JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.241.138.100

185.241.138.100 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 56%: ?

56%

ISP	Uzak Yazilim Ve Bilisim Sistemleri Tic. Ltd. Sti
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56643
Hostname(s)	portakal.medyaportakal.com
Domain Name	uzak.net.tr
Country	🇹🇷 Turkey
City	Ankara, Ankara

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.241.138.100

Whois 185.241.138.100

IP Abuse Reports for 185.241.138.100:

This IP address has been reported a total of 91 times from 35 distinct sources. 185.241.138.100 was first reported on December 22nd 2022, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 YF	2026-09-18 13:30:42 (6 hours ago)	WordPress author enumeration	Web App Attack
🇲🇽 octageeks.com	2026-09-18 04:08:48 (15 hours ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 13:24:21 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 185.241.138.100 (portakal.medyaportakal.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 185.241.138.100 (portakal.medyaportakal.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:24:15.879747 2026] [security2:error] [pid 32320:tid 32320] [client 185.241.138.100:41708] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.cubbylure.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cubbylure.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqvp_87FlEbqzHyV1YF11wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-17 13:21:04 (1 day ago)	Web App Attack, Hacking	Hacking Web App Attack
🇫🇷 LRob	2026-09-17 12:25:37 (1 day ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: / \| query: author=1 \| 2026-09-17 12:25 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 08:52:24 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 185.241.138.100 (portakal.medyaportakal.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 185.241.138.100 (portakal.medyaportakal.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:52:19.094319 2026] [security2:error] [pid 11763:tid 11763] [client 185.241.138.100:47554] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mrpinman.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mrpinman.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aquqQ8abu7Zr_47YE9jXOQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-09-17 08:05:13 (1 day ago)	Abuse Detected (12)	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-09-17 07:32:13 (1 day ago)	Bad_requests	Bad Web Bot
🇫🇷 masterguru	2026-09-17 05:55:58 (1 day ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)	Hacking
🇺🇸 TPI-Abuse	2026-09-17 05:45:06 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 185.241.138.100 (portakal.medyaportakal.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 185.241.138.100 (portakal.medyaportakal.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 01:44:59.804731 2026] [security2:error] [pid 17875:tid 17883] [client 185.241.138.100:46754] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.peterhansenranch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.peterhansenranch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqt-W2Hgsaoy1-git8hKlwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-16 10:35:22 (2 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: / \| query: author=1 (+1 more) \| 2026-09-16 10:35 UTC show less	Hacking Web App Attack
🇲🇹 Malta	2024-11-22 07:58:45 (1 year ago)	185.241.138.100 - - [22/Nov/2024:08:58:44 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 185.241.138.100 - - [22/Nov/2024:08:58:44 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2024-11-17 20:53:17 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 selahattinalan	2024-11-17 19:18:40 (1 year ago)	Nov 17 22:18:40 server wordpress(debiakademianaokulu.com.tr)[67684]: XML-RPC authentication attempt ... show more Nov 17 22:18:40 server wordpress(debiakademianaokulu.com.tr)[67684]: XML-RPC authentication attempt for unknown user administrator from 185.241.138.100 show less	Brute-Force
🇩🇰 wnbhosting.dk	2024-11-17 18:26:28 (1 year ago)	WP xmlrpc [2024-11-17T19:26:28+01:00]	Hacking Web App Attack

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.24.219.154

🇰🇬 212.97.4.175

🇺🇸 195.184.76.180

🇭🇰 194.187.178.77

🇺🇸 172.68.245.124

🇳🇱 160.119.66.48

🇺🇸 104.234.19.104

🇳🇬 102.90.45.127

🇵🇱 91.228.196.69

🇺🇸 68.183.113.3

🇩🇪 51.89.83.53

🇲🇾 42.191.74.57

🇬🇧 35.203.211.153

🇹🇼 1.170.32.235

🇩🇪 194.187.176.239

🇿🇦 185.132.186.38

🇳🇱 185.93.89.79

🇺🇸 172.190.107.79

🇺🇸 162.216.150.137

🇨🇳 120.48.136.241