This IP address has been reported a total of
11
times from
9 distinct
sources.
213.232.121.219 was first reported on
September 29th 2024 , and the most recent report was
58 minutes ago Germany
with 1
report;
Mexico
with 1
report.
The only category in these recent reports was:
Web App Attack
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇲🇽
octageeks.com
2026-10-04 04:10:58
(58 minutes ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇩🇪
stinpriza
2026-09-27 02:47:47
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 11:13:53
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.121.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.121.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 07:13:37.708589 2026] [security2:error] [pid 15611:tid 15611] [client 213.232.121.219:9461] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ibcnu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ibcnu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alTIYSC1ZWgaWeDXY4_aOwAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-25 18:09:01
(3 months ago)
Fail2Ban banned 213.232.121.219 for security violations in jail wp-armour. Log: 2026/06/25 18:09:01 ...
show more
Fail2Ban banned 213.232.121.219 for security violations in jail wp-armour. Log: 2026/06/25 18:09:01 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 213.232.121.219 | Target: wplogin" , client: 213.232.121.219, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
kosada.com
2026-06-24 20:30:54
(3 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2025-12-31 18:25:39
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.121.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.121.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 13:25:25.059317 2025] [security2:error] [pid 28386:tid 28386] [client 213.232.121.219:40509] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVVqlbioac7oklCU-xBARgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-31 16:24:55
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.121.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.121.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 11:24:41.874171 2025] [security2:error] [pid 32032:tid 32063] [client 213.232.121.219:64435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||giere.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "giere.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVVOSc0lLnjpqydeU1gpgAAAAxc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 13:06:14
(9 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-12-28 07:54:26
(9 months ago)
Attempted WordPress login:
213.232.121.219 - - [28/Dec/2025:07:54:26 +0000] "GET /wp-login.php HTTP ...
show more
Attempted WordPress login:
213.232.121.219 - - [28/Dec/2025:07:54:26 +0000] "GET /wp-login.php HTTP/1.1" 200 234 "http://[sub domain]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
show less
Hacking
Web App Attack
🇩🇪
ManagedStack
2025-12-28 06:40:37
(9 months ago)
Wordpress Attack
Web App Attack
🇷🇺
sms.ru
2024-09-29 11:55:06
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
Showing 1 to
11
of 11 reports
