JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.6.232.254

213.6.232.254

Neutral Activity

93 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Palestine Telecommunications Company (PALTEL)

Usage Type

Fixed Line ISP

ASN

AS12975

Domain Name

paltelgroup.ps

Country

🇵🇸 Palestine, State of

City

Nablus, West Bank

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

213.6.232.254 has been reported 93 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 213.6.232.254:

This IP address has been reported a total of 93 times from 34 distinct sources. 213.6.232.254 was first reported on September 7th 2021, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2024-12-29 13:02:24 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇪🇸 el-brujo	2024-12-09 08:43:30 (1 year ago)	[Mon Dec 09 09:43:29.777320 2024] [proxy_fcgi:error] [pid 596650:tid 596741] [client 213.6.232.254:5 ... show more [Mon Dec 09 09:43:29.777320 2024] [proxy_fcgi:error] [pid 596650:tid 596741] [client 213.6.232.254:53867] AH01071: Got error 'Primary script unknown' [Mon Dec 09 09:43:29.940822 2024] [proxy_fcgi:error] [pid 596512:tid 596614] [client 213.6.232.254:53868] AH01071: Got error 'Primary script unknown' ... show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2024-11-26 07:26:30 (1 year ago)	213.6.232.254 - - [26/Nov/2024:09:26:29 +0200] "GET /wp-login.php HTTP/1.1" 404 2624 "-" "Mozilla/5. ... show more 213.6.232.254 - - [26/Nov/2024:09:26:29 +0200] "GET /wp-login.php HTTP/1.1" 404 2624 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 213.6.232.254 - - [26/Nov/2024:09:26:29 +0200] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
Anonymous	2024-11-13 11:06:10 (1 year ago)	Fail2Ban - Nginx Bot Probes	Web App Attack
🇦🇺 MAGIC	2024-11-11 13:00:11 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-11-05 11:47:02 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2024-10-29 08:02:42 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-10-20 12:32:35 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 213.6.232.254 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 213.6.232.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 20 08:32:26.689325 2024] [security2:error] [pid 7421:tid 7421] [client 213.6.232.254:59521] [client 213.6.232.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.quickasawink.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.quickasawink.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZxT4WhbbNc5XBlwuVzycdAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2024-10-08 12:46:57 (1 year ago)	213.6.232.254 - - [08/Oct/2024:15:46:56 +0300] "GET /wp-login.php HTTP/1.1" 404 2631 "-" "Mozilla/5. ... show more 213.6.232.254 - - [08/Oct/2024:15:46:56 +0300] "GET /wp-login.php HTTP/1.1" 404 2631 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 213.6.232.254 - - [08/Oct/2024:15:46:56 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2024-10-06 06:22:36 (1 year ago)	213.6.232.254 - - [06/Oct/2024:09:22:34 +0300] "GET /wp-login.php HTTP/1.1" 404 2624 "-" "Mozilla/5. ... show more 213.6.232.254 - - [06/Oct/2024:09:22:34 +0300] "GET /wp-login.php HTTP/1.1" 404 2624 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 213.6.232.254 - - [06/Oct/2024:09:22:35 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2024-10-01 12:51:52 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 213.6.232.254 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 213.6.232.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 01 08:51:46.622035 2024] [security2:error] [pid 3644:tid 3713] [client 213.6.232.254:50295] [client 213.6.232.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.killasgarage.bike\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.killasgarage.bike"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZvvwYgAOX90pH6wUNjVm7QAAAYU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2024-09-29 11:25:04 (1 year ago)	Wordpress login scanning	Brute-Force Web App Attack
🇮🇹 RV	2024-08-08 23:57:00 (2 years ago)	brute WP	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-07-02 09:01:27 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 213.6.232.254 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 213.6.232.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 02 05:01:06.242265 2024] [security2:error] [pid 25036] [client 213.6.232.254:50504] [client 213.6.232.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.newdirectionsinmusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.newdirectionsinmusic.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZoPB0r6gq6IpvbRPd2lBfAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2024-06-27 10:10:02 (2 years ago)	213.6.232.254 - - [27/Jun/2024:13:10:00 +0300] "GET /wp-login.php HTTP/1.1" 404 2971 "-" "Mozilla/5. ... show more 213.6.232.254 - - [27/Jun/2024:13:10:00 +0300] "GET /wp-login.php HTTP/1.1" 404 2971 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 213.6.232.254 - - [27/Jun/2024:13:10:01 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 195.142.175.196

🇺🇸 104.152.52.145

🇮🇩 103.132.52.46

🇺🇸 65.49.1.56

🇺🇸 170.101.96.57

🇺🇸 104.152.52.127

🇨🇱 38.7.194.96

🇨🇦 34.152.14.204

🇺🇸 34.23.212.147

🇺🇸 216.25.89.140

🇳🇱 213.177.179.144

🇨🇱 201.94.150.106

🇦🇷 200.59.72.86

🇳🇱 195.178.110.26

🇺🇸 172.253.217.58

🇺🇸 172.191.239.155

🇮🇳 122.168.123.73

🇮🇪 108.131.56.186

🇳🇬 102.90.81.170

🇺🇦 46.201.14.8