JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.23.209.138

212.23.209.138 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 39%: ?

39%

ISP	IZMAD BILISIM INTERNET HIZ. BILGI TEKN. ITH. IHR. SAN. TIC. LTD. STI.
Usage Type	Fixed Line ISP
ASN	AS49029
Domain Name	izmad.com.tr
Country	🇹🇷 Turkey
City	Turgutlu, Manisa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.23.209.138

Whois 212.23.209.138

IP Abuse Reports for 212.23.209.138:

This IP address has been reported a total of 17 times from 15 distinct sources. 212.23.209.138 was first reported on June 7th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 DRI	2026-09-21 00:15:36 (2 days ago)	Web attack/Malicious activity detected	Web App Attack
🇹🇷 Threat.live	2026-09-20 19:10:07 (2 days ago)	Threat.live: Brute Force	Brute-Force
🇺🇸 bigscoots.com	2026-09-16 09:49:50 (1 week ago)	212.23.209.138 (TR/Turkey/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more 212.23.209.138 (TR/Turkey/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 16 04:49:33 12525 sshd[6710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.23.209.138 user=root Sep 16 04:49:36 12525 sshd[6710]: Failed password for root from 212.23.209.138 port 40655 ssh2 Sep 16 04:27:10 12525 sshd[27316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.107.176.152 user=root Sep 16 04:27:12 12525 sshd[27316]: Failed password for root from 211.107.176.152 port 41140 ssh2 Sep 16 04:18:17 12525 sshd[22099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.132.198.203 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇨🇭 backslash	2026-09-06 11:21:01 (2 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 nationaleventpros.com	2026-09-02 15:19:07 (2 weeks ago)	WordPress login attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-08-21 23:48:22 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 212.23.209.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 212.23.209.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 19:48:18.431315 2026] [security2:error] [pid 11035:tid 11035] [client 212.23.209.138:47974] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|prostar.industries\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prostar.industries"] [uri "/wp-json/wp/v2/users/"] [unique_id "aojjwnVScDsXVQJT5lC9pAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-08-18 09:02:25 (1 month ago)	(wordpress) Failed wordpress login from 212.23.209.138 (TR/Türkiye/-): (CF_ENABLE)	Brute-Force
🇨🇦 DRI	2026-08-17 21:59:59 (1 month ago)	Web attack/Malicious activity detected	Web App Attack
🇮🇹 VHosting	2026-07-27 19:18:39 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-05-21 16:30:44 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 kosada.com	2026-04-22 09:39:37 (5 months ago)	Web vulnerability probing: /administrator/index.php	Web App Attack
🇦🇹 AustrianSimon	2026-02-27 22:20:23 (6 months ago)	27 Feb 2026 22:20:23UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 27 Feb 2026 22:20:23UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 212.23.209.138 show less	Brute-Force
🇮🇩 xveil	2026-02-21 02:42:20 (7 months ago)	2026-02-21T09:42:18.859243 mail-honeypot postfix/submission/smtpd[19291]: warning: unknown[212.23.20 ... show more 2026-02-21T09:42:18.859243 mail-honeypot postfix/submission/smtpd[19291]: warning: unknown[212.23.209.138]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 oralunal	2026-02-19 08:17:53 (7 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
Anonymous	2026-01-31 21:30:23 (7 months ago)		Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.78.183

🇸🇬 213.35.127.232

🇸🇬 213.35.122.246

🇸🇬 213.35.119.176

🇸🇬 213.35.108.6

🇬🇧 193.163.125.21

🇧🇷 179.48.18.42

🇺🇸 172.236.111.197

🇨🇦 146.190.246.109

🇮🇳 103.237.157.1

🇫🇷 91.231.89.148

🇨🇳 60.172.230.184

🇺🇸 40.74.212.22

🇰🇷 14.206.0.20

🇷🇴 2.57.121.25

🇺🇸 2604:a880:800:14:0:3:8b13:8000

🇫🇮 213.232.122.225

🇬🇧 213.229.107.29

🇺🇸 213.219.255.6

🇸🇬 213.35.106.249