JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

201.229.174.35

Activity Trending Down

Abuse Confidence Score

18% Caution

15 reports

13 reporters · latest 1 month ago

ISP: Compañía Dominicana de Teléfonos S. A.
Usage Type: Fixed Line ISP
ASN: AS6400
Hostname(s): tdev174-35.codetel.net.do
Domain Name: codetel.net.do
Country: 🇩🇴 Dominican Republic
City: Santo Domingo Oeste, Santo Domingo Province

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 13 distinct reporters

First reported

May 3rd 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 2 🇦🇺 Australia 1 🇧🇪 Belgium 1

Most common categories Web App Attack 4 Bad Web Bot 4 Brute-Force 3 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-09-25 20:50:17 UTC · (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-09-25 20:34:21 UTC · (1 month ago)	4.084 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇩🇪 FD-IX	2026-09-25 20:23:09 UTC · (1 month ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-09-24 21:21:03 UTC · (1 month ago)	Blocked by CSF 13 firewall - Rule: XMLRPC DO/Dominican Republic/tdev174-35.codetel.net.do	Web App Attack
Anonymous	2026-09-24 18:28:44 UTC · (1 month ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 鬼影233	2026-09-23 22:25:53 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36	Bad Web Bot
🇨🇭 backslash	2026-07-30 20:51:00 UTC · (3 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇺🇸 xmission.com	2026-06-18 23:04:30 UTC · (4 months ago)	Blocked by UFW (TCP on 10012) Source port: 4140 TTL: 52 Packet length: 60 TOS: 0x08 This report (for 201.229.174.35) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2026-05-27 19:16:35 UTC · (5 months ago)	[redacted] 201.229.174.35 - - [27/May/2026:21:15:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 201.229.174.35 - - [27/May/2026:21:16:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress ... show more [redacted] 201.229.174.35 - - [27/May/2026:21:15:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 201.229.174.35 - - [27/May/2026:21:16:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.1; http://site93956596.com" [redacted] 201.229.174.35 - - [27/May/2026:21:16:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 201.229.174.35 - - [27/May/2026:21:16:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" [redacted] 201.229.174.35 - - [27/May/2026:21:16:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 16:15:01 UTC · (5 months ago)	(mod_security) mod_security (id:240335) triggered by 201.229.174.35 (tdev174-35.codetel.net.do): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 12:14:54.143803 2026] [security2:error] [pid 11451:tid 11451] [clie ... show more (mod_security) mod_security (id:240335) triggered by 201.229.174.35 (tdev174-35.codetel.net.do): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 12:14:54.143803 2026] [security2:error] [pid 11451:tid 11451] [client 201.229.174.35:2192] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 201.229.174.35 (+1 hits since last alert)\|medusakenya.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "medusakenya.com"] [uri "/xmlrpc.php"] [unique_id "ahcYfgGQGQFqB8lcSeCxnQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 14:30:37 UTC · (5 months ago)	(mod_security) mod_security (id:240335) triggered by 201.229.174.35 (tdev174-35.codetel.net.do): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 10:30:32.004744 2026] [security2:error] [pid 4936:tid 4936] [client ... show more (mod_security) mod_security (id:240335) triggered by 201.229.174.35 (tdev174-35.codetel.net.do): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 10:30:32.004744 2026] [security2:error] [pid 4936:tid 4936] [client 201.229.174.35:2461] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 201.229.174.35 (+1 hits since last alert)\|36sovereignchambers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "36sovereignchambers.com"] [uri "/xmlrpc.php"] [unique_id "ahcAB9RoiLgSoOgZ0gU0hAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 22:09:59 UTC · (5 months ago)	(mod_security) mod_security (id:240335) triggered by 201.229.174.35 (tdev174-35.codetel.net.do): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 18:09:52.153011 2026] [security2:error] [pid 5707:tid 5707] [client ... show more (mod_security) mod_security (id:240335) triggered by 201.229.174.35 (tdev174-35.codetel.net.do): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 18:09:52.153011 2026] [security2:error] [pid 5707:tid 5707] [client 201.229.174.35:2782] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 201.229.174.35 (+1 hits since last alert)\|fltsiminc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fltsiminc.com"] [uri "/xmlrpc.php"] [unique_id "ahYaMM6g1BzFVG2hSzEKfQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-26 13:28:43 UTC · (5 months ago)	Attac	Brute-Force
🇩🇪 grassau.com	2026-05-26 13:28:02 UTC · (5 months ago)	(wordpress) Failed wordpress login from 201.229.174.35 (DO/Dominican Republic/Nacional/Santo Domingo/tdev174-35.codetel.net.do)	Brute-Force
🇨🇦 polycoda	2026-05-03 11:07:43 UTC · (6 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 116.110.0.181

🇭🇰 46.247.61.95

🇧🇷 45.185.124.112

🇨🇬 41.75.64.120

🇧🇷 186.250.240.55

🇺🇸 162.216.149.109

🇩🇪 151.243.11.35

🇺🇸 147.185.132.205

🇳🇱 109.160.32.179

🇳🇱 93.123.109.105

🇧🇬 78.128.112.6

🇺🇸 68.225.62.203

🇺🇸 65.49.20.78

🇨🇦 54.39.43.117

🇳🇱 193.47.62.97

🇫🇮 178.20.210.152

🇬🇧 172.69.43.143

🇵🇰 122.129.65.36

🇺🇸 74.0.153.248

🇺🇸 38.75.196.58