JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.76.58.97

213.76.58.97 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 87%: ?

87%

ISP	Orange Polska Spolka Akcyjna
Usage Type	Fixed Line ISP
ASN	AS5617
Hostname(s)	213.76.58.97.ipv4.supernova.orange.pl
Domain Name	orange.com
Country	🇵🇱 Poland
City	Poznan, Greater Poland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.76.58.97

Whois 213.76.58.97

IP Abuse Reports for 213.76.58.97:

This IP address has been reported a total of 29 times from 15 distinct sources. 213.76.58.97 was first reported on June 26th 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 05:08:05 (11 minutes ago)	(mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orang ... show more (mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 01:07:57.638091 2026] [security2:error] [pid 17481:tid 17481] [client 213.76.58.97:50670] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 213.76.58.97 (+1 hits since last alert)\|shannonraevocalstudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "shannonraevocalstudio.com"] [uri "/xmlrpc.php"] [unique_id "akdDrWt3GbkeGWiDFaoqJQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-03 04:31:45 (47 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 02:31:15 (2 hours ago)	(mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orang ... show more (mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:31:08.154661 2026] [security2:error] [pid 3565:tid 3565] [client 213.76.58.97:63782] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 213.76.58.97 (+1 hits since last alert)\|thebrotherhoodlounge.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thebrotherhoodlounge.com"] [uri "/xmlrpc.php"] [unique_id "akce7Bz3qnTtQKNzrS6_lAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-07-02 23:10:07 (6 hours ago)		Web App Attack
Anonymous	2026-07-02 22:06:05 (7 hours ago)	Trying to access config files	Web App Attack
🇩🇪 rh24	2026-07-02 21:52:33 (7 hours ago)	(wordpress) Failed wordpress login from 213.76.58.97 (PL/Poland/213.76.58.97.ipv4.supernova.orange.p ... show more (wordpress) Failed wordpress login from 213.76.58.97 (PL/Poland/213.76.58.97.ipv4.supernova.orange.pl): (CF_ENABLE) show less	Brute-Force
🇬🇧 Steve	2026-07-02 20:39:42 (8 hours ago)	Abuse of XMLRPC	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 02:13:03 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orang ... show more (mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 22:12:56.554594 2026] [security2:error] [pid 22448:tid 22448] [client 213.76.58.97:51118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 213.76.58.97 (+1 hits since last alert)\|margroberts.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "margroberts.com"] [uri "/xmlrpc.php"] [unique_id "akXJKFwwyk_-psH3kjb_UgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-02 02:11:28 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇲🇾 Rizzy	2026-07-02 01:18:34 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 23:48:35 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orang ... show more (mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 19:48:30.382311 2026] [security2:error] [pid 31664:tid 31705] [client 213.76.58.97:56924] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 213.76.58.97 (+1 hits since last alert)\|hooknpatch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hooknpatch.com"] [uri "/xmlrpc.php"] [unique_id "akWnTngjfdiXUEg29KhxCwAAAIo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 21:15:00 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orang ... show more (mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 17:14:53.511112 2026] [security2:error] [pid 4258:tid 4258] [client 213.76.58.97:64820] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 213.76.58.97 (+1 hits since last alert)\|ideaofauniversity.website\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ideaofauniversity.website"] [uri "/xmlrpc.php"] [unique_id "akWDTbmPc6TwJmEOHJ9ffwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-07-01 20:10:36 (1 day ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 04:55:29 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orang ... show more (mod_security) mod_security (id:240335) triggered by 213.76.58.97 (213.76.58.97.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 00:55:26.355916 2026] [security2:error] [pid 25235:tid 25235] [client 213.76.58.97:59366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 213.76.58.97 (+1 hits since last alert)\|lighthousescm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lighthousescm.com"] [uri "/xmlrpc.php"] [unique_id "akSdvibOV8rlHPQXCYvjMQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marc	2026-07-01 01:33:10 (2 days ago)	213.76.58.97 - - [01/Jul/2026:03:32:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3467 "-" "Jetpack by W ... show more 213.76.58.97 - - [01/Jul/2026:03:32:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3467 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" 213.76.58.97 - - [01/Jul/2026:03:32:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3465 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 213.76.58.97 - - [01/Jul/2026:03:33:09 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3466 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" show less	Brute-Force Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 143.42.1.44

🇺🇸 142.111.152.175

🇺🇸 91.230.168.251

🇱🇹 62.60.130.219

🇳🇱 195.178.110.227

🇳🇱 185.223.235.41

🇦🇺 170.64.135.251

🇨🇳 120.230.105.176

🇳🇱 45.148.10.152

🇳🇱 45.95.147.229

🇺🇸 45.43.57.112

🇨🇦 38.108.83.2

🇺🇸 20.65.192.207

🇺🇸 13.217.181.212

🇵🇱 194.180.49.108

🇫🇷 146.59.183.16

🇮🇳 122.183.33.206

🇺🇸 104.28.219.190

🇹🇼 101.12.125.36

🇳🇱 81.19.216.91