JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.128.70.19

213.128.70.19 was found in our database!

This IP was reported 333 times. Confidence of Abuse is 100%: ?

100%

ISP	H29277
Usage Type	Fixed Line ISP
ASN	AS201178
Hostname(s)	server-213.128.70.19.radore.net.tr
Domain Name	rh.net.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.128.70.19

Whois 213.128.70.19

IP Abuse Reports for 213.128.70.19:

This IP address has been reported a total of 333 times from 137 distinct sources. 213.128.70.19 was first reported on June 14th 2026, and the most recent report was 56 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 juutis	2026-06-19 13:24:56 (56 seconds ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇨🇿 plzenskypruvodce.cz	2026-06-19 11:44:20 (1 hour ago)	2026-06-19T13:44:18.636081+02:00 web wordpress(varhanykolin.cz)[4046062]: Immediately block connecti ... show more 2026-06-19T13:44:18.636081+02:00 web wordpress(varhanykolin.cz)[4046062]: Immediately block connections from 213.128.70.19 ... show less	Brute-Force
🇺🇸 wordpresshosting.solutions	2026-06-19 09:52:33 (3 hours ago)	WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 213.128.70.19 - - [19/Jun/2026: ... show more WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 213.128.70.19 - - [19/Jun/2026:09:52:06 +0000] "GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug,name,link,roles HTTP/1.1" 401 4849 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 213.128.70.19 - - [19/Jun/2026:09:52:32 +0000] "GET /wp-json/wp/v2/users/6?_fields=id,slug,roles HTTP/1.1" 404 4819 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-06-19 09:31:43 (3 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2026-06-19 08:57:03 (4 hours ago)	2026-06-19T10:57:02.351646+02:00 aion wordpress[152401]: Blocked user enumeration attempt from 213.1 ... show more 2026-06-19T10:57:02.351646+02:00 aion wordpress[152401]: Blocked user enumeration attempt from 213.128.70.19 ... show less	Hacking Brute-Force
🇫🇮 6kilowatti	2026-06-19 08:45:31 (4 hours ago)	213.128.70.19 - - [19/Jun/2026:11:45:30 +0300] "GET /api/graphql?password-protected=login&redirect_t ... show more 213.128.70.19 - - [19/Jun/2026:11:45:30 +0300] "GET /api/graphql?password-protected=login&redirect_to=https%3A%2F%2Flvi-viitala.6kw.fi%2Fapi%2Fgraphql HTTP/1.1" 404 1573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇦 SoteriaCovenant	2026-06-19 08:26:43 (4 hours ago)	Automated probe: /wp-json/wp/v2/posts on Soteria Global infrastructure. No vulnerable software prese ... show more Automated probe: /wp-json/wp/v2/posts on Soteria Global infrastructure. No vulnerable software present. show less	Web App Attack
🇬🇧 spamverify.com	2026-06-19 08:12:10 (5 hours ago)	Honeypot Hit: WordPress Users	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 CBJ	2026-06-19 07:23:21 (6 hours ago)	fail2ban: apache-random-recon ...	Web App Attack
🇺🇸 CollideTech	2026-06-19 07:17:02 (6 hours ago)	probing for vulnerabilities	Web App Attack
Anonymous	2026-06-19 07:06:16 (6 hours ago)	Authentication failure	Brute-Force
🇧🇷 Halux	2026-06-19 06:59:32 (6 hours ago)	213.128.70.19 Web Application Firewall multiple violations	Hacking Web App Attack
🇮🇹 VHosting	2026-06-19 05:55:03 (7 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TAY	2026-06-19 05:24:56 (8 hours ago)	213.128.70.19 - - [19/Jun/2026:13:20:47 +0800] "POST /wp-login.php HTTP/1.1" 200 2487 "https://mail. ... show more 213.128.70.19 - - [19/Jun/2026:13:20:47 +0800] "POST /wp-login.php HTTP/1.1" 200 2487 "https://mail.liquidssmith.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 213.128.70.19 - - [19/Jun/2026:13:23:11 +0800] "POST /wp-login.php HTTP/1.1" 200 2750 "https://kacsb.com/wp-login.php" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 213.128.70.19 - - [19/Jun/2026:13:24:56 +0800] "POST /wp-login.php HTTP/1.1" 200 2487 "https://liquidssmith.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Brute-Force
🇺🇸 Mundo Bueno	2026-06-19 05:11:02 (8 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me \| Pays: TR \| UA: Mozilla/5.0 (Ma ... show more [ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/me \| Pays: TR \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0. show less	Hacking Web App Attack

Showing 1 to 15 of 333 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 2400:cb00:1030:1000:ed81:97e6:51e4:8cd8

🇷🇺 149.255.1.35

🇺🇸 44.220.188.201

🇬🇧 35.203.210.150

🇧🇪 35.195.148.171

🇮🇷 5.234.18.104

🇨🇳 219.150.93.157

🇭🇰 199.45.154.184

🇬🇧 195.96.139.200

🇬🇧 185.247.137.163

🇵🇰 175.107.212.54

🇺🇸 162.216.150.39

🇸🇪 155.4.244.107

🇯🇵 104.234.140.36

🇹🇷 94.78.89.52

🇨🇳 61.184.21.201

🇫🇷 37.187.104.215

🇺🇸 20.65.194.80

🇰🇷 211.253.31.143

🇮🇳 182.95.115.194