JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.35.122.246

213.35.122.246 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Svenska AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.35.122.246

Whois 213.35.122.246

IP Abuse Reports for 213.35.122.246:

This IP address has been reported a total of 31 times from 24 distinct sources. 213.35.122.246 was first reported on July 8th 2026, and the most recent report was 20 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 LRob	2026-07-10 05:41:03 (20 minutes ago)	CrowdSec: crowdsecurity/http-wordpress_user-enum \| req: ["/?author=1","/?author=2","/?author=3","/?a ... show more CrowdSec: crowdsecurity/http-wordpress_user-enum \| req: ["/?author=1","/?author=2","/?author=3","/?author=4","/?author=5","/?author=6"] \| UA: ["Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Ge show less	Web App Attack
🇷🇴 INTEQ	2026-07-10 03:29:29 (2 hours ago)	Web attack from 213.35.122.246	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 23:04:08 (6 hours ago)	(mod_security) mod_security (id:225170) triggered by 213.35.122.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 213.35.122.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 19:04:01.866041 2026] [security2:error] [pid 1786862:tid 1786862] [client 213.35.122.246:58007] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mrccertification.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mrccertification.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alAo4ees-yyR0tI6K2BM3gAAAAc"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-09 22:28:48 (7 hours ago)		Brute-Force Web App Attack
Anonymous	2026-07-09 21:26:20 (8 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 LRob	2026-07-09 20:49:32 (9 hours ago)	CrowdSec: crowdsecurity/http-wordpress_user-enum \| req: ["/?author=1","/?author=2","/?author=3","/?a ... show more CrowdSec: crowdsecurity/http-wordpress_user-enum \| req: ["/?author=1","/?author=2","/?author=3","/?author=4","/?author=5","/?author=6"] \| UA: ["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Inte show less	Web App Attack
🇫🇷 LRob	2026-07-09 18:37:20 (11 hours ago)	CrowdSec: crowdsecurity/http-wordpress_user-enum \| req: ["/?author=1","/?author=2","/?author=3","/?a ... show more CrowdSec: crowdsecurity/http-wordpress_user-enum \| req: ["/?author=1","/?author=2","/?author=3","/?author=4","/?author=5","/?author=6"] \| UA: ["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15","Mozilla/5.0 (X11; Linux x86_ show less	Web App Attack
🇲🇾 Rizzy	2026-07-09 18:29:16 (11 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇷🇺 DZBOT	2026-07-09 15:57:56 (14 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇳🇱 wlt-blocker	2026-07-09 14:32:43 (15 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇵🇱 lns.bz	2026-07-09 13:22:58 (16 hours ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇳🇱 ConsulHosting	2026-07-09 12:11:26 (17 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇨🇭 zynex	2026-07-09 10:51:42 (19 hours ago)	URL Probing: /wp-login.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 08:49:04 (21 hours ago)	(mod_security) mod_security (id:225170) triggered by 213.35.122.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 213.35.122.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:48:55.738115 2026] [security2:error] [pid 14176:tid 14176] [client 213.35.122.246:52291] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mccompu.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mccompu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ak9gd7ffeGZ_0vfLVZUAWwAAABA"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 bittiguru.fi	2026-07-09 08:00:22 (22 hours ago)	213.35.122.246 - [09/Jul/2026:10:59:34 +0300] "POST /wp-login.php HTTP/1.1" 404 24899 "https://oku.f ... show more 213.35.122.246 - [09/Jul/2026:10:59:34 +0300] "POST /wp-login.php HTTP/1.1" 404 24899 "https://oku.fi/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "4.53" 213.35.122.246 - [09/Jul/2026:10:59:46 +0300] "POST /wp-login.php HTTP/1.1" 404 24899 "https://oku.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "4.53" 213.35.122.246 - [09/Jul/2026:10:59:58 +0300] "POST /wp-login.php HTTP/1.1" 404 24899 "https://oku.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "4.53" 213.35.122.246 - [09/Jul/2026:11:00:10 +0300] "POST /wp-login.php HTTP/1.1" 404 24899 "https://oku.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "4.53" 213.35.122.246 - [09/Jul/2026:11:00:21 +0300] "POST /wp-login.php HTTP/1.1" 404 24899 "https://oku.fi/wp-login. ... show less	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.132.24

🇵🇪 161.132.47.68

🇩🇪 157.230.107.97

🇫🇷 157.173.106.113

🇮🇳 122.187.174.78

🇮🇳 122.185.146.166

🇮🇳 103.69.218.250

🇧🇬 78.128.113.74

🇳🇱 45.156.87.254

🇳🇱 31.56.184.110

🇰🇷 220.93.167.144

🇺🇸 216.25.89.108

🇰🇷 211.199.254.87

🇩🇪 194.164.201.92

🇧🇬 193.24.211.107

🇲🇽 187.249.130.197

🇧🇷 179.189.85.66

🇨🇳 175.30.48.183

🇮🇳 172.83.83.194

🇨🇦 143.110.220.90