AbuseIPDB » 213.24.135.4
213.24.135.4
This IP was reported 5 times. Confidence of
Abuse
is 13% : ?
ISP
PJSC Rostelecom
Usage Type
Fixed Line ISP
ASN
AS12389
Domain Name
rt.ru
Country
๐ท๐บ
Russian Federation
City
Korolev, Moscow Oblast
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 213.24.135.4 :
This IP address has been reported a total of
5
times from
3 distinct
sources.
213.24.135.4 was first reported on
February 7th 2026 , and the most recent report was
50 minutes ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-10-22 12:13:28
(50 minutes ago)
(mod_security) mod_security (id:225170) triggered by 213.24.135.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 213.24.135.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 08:13:22.570188 2026] [security2:error] [pid 31977:tid 31977] [client 213.24.135.4:4642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||huntingforebears.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "huntingforebears.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atn94nQFb-0QsN_RFmOcLwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 08:21:51
(4 hours ago)
(mod_security) mod_security (id:225170) triggered by 213.24.135.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 213.24.135.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 04:21:43.598118 2026] [security2:error] [pid 7666:tid 7666] [client 213.24.135.4:3227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ciptaconindotara.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ciptaconindotara.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atnHl2wQ3YNaNPHwO7OExAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 03:02:19
(10 hours ago)
(mod_security) mod_security (id:225170) triggered by 213.24.135.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 213.24.135.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 23:02:13.551403 2026] [security2:error] [pid 21310:tid 21310] [client 213.24.135.4:3214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.oldsite.soudertonbigred.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.oldsite.soudertonbigred.org"] [uri "/wp-json/wp/v2/users"] [unique_id "atl8tcMu2GyZBGu_UN7K6gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-20 17:21:52
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ฎ๐น
Rosh
2026-02-07 12:34:45
(8 months ago)
[02/07/26 13:34:45] Unauthorized request HTTP/1.1 404 on port 80
Hacking
Web App Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: