JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 176.235.182.149

176.235.182.149 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 87%: ?

87%

ISP	GUNEYDOGU TELEKOM INTERNET BILISIM VE ILETISIM HIZ TIC LTD S
Usage Type	Fixed Line ISP
ASN	AS34984
Domain Name	teletektelekom.com
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 176.235.182.149

Whois 176.235.182.149

IP Abuse Reports for 176.235.182.149:

This IP address has been reported a total of 54 times from 34 distinct sources. 176.235.182.149 was first reported on March 23rd 2021, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-09-21 01:49:46 (4 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇫🇷 Sklurk	2026-09-20 04:23:18 (1 day ago)	Web App Attack	Web App Attack
🇩🇪 Vegascosmetics	2026-09-18 00:21:45 (3 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: High Priority: %25252F show less	Hacking Exploited Host Web App Attack
🇺🇸 floreriaexpress	2026-09-17 06:17:11 (3 days ago)	FakeADS-Anti: country:TR \| https://floreriaexpresschile.cl/product/ramo-black-3-rosas-negras-2-liliu ... show more FakeADS-Anti: country:TR \| https://floreriaexpresschile.cl/product/ramo-black-3-rosas-negras-2-lilium-y-linda-envoltura/?wmc-currency=USD show less	Bad Web Bot
🇫🇮 saamkuu	2026-09-16 05:49:15 (5 days ago)	DDoS botnet: TCP connection flood, 66 connections to port 443.	DDoS Attack
🇺🇸 gui-ying233	2026-09-14 18:28:55 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 BlueWire Hosting	2026-09-13 01:36:46 (1 week ago)	Aggressive scanning resulting into 404	Bad Web Bot
🇺🇸 gui-ying233	2026-09-11 21:08:25 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
Anonymous	2026-09-09 09:15:02 (1 week ago)	WEB attack	Brute-Force
🇬🇧 spamverify.com	2026-09-07 08:18:58 (1 week ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-07 06:24:48 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A318&f%5B1%5D=digest_key_terms%3A527&f%5B2%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B328%5D=328 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇬🇪 ORDUNET	2026-09-03 19:59:34 (2 weeks ago)	Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC Ord ... show more Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC Ordunet), Georgia. This source sustained more than 150 packets/sec toward that single UDP port and was one of 3229 distinct sources from 1488 autonomous systems in 139 countries taking part in a coordinated flood on 2026-09-03/04. Our border router discarded 184 million packets (149 GB) of this attack traffic in 24 hours. Detected on a MikroTik RouterOS router by per-source rate accounting in the raw/prerouting chain (dst-limit 150,50,src-address/10s); the timestamp is the moment this source crossed the threshold, timezone +04:00. This is not a port scan and not a brute-force attempt - it is a packet flood, so the host is almost certainly compromised and part of a botnet. Full packet-level evidence available on request to [email protected]. show less	DDoS Attack Exploited Host
🇺🇸 gui-ying233	2026-09-02 10:10:18 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-01 07:20:54 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-30 08:59:25 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 223.25.100.75

🇺🇸 209.85.214.229

🇹🇳 196.187.144.114

🇺🇸 152.32.151.116

🇺🇸 146.190.77.39

🇲🇾 124.13.30.14

🇫🇷 91.231.89.69

🇷🇺 80.253.31.232

🇺🇸 66.132.195.73

🇲🇾 49.124.154.164

🇳🇱 45.148.10.141

🇭🇰 20.24.194.29

🇻🇳 14.191.181.178

🇨🇳 183.212.239.171

🇺🇸 165.154.218.226

🇳🇱 150.40.117.43

🇮🇩 119.47.88.254

🇸🇬 103.13.206.152

🇺🇸 209.85.210.231

🇺🇸 205.210.31.91