JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.255.213.94

138.255.213.94 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 52%: ?

52%

ISP	VERO S.A
Usage Type	Fixed Line ISP
ASN	AS61844
Hostname(s)	94.213.255.138.in-addr.arpa.verointernet.com.br
Domain Name	verointernet.com.br
Country	🇧🇷 Brazil
City	Goiania, Goias

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.255.213.94

Whois 138.255.213.94

IP Abuse Reports for 138.255.213.94:

This IP address has been reported a total of 17 times from 14 distinct sources. 138.255.213.94 was first reported on July 27th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-12 09:06:08 (1 week ago)	[ssd5.kdns.gr] httpd-xmlrpc-post: sites=hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.log; sample ... show more [ssd5.kdns.gr] httpd-xmlrpc-post: sites=hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2026-06-12 05:27:41 (1 week ago)	138.255.213.94 - - [12/Jun/2026:07:27:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by ... show more 138.255.213.94 - - [12/Jun/2026:07:27:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 138.255.213.94 - - [12/Jun/2026:07:27:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 138.255.213.94 - - [12/Jun/2026:07:27:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" 138.255.213.94 - - [12/Jun/2026:07:27:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" 138.255.213.94 - - [12/Jun/2026:07:27:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇩🇪 konseptit	2026-06-12 03:14:30 (1 week ago)	(wordpress) Failed wordpress login from 138.255.213.94 (BR/Brazil/-)	Brute-Force
Anonymous	2026-06-12 02:24:24 (1 week ago)	Blocked by ModSec and CSF	Port Scan
🇺🇸 TPI-Abuse	2026-06-10 22:52:49 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 138.255.213.94 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 138.255.213.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 18:52:43.397487 2026] [security2:error] [pid 21639:tid 21639] [client 138.255.213.94:14547] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 138.255.213.94 (+1 hits since last alert)\|digitaldatatechnologies.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "digitaldatatechnologies.net"] [uri "/xmlrpc.php"] [unique_id "ainqu_RXSCDbn6bGh2uGdAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-10 00:49:53 (1 week ago)		Bad Web Bot Web App Attack
🇦🇺 clapper	2026-06-07 23:35:27 (1 week ago)	(mod_security) mod_security (id:350202) triggered by 138.255.213.94 (BR/Brazil/-): 5 in the last 600 ... show more (mod_security) mod_security (id:350202) triggered by 138.255.213.94 (BR/Brazil/-): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-06-06 23:52:57 (2 weeks ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇳🇱 debestelapp	2026-06-05 01:05:05 (2 weeks ago)		Web App Attack
🇫🇷 dynamix	2026-06-04 23:14:58 (2 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 konseptit	2026-06-04 05:29:27 (2 weeks ago)	(wordpress) Failed wordpress login from 138.255.213.94 (BR/Brazil/-)	Brute-Force
Anonymous	2026-06-03 06:08:19 (2 weeks ago)	138.255.213.94 - - [03/Jun/2026:08:07:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.c ... show more 138.255.213.94 - - [03/Jun/2026:08:07:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" 138.255.213.94 - - [03/Jun/2026:08:07:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" 138.255.213.94 - - [03/Jun/2026:08:08:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 138.255.213.94 - - [03/Jun/2026:08:08:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 138.255.213.94 - - [03/Jun/2026:08:08:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
Anonymous	2026-06-01 03:25:11 (2 weeks ago)	[redacted] 138.255.213.94 - - [01/Jun/2026:05:24:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" " ... show more [redacted] 138.255.213.94 - - [01/Jun/2026:05:24:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 138.255.213.94 - - [01/Jun/2026:05:24:38 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com" [redacted] 138.255.213.94 - - [01/Jun/2026:05:24:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com" [redacted] 138.255.213.94 - - [01/Jun/2026:05:24:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "WordPress.com; https://wordpress.com" [redacted] 138.255.213.94 - - [01/Jun/2026:05:25:10 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack/12.5; WordPress/6.3; http://site30910669.com" ... show less	Hacking Web App Attack
Anonymous	2025-11-19 10:06:56 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇺🇸 Zandro	2025-08-19 16:54:03 (10 months ago)	distributed harvester randomizing useragent	Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 194.5.82.117

🇧🇷 185.194.204.183

🇫🇮 147.185.133.188

🇺🇸 135.233.112.24

🇳🇱 91.92.40.29

🇪🇬 41.46.14.230

🇹🇷 38.3.137.66

🇳🇱 5.61.209.43

🇺🇸 2607:f8b0:4004:c07::123

🇯🇵 219.164.210.169

🇳🇱 185.93.89.167

🇺🇸 150.107.38.181

🇺🇸 66.132.195.30

🇺🇸 45.92.229.195

🇨🇴 152.200.205.179

🇭🇰 152.32.254.89

🇨🇳 113.108.13.168

🇹🇼 110.25.88.184

🇲🇦 81.192.46.45

🇯🇵 14.137.237.192