JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.242.242.213

109.242.242.213 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 90%: ?

90%

ISP	NOVA S.A.
Usage Type	Fixed Line ISP
ASN	AS25472
Hostname(s)	adsl-213.109.242.242.tellas.gr
Domain Name	nova.gr
Country	🇬🇷 Greece
City	Nikaia, Attica

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.242.242.213

Whois 109.242.242.213

IP Abuse Reports for 109.242.242.213:

This IP address has been reported a total of 29 times from 18 distinct sources. 109.242.242.213 was first reported on June 30th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-07 23:03:01 (3 days ago)	2.061 requests from abuseipdb.com blacklisted IP (1yr4mos6d)	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-07 21:48:58 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr ... show more (mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 17:48:55.921070 2026] [security2:error] [pid 18389:tid 18389] [client 109.242.242.213:34913] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.242.242.213 (+1 hits since last alert)\|femalegamblers.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "femalegamblers.org"] [uri "/xmlrpc.php"] [unique_id "ak10R3X7FZy0vaW8CzGT6gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-07 21:46:48 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 19:40:00 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr ... show more (mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 15:39:56.476005 2026] [security2:error] [pid 9271:tid 9271] [client 109.242.242.213:52748] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.242.242.213 (+1 hits since last alert)\|ardath.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ardath.net"] [uri "/xmlrpc.php"] [unique_id "akwEjLf5ICs0wWLvpKMyCAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-06 18:43:18 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 neckaralb-admin.de	2026-07-06 18:07:47 (4 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 dbmwebdesign	2026-07-05 19:35:11 (5 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 14:57:18 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr ... show more (mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 10:57:15.393547 2026] [security2:error] [pid 5537:tid 5537] [client 109.242.242.213:50482] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.242.242.213 (+1 hits since last alert)\|vintageamptubes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vintageamptubes.com"] [uri "/xmlrpc.php"] [unique_id "akpwy7v8oYReGCt5ow9P8QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 12:30:40 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr ... show more (mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 08:30:37.232490 2026] [security2:error] [pid 5031:tid 5031] [client 109.242.242.213:55885] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.242.242.213 (+1 hits since last alert)\|feiz.church\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "feiz.church"] [uri "/xmlrpc.php"] [unique_id "akpObSKjHzRtZQ4QsD-NLgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 12:03:49 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr ... show more (mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 08:03:44.123602 2026] [security2:error] [pid 13903:tid 13903] [client 109.242.242.213:56205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.242.242.213 (+1 hits since last alert)\|bennoyes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bennoyes.com"] [uri "/xmlrpc.php"] [unique_id "akpIIL171Sb6nscQHA_Z2QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 10:15:15 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr ... show more (mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 06:15:01.595853 2026] [security2:error] [pid 28268:tid 28268] [client 109.242.242.213:8201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.242.242.213 (+1 hits since last alert)\|jennyfiore.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jennyfiore.com"] [uri "/xmlrpc.php"] [unique_id "akoupS8BcB3FCkdb4VfjIwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 01:58:46 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr ... show more (mod_security) mod_security (id:240335) triggered by 109.242.242.213 (adsl-213.109.242.242.tellas.gr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 21:58:41.081132 2026] [security2:error] [pid 29006:tid 29006] [client 109.242.242.213:61156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 109.242.242.213 (+1 hits since last alert)\|techsunlimited.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "techsunlimited.net"] [uri "/xmlrpc.php"] [unique_id "akm6UcB8i6Qv4x69dQ8CowAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-07-04 22:01:14 (6 days ago)	POST /xmlrpc.php [04/Jul/2026:10:31:02	Web App Attack Brute-Force
🇺🇸 TAY	2026-07-04 19:05:15 (6 days ago)	109.242.242.213 - - [05/Jul/2026:03:04:54 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Jetpack b ... show more 109.242.242.213 - - [05/Jul/2026:03:04:54 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" 109.242.242.213 - - [05/Jul/2026:03:05:04 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Jetpack by WordPress.com" 109.242.242.213 - - [05/Jul/2026:03:05:15 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force
🇩🇪 rh24	2026-07-04 10:06:08 (1 week ago)	(xmlrpc_405) XMLRPC-Bot 405 109.242.242.213 (GR/Greece/adsl-213.109.242.242.tellas.gr)	Hacking

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2603:3:6101:3ee0::

🇬🇧 185.195.232.177

🇺🇸 162.216.150.36

🇮🇳 103.76.252.154

🇺🇸 100.49.117.77

🇳🇱 91.108.9.213

🇸🇻 190.120.6.177

🇨🇳 183.151.203.189

🇮🇳 182.95.12.178

🇮🇩 180.249.96.176

🇨🇳 120.26.56.197

🇳🇱 91.92.40.8

🇮🇷 37.148.117.78

🇨🇳 27.128.162.146

🇺🇸 2a09:bac1:76c0:460::5e:5e

🇨🇳 218.57.56.118

🇧🇷 177.53.247.76

🇫🇷 145.239.10.137

🇵🇰 139.135.42.179

🇳🇱 72.56.99.233