JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.32.76.13

212.32.76.13 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Osaka, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.32.76.13

Whois 212.32.76.13

IP Abuse Reports for 212.32.76.13:

This IP address has been reported a total of 137 times from 67 distinct sources. 212.32.76.13 was first reported on July 19th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-06-18 00:31:39 (13 hours ago)	212.32.76.13 - - [18/Jun/2026:03:31:33 +0300] "GET /wp-content/users.php HTTP/1.1" 404 713 "-" "Mozi ... show more 212.32.76.13 - - [18/Jun/2026:03:31:33 +0300] "GET /wp-content/users.php HTTP/1.1" 404 713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
Anonymous	2026-06-17 22:45:54 (15 hours ago)	Banned by Fail2Ban on server	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-17 21:14:52 (16 hours ago)	212.32.76.13 - - [18/Jun/2026:00:14:48 +0300] "GET /wp-content/users.php HTTP/1.1" 404 707 "-" "Mozi ... show more 212.32.76.13 - - [18/Jun/2026:00:14:48 +0300] "GET /wp-content/users.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.32.76.13 - - [18/Jun/2026:00:14:49 +0300] "GET /wp-content/wp-activate.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
🇦🇺 2000cn.com.au	2026-06-17 18:31:22 (19 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
🇬🇷 setupgr	2026-06-16 08:23:55 (2 days ago)	(mod_security) mod_security (id:1000001) triggered by 212.32.76.13: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:1000001) triggered by 212.32.76.13: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 11:23:50.676978 2026] [security2:error] [pid 2210294:tid 2210407] [client 212.32.76.13:53165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /wp-includes/images/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.cpanagiotou.gr"] [uri "/wp-includes/images/wp-load.php"] [unique_id "ajEIFrhY-m9nTIYxKGR5RgAAAYw"] show less	Port Scan
🇩🇪 LRob.fr	2026-06-16 07:30:29 (2 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-06-16 06:01:10 (2 days ago)	212.32.76.13 - - [16/Jun/2026:09:01:09 +0300] "GET /wp-admin/ HTTP/1.1" 404 708 "-" "Go-http-client/ ... show more 212.32.76.13 - - [16/Jun/2026:09:01:09 +0300] "GET /wp-admin/ HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-16 04:23:49 (2 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-06-16 00:37:40 (2 days ago)	212.32.76.13 - - [16/Jun/2026:03:37:38 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json ... show more 212.32.76.13 - - [16/Jun/2026:03:37:38 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.32.76.13 - - [16/Jun/2026:03:37:40 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
🇩🇪 4server	2026-06-15 23:06:55 (2 days ago)	[TueJun1601:06:50.0405392026][security2:error][pid853340:tid853344][client212.32.76.13:0]ModSecurity ... show more [TueJun1601:06:50.0405392026][security2:error][pid853340:tid853344][client212.32.76.13:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx/index\\\\\\\\.php\$\"against\"REQUEST_FILENAME\"required.[file\"/etc/apache2/conf.d/modsec_rules/51_asl_wordpress_extra.conf\"][line\"33\"][id\"333149\"][rev\"21\"][msg\"Atomicorp.comWAFRules:PossiblePHPwebshelldetectedandblocked\"][severity\"CRITICAL\"][hostname\"mail.giuseppeasaro.com\"][uri\"/wp-content/uploads/config.php\"][unique_id\"ajCFitT-hH2C0VthhJdzigAAAQE\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Lino Project	2026-06-15 21:58:08 (2 days ago)	212.32.76.13 - - [15/Jun/2026:23:58:02 +0200] "GET /admin.php HTTP/2.0" 404 50039 "http://millelibri ... show more 212.32.76.13 - - [15/Jun/2026:23:58:02 +0200] "GET /admin.php HTTP/2.0" 404 50039 "http://millelibriperbambini.it/admin.php" "Go-http-client/2.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇬🇷 setupgr	2026-06-15 19:59:43 (2 days ago)	(mod_security) mod_security (id:1000001) triggered by 212.32.76.13: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:1000001) triggered by 212.32.76.13: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 22:59:39.097963 2026] [security2:error] [pid 1965768:tid 1965817] [client 212.32.76.13:38257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /wp-includes/js/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.doityourself.gr"] [uri "/wp-includes/js/wp-load.php"] [unique_id "ajBZq5hSggell5vQAURPoQAAAVY"] show less	Port Scan
🇬🇷 setupgr	2026-06-15 12:07:44 (3 days ago)	(mod_security) mod_security (id:1000001) triggered by 212.32.76.13: 1 in the last 86400 secs; Ports: ... show more (mod_security) mod_security (id:1000001) triggered by 212.32.76.13: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 15:07:39.795381 2026] [security2:error] [pid 1709592:tid 1709631] [client 212.32.76.13:45073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /wp-content/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.ftiaxtomonosou.gr"] [uri "/wp-content/wp-load.php"] [unique_id "ai_rC6WBS8mxmEE23cCcTwAAAQo"] show less	Port Scan
Anonymous	2026-06-15 10:12:13 (3 days ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 masterguru	2026-06-15 09:35:24 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.187.180.215

🇱🇦 115.84.92.45

🇩🇪 69.5.169.229

🇨🇳 180.76.53.175

🇺🇸 174.107.37.133

🇺🇸 162.216.150.67

🇧🇷 128.201.223.212

🇷🇺 95.220.41.250

🇩🇪 91.64.220.14

🇩🇪 69.5.169.16

🇺🇸 65.49.1.156

🇰🇷 59.6.41.4

🇸🇬 43.98.190.82

🇷🇺 213.33.182.183

🇸🇬 212.73.148.12

🇳🇱 209.38.32.203

🇺🇦 194.44.90.114

🇳🇱 176.65.139.238

🇳🇱 176.65.139.231

🇺🇸 147.185.132.41