JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.86.159.14

149.86.159.14 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 12%: ?

12%

ISP	GIBIRNET ILETISIM HIZMETLERI SANAYI VE TICARET LIMITED SIRKETI
Usage Type	Fixed Line ISP
ASN	AS208972
Hostname(s)	undefined.hostname.localhost
Domain Name	gibir.net.tr
Country	🇹🇷 Turkey
City	Selcuklu, Konya

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.86.159.14

Whois 149.86.159.14

IP Abuse Reports for 149.86.159.14:

This IP address has been reported a total of 12 times from 9 distinct sources. 149.86.159.14 was first reported on August 10th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-06 16:30:49 (5 days ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-17 16:31:05 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 149.86.159.14 (undefined.hostname.localhost): 1 ... show more (mod_security) mod_security (id:210730) triggered by 149.86.159.14 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 12:30:58.264425 2026] [security2:error] [pid 5601:tid 5601] [client 149.86.159.14:35594] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Danbury II/Stetson Bordeaux/Thumbs.db"] [unique_id "agntQg6LIb6l2y3qWrUCnwAAABo"], referer: https://vitalitywebb.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2026-03-16 04:07:51 (2 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 matt	2026-03-04 02:27:43 (3 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇺🇸 matt	2026-03-02 20:51:12 (3 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇺🇸 matt	2026-03-02 20:13:25 (3 months ago)	DDOS attack on complex filter web page in order to take down site.	DDoS Attack
🇮🇹 VHosting	2025-12-02 06:24:15 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇭 backslash	2025-11-04 08:15:33 (7 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-30 03:27:36 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 149.86.159.14 (undefined.hostname.localhost): 1 ... show more (mod_security) mod_security (id:225170) triggered by 149.86.159.14 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 23:27:30.332496 2025] [security2:error] [pid 23195:tid 23195] [client 149.86.159.14:40518] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barigby.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barigby.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQLbIukechWX_z7D5UQbsAAAAAg"], referer: https://barigby.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-09-26 22:05:25 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 exxos	2025-09-19 15:03:01 (8 months ago)	http-no-verb	Hacking
🇳🇱 Futunk	2025-08-10 00:05:38 (10 months ago)	Form spam (honeypot): POST /launch-notification	Web Spam

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 72.10.32.138

🇸🇬 47.79.51.83

🇺🇸 20.84.153.199

🇮🇪 20.13.147.55

🇩🇪 213.209.159.242

🇨🇳 182.44.38.181

🇸🇬 139.162.49.249

🇳🇱 45.148.10.152

🇺🇸 45.8.19.58

🇮🇩 43.245.249.251

🇷🇴 2.57.121.25

🇨🇳 220.180.166.214

🇧🇬 193.24.211.107

🇧🇷 179.181.133.153

🇧🇩 103.189.226.30

🇳🇬 102.216.134.50

🇲🇾 47.250.155.223

🇺🇸 2607:f8b0:4001:c2e::123

🇹🇭 159.192.132.34

🇨🇦 104.255.152.19