JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.139.43.249

213.139.43.249 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 23%: ?

23%

ISP	Jordan Telecommunications PSC
Usage Type	Fixed Line ISP
ASN	AS8697
Domain Name	jt.net.jo
Country	🇯🇴 Jordan
City	Irbid, Irbid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.139.43.249

Whois 213.139.43.249

IP Abuse Reports for 213.139.43.249:

This IP address has been reported a total of 16 times from 12 distinct sources. 213.139.43.249 was first reported on March 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Inamin	2026-07-27 18:26:52 (1 day ago)	213.139.43.249 - - [28/Jul/2026:00:43:43 +0800] "GET /index.php?returntoquery=from%3D20260507101036% ... show more 213.139.43.249 - - [28/Jul/2026:00:43:43 +0800] "GET /index.php?returntoquery=from%3D20260507101036%26hidebots%3D0%26hideminor%3D1%26limit%3D100%26target%3D%25E7%25B5%25A2%25E7%2580%25AC%25E7%25B5%25B5%25E9%2587%258C%252F%25E7%25B5%25B5%25E9%2587%258C%25E3%2581%25A8%25E5%25BD%25BC%25E6%2596%25B9%25E3%2581%25AE%25E5%2585%25B1%25E9%2580%259A%25E7%2582%25B9 HTTP/2.0" 499 0 "-" "Mozilla/5.0 (Windows; U; Windows 98; Win 9x 4.90) AppleWebKit/534.14.2 (KHTML, like Gecko) Version/4.0.4 Safari/534.14.2" 213.139.43.249 - - [28/Jul/2026:02:26:51 +0800] "GET /index.php?days=30&from=20260507105258&hideminor=1&limit=100&target=%E7%84%A1%E9%A0%81%E9%9D%A2%E5%B0%88%E7%94%A8&title=%E7%89%B9%E6%AE%8A%3A%E5%B7%B2%E9%80%A3%E7%B5%90%E7%9A%84%E6%9C%80%E8%BF%91%E8%AE%8A%E6%9B%B4 HTTP/2.0" 403 153 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_7_6; rv:1.9.2.20) Gecko/3843-06-28 15:09:32.815414 Firefox/3.6.13" ... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Inamin	2026-07-27 17:44:33 (1 day ago)	213.139.43.249 - - [28/Jul/2026:00:43:43 +0800] "GET /index.php?returntoquery=from%3D20260507101036% ... show more 213.139.43.249 - - [28/Jul/2026:00:43:43 +0800] "GET /index.php?returntoquery=from%3D20260507101036%26hidebots%3D0%26hideminor%3D1%26limit%3D100%26target%3D%25E7%25B5%25A2%25E7%2580%25AC%25E7%25B5%25B5%25E9%2587%258C%252F%25E7%25B5%25B5%25E9%2587%258C%25E3%2581%25A8%25E5%25BD%25BC%25E6%2596%25B9%25E3%2581%25AE%25E5%2585%25B1%25E9%2580%259A%25E7%2582%25B9 HTTP/2.0" 499 0 "-" "Mozilla/5.0 (Windows; U; Windows 98; Win 9x 4.90) AppleWebKit/534.14.2 (KHTML, like Gecko) Version/4.0.4 Safari/534.14.2" ... show less	Brute-Force
🇺🇸 kosada.com	2026-07-27 10:53:38 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Tilellit.PRO	2026-07-23 09:11:06 (5 days ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 09:53:57 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 milcraft.nl	2026-05-27 00:14:38 (2 months ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
Anonymous	2026-05-23 04:56:52 (2 months ago)	Attack Signature Blocked: /wishlist/index/add/product/232/form_key/Awbw3o234En8vacb/img/portfolio.jp ... show more Attack Signature Blocked: /wishlist/index/add/product/232/form_key/Awbw3o234En8vacb/img/portfolio.jpg (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇩🇪 milcraft.nl	2026-05-15 05:00:11 (2 months ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇨🇭 ALPHANET	2026-05-10 07:35:57 (2 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇸🇬 mypatricks	2026-05-07 04:34:54 (2 months ago)	213.139.43.249 \| Port: 13054 \| DNS: 213.139.43.249 2026-05-07T12:34:52+08:00 Asia/Amman \| IPs Spam l ... show more 213.139.43.249 \| Port: 13054 \| DNS: 213.139.43.249 2026-05-07T12:34:52+08:00 Asia/Amman \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /mousse-cake-strawberry-shortcake/?64e70306064bd10599dc505003=SGD&code=SGD \| Ref: https://xxxxxx/mousse-cake-strawberry-shortcake/ \| Country: JO/Jordan/+02:00 IP City: Amman Windows 9f7d83ae68b124a9-AMM/Amman, Jordan 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇩🇪 rh24	2026-03-25 03:06:21 (4 months ago)	213.139.43.249 (JO/Jordan/-), 15 distributed imapd attacks on account [redacted]	Brute-Force
🇩🇪 big-cloud.nl	2026-03-17 16:21:59 (4 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 kosada.com	2026-03-11 18:24:15 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-04 15:08:45 (4 months ago)	(mod_security) mod_security (id:218580) triggered by 213.139.43.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:218580) triggered by 213.139.43.249 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 10:08:38.103150 2026] [security2:error] [pid 29531:tid 29555] [client 213.139.43.249:33534] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:id. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|americanacademyofprojectmanagement.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "americanacademyofprojectmanagement.com"] [uri "/article.php"] [unique_id "aahK9oJ3Y3hvCjgPjfdqkAAAARY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-02 18:09:26 (4 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.72

🇨🇳 182.119.229.72

🇧🇷 177.85.247.230

🇵🇭 150.228.187.19

🇨🇳 144.123.78.26

🇫🇷 92.222.104.212

🇫🇷 91.231.89.221

🇫🇷 91.231.89.28

🇨🇳 36.250.221.253

🇧🇷 201.148.164.182

🇹🇼 198.235.24.52

🇺🇸 173.239.214.102

🇺🇸 172.69.6.18

🇭🇰 165.154.6.224

🇺🇸 147.185.132.10

🇫🇷 91.231.89.185

🇫🇷 91.231.89.42

🇪🇸 87.216.238.182

🇷🇺 85.95.166.40

🇫🇮 45.154.244.149