JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 78.135.24.142

78.135.24.142 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 42%: ?

42%

ISP	Aydogan Communication LTD.
Usage Type	Fixed Line ISP
ASN	AS43242
Hostname(s)	78-135-24-142.extendbroadband.com
Domain Name	ari.net.tr
Country	🇹🇷 Turkey
City	Mersin, Mersin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 78.135.24.142

Whois 78.135.24.142

IP Abuse Reports for 78.135.24.142:

This IP address has been reported a total of 29 times from 20 distinct sources. 78.135.24.142 was first reported on June 16th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-08-28 13:06:54 (5 days ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
Anonymous	2026-08-28 12:35:56 (5 days ago)	Fail2ban filtered ...	Web App Attack
🇨🇭 4server	2026-08-28 11:31:47 (5 days ago)	[FriAug2813:31:42.3978632026][security2:error][pid1180654:tid1180896][client78.135.24.142:0]ModSecur ... show more [FriAug2813:31:42.3978632026][security2:error][pid1180654:tid1180896][client78.135.24.142:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mdd-network.ch\"][uri\"/xmlrpc.php\"][unique_id\"apFxniM2gWXtU5Ns0K9nSgAAAI4\"] show less	Hacking Web App Attack
🇺🇸 Penny Packer	2026-08-27 11:20:14 (6 days ago)	Fail2Ban apache-tripwires	Web App Attack
🇨🇭 4server	2026-08-22 08:33:44 (1 week ago)	[SatAug2210:33:37.4893212026][security2:error][pid1648032:tid1648316][client78.135.24.142:0]ModSecur ... show more [SatAug2210:33:37.4893212026][security2:error][pid1648032:tid1648316][client78.135.24.142:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"468\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"safertechnics.ch\"][uri\"/xmlrpc.php\"][unique_id\"aole4QdlU1pGPWNq_gE-vAAAAMA\"] show less	Hacking Web App Attack
🇺🇸 OceanTreasure	2026-08-14 08:07:21 (2 weeks ago)	tcp/443; WordPress XML-RPC brute force attempt: "POST /xmlrpc.php" @ 2026-08-14T08:01:45Z [proxy]	Brute-Force
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=19; exact paths: /xmlrpc.php	Web App Attack
🇩🇪 4server	2026-07-22 13:17:11 (1 month ago)	[WedJul2215:17:05.9085972026][security2:error][pid367847:tid367936][client78.135.24.142:0]ModSecurit ... show more [WedJul2215:17:05.9085972026][security2:error][pid367847:tid367936][client78.135.24.142:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"titancapital.ch\"][uri\"/xmlrpc.php\"][unique_id\"amDC0dHhOM9ynzHTD7VvxgAAAMU\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-07-18 12:52:05 (1 month ago)	Wordfence waf block on decarcerationnation	Web App Attack
🇬🇧 gigatech	2026-07-18 10:00:04 (1 month ago)	Webserver Probing	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 15:54:36 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 78.135.24.142 (78-135-24-142.extendbroadband.co ... show more (mod_security) mod_security (id:225170) triggered by 78.135.24.142 (78-135-24-142.extendbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 11:54:31.240021 2026] [security2:error] [pid 4588:tid 4588] [client 78.135.24.142:56714] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|certifiedfarmersmarkets.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "certifiedfarmersmarkets.org"] [uri "/wp-json/wp/v2/users"] [unique_id "alpQN_E645Gdz3LuBAL60wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 06:17:46 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 78.135.24.142 (78-135-24-142.extendbroadband.co ... show more (mod_security) mod_security (id:225170) triggered by 78.135.24.142 (78-135-24-142.extendbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 02:17:41.144704 2026] [security2:error] [pid 9546:tid 9546] [client 78.135.24.142:64595] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kerrywood.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kerrywood.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alnJBfjUSZPEkR3K7y32vwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-15 06:09:54 (1 month ago)	(xmlrpc) Failed xmlrpc access from 78.135.24.142 (TR/Turkey/78-135-24-142.extendbroadband.com): 5 in ... show more (xmlrpc) Failed xmlrpc access from 78.135.24.142 (TR/Turkey/78-135-24-142.extendbroadband.com): 5 in the last 3600 secs (0-122) show less	Hacking
🇩🇪 big-cloud.nl	2026-07-09 12:33:35 (1 month ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 4server	2026-07-06 11:14:03 (1 month ago)	[MonJul0613:13:59.1822502026][security2:error][pid4122969:tid4123082][client78.135.24.142:0]ModSecur ... show more [MonJul0613:13:59.1822502026][security2:error][pid4122969:tid4123082][client78.135.24.142:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"subitotraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"akuN91GNjntt-dWEHiKvCQAAAJg\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

172.22.240.120

🇺🇸 2a10:7b06:957c:5db7:a996:e18e:ab51:fffc

🇳🇱 193.47.62.167

192.168.27.26

🇲🇽 187.252.6.218

172.17.147.146

🇮🇩 163.7.4.169

100.82.48.94

🇫🇷 88.164.201.41

🇺🇦 79.135.219.85

🇫🇮 31.76.50.159

🇨🇦 20.220.204.93

10.120.63.175

🇧🇬 46.232.158.6

🇳🇱 45.148.10.157

🇮🇩 43.133.140.5

🇺🇸 35.243.170.203

10.245.185.128

10.193.94.16

10.45.171.39