JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.34.16.23

212.34.16.23 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 37%: ?

37%

ISP	Jordan Telecommunications PSC
Usage Type	Mobile ISP
ASN	AS8697
Domain Name	jt.net.jo
Country	🇯🇴 Jordan
City	Amman, Amman

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.34.16.23

Whois 212.34.16.23

IP Abuse Reports for 212.34.16.23:

This IP address has been reported a total of 17 times from 15 distinct sources. 212.34.16.23 was first reported on January 14th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-26 12:06:05 (2 days ago)	Trying to access config files	Web App Attack
🇪🇸 masterguru	2026-07-26 11:08:20 (2 days ago)	(xmlrpc) Failed xmlrpc access from 212.34.16.23 (JO/Jordan/-): 5 in the last 3600 secs (0-122)	Hacking
🇫🇷 masterguru	2026-07-26 10:29:25 (2 days ago)	(xmlrpc) Apache: Failed xmlrpc access from 212.34.16.23 (JO/Jordan/-): 10 in the last 3600 secs (0-2 ... show more (xmlrpc) Apache: Failed xmlrpc access from 212.34.16.23 (JO/Jordan/-): 10 in the last 3600 secs (0-201) show less	Hacking
Anonymous	2026-07-26 10:27:44 (2 days ago)	[redacted] 212.34.16.23 - - [26/Jul/2026:12:26:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 212.34.16.23 - - [26/Jul/2026:12:26:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site51729362.com" [redacted] 212.34.16.23 - - [26/Jul/2026:12:27:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site10513103.com" [redacted] 212.34.16.23 - - [26/Jul/2026:12:27:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 212.34.16.23 - - [26/Jul/2026:12:27:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" [redacted] 212.34.16.23 - - [26/Jul/2026:12:27:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-26 06:05:15 (2 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC JO/Hashemite Kingdom of Jordan/-	Web App Attack
Anonymous	2026-07-08 16:25:12 (2 weeks ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=197&mode=grid&product_vc_type=97&q=nec+np403 \| UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 3_1 like Mac OS X; om-ET) AppleWebKit/531.43.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B114 Safari/6531.43.2 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-30 03:49:09 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 212.34.16.23 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 212.34.16.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 23:49:06.538362 2026] [security2:error] [pid 13565:tid 13635] [client 212.34.16.23:52456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coldwave.net"] [uri "/client/.env"] [unique_id "akM8sgCblgf8xXh_yMX7lAAAAcw"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-03-22 01:45:58 (4 months ago)	212.34.16.23 \| Port: 14306 \| DNS: 212.34.16.23 2026-03-22T09:45:57+08:00 Asia/Amman \| FETCH Sproofin ... show more 212.34.16.23 \| Port: 14306 \| DNS: 212.34.16.23 2026-03-22T09:45:57+08:00 Asia/Amman \| FETCH Sproofing Activity Detetced. \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 HTTP/1.1 443 GET \| URL: /contents/opencart-module?ceecfcdfd=cacbbadabc \| Ref: - \| Country: JO/Jordan/+02:00 IP City: Amman 9e0185134c9449bc-AMM/Amman, Jordan 1 hits/0 secs Robots 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇨🇦 polycoda	2026-02-24 12:56:11 (5 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 gui-ying233	2026-02-13 00:03:29 (5 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-01-09 09:23:07 (6 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-12-31 19:39:33 (6 months ago)	Malicious activity detected	Hacking Web App Attack
🇨🇭 backslash	2025-12-09 22:10:13 (7 months ago)	block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB	Bad Web Bot
Anonymous	2025-11-25 06:41:19 (8 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2024-04-01 07:40:39 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.188.88

🇧🇷 201.148.164.43

🇳🇱 195.178.110.26

🇧🇷 189.108.215.39

🇺🇸 107.15.254.98

🇧🇷 190.89.137.76

🇳🇱 185.242.226.60

🇵🇱 176.53.159.198

🇰🇷 121.190.187.63

🇨🇳 60.166.83.197

🇺🇸 3.212.205.90

🇦🇿 188.253.212.94

🇬🇷 176.58.196.204

🇺🇸 164.92.88.219

🇭🇰 156.225.1.113

🇫🇮 147.185.133.75

🇿🇦 102.68.99.46

🇸🇬 68.183.234.194

🇨🇳 60.172.1.210

🇻🇳 14.225.245.134