182.95.234.6

🇲🇴 182.93.7.194

🇺🇸 150.107.38.252

🇺🇸 130.131.201.26

🇦🇺 51.161.198.228

🇧🇷 45.234.40.2

🇺🇸 2604:a880:400:d1:0:4:9639:f001

🇭🇰 223.197.178.95

🇹🇼 211.22.166.107

🇧🇪 198.235.24.212

🇩🇪 151.243.150.40

🇨🇳 113.201.90.227

🇰🇬 46.251.192.53

🇹🇼 35.234.63.224