JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.204.244.110

213.204.244.110

Neutral Activity

215 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Aktiebolaget Sappa

Usage Type

Fixed Line ISP

ASN

AS35790

Hostname(s)

213-204-244-110.clients.sappa.info

Domain Name

sappa.se

Country

🇸🇪 Sweden

City

Boden, Norrbotten

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

213.204.244.110 has been reported 215 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 213.204.244.110:

This IP address has been reported a total of 215 times from 79 distinct sources. 213.204.244.110 was first reported on June 26th 2025, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-04-18 11:24:00 (4 months ago)	(wordpress) Failed wordpress login from 213.204.244.110 (SE/Sweden/Västerbotten County/Umeå/213-204- ... show more (wordpress) Failed wordpress login from 213.204.244.110 (SE/Sweden/Västerbotten County/Umeå/213-204-244-110.clients.sappa.info) show less	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-18 20:11:38 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2026-02-16 15:43:51 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 213.204.244.110 (213-204-244-110.clients.sappa. ... show more (mod_security) mod_security (id:225170) triggered by 213.204.244.110 (213-204-244-110.clients.sappa.info): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 10:43:47.628376 2026] [security2:error] [pid 26575:tid 26581] [client 213.204.244.110:8007] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|abusaimeh.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abusaimeh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZM7MyWCUCIhaUjBr7C0SgAAAEM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-14 19:57:38 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 213.204.244.110 (213-204-244-110.clients.sappa. ... show more (mod_security) mod_security (id:225170) triggered by 213.204.244.110 (213-204-244-110.clients.sappa.info): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 14:57:35.079765 2026] [security2:error] [pid 2026:tid 2026] [client 213.204.244.110:14215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|takeapawsboston.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "takeapawsboston.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZDTr1U47Cj22-uAH59p4QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-14 19:17:20 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 213.204.244.110 (213-204-244-110.clients.sappa. ... show more (mod_security) mod_security (id:225170) triggered by 213.204.244.110 (213-204-244-110.clients.sappa.info): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 14:17:13.050600 2026] [security2:error] [pid 19267:tid 19267] [client 213.204.244.110:9533] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|stukabird.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stukabird.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZDKOUtzRO74pFEpjMxeOgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2026-02-14 17:16:01 (6 months ago)	213.204.244.110 - - [14/Feb/2026:18:16:01 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 213.204.244.110 - - [14/Feb/2026:18:16:01 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-11 11:00:24 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 213.204.244.110 (213-204-244-110.clients.sappa. ... show more (mod_security) mod_security (id:225170) triggered by 213.204.244.110 (213-204-244-110.clients.sappa.info): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 06:00:16.321192 2026] [security2:error] [pid 5203:tid 5203] [client 213.204.244.110:59591] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|karenbernsteinlaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "karenbernsteinlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYxhQKJr7qw_70XpiBMkTAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-02-10 07:55:53 (6 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC NL/Netherlands/213-204-244-110.clients.sappa.info	Web App Attack
Anonymous	2025-12-15 20:21:54 (8 months ago)		Web Spam Bad Web Bot
🇩🇪 Hazzard	2025-12-02 01:10:55 (9 months ago)	(wordpress) Failed wordpress login from 213.204.244.110 (SE/Sweden/Norrbotten County/Boden/213-204-2 ... show more (wordpress) Failed wordpress login from 213.204.244.110 (SE/Sweden/Norrbotten County/Boden/213-204-244-110.clients.sappa.info/[redacted]) show less	Brute-Force
🇹🇷 rtbh.com.tr	2025-11-29 20:10:11 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 octageeks.com	2025-11-29 05:08:22 (9 months ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
Anonymous	2025-11-28 21:35:28 (9 months ago)		Web App Attack
🇫🇷 applemooz	2025-11-28 16:23:35 (9 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇩🇪 LRob	2025-11-28 14:52:16 (9 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack

Showing 1 to 15 of 215 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.48.36.47

🇬🇧 35.203.210.58

🇺🇸 2607:f8b0:400c:c03::122

🇺🇸 2602:80d:1008::8c

🇳🇱 206.189.108.132

🇲🇻 202.153.81.157

🇷🇴 193.46.255.86

🇸🇬 148.66.142.9

🇮🇷 86.104.244.228

🇱🇹 62.60.130.253

🇫🇷 51.38.225.77

🇭🇰 36.255.220.145

🇬🇧 35.203.210.79

🇺🇸 34.106.109.247

🇮🇳 171.61.168.61

🇧🇬 109.160.32.38

🇪🇸 95.61.242.232

🇳🇱 89.222.112.103

🇺🇸 20.29.27.242

🇳🇱 203.55.131.4