JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 143.255.91.12

143.255.91.12 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 56%: ?

56%

ISP	PAULO ROGERIO VIEIRA PIRES & FILHO LTDA - ME
Usage Type	Fixed Line ISP
ASN	AS265164
Hostname(s)	143-255-91-12.i9net.tec.br
Domain Name	i9net.tec.br
Country	🇧🇷 Brazil
City	Sao Jorge d'Oeste, Parana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 143.255.91.12

Whois 143.255.91.12

IP Abuse Reports for 143.255.91.12:

This IP address has been reported a total of 20 times from 15 distinct sources. 143.255.91.12 was first reported on September 21st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-08-23 23:54:14 (1 day ago)	4.616 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-23 22:16:45 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 18:16:39.905402 2026] [security2:error] [pid 10387:tid 10387] [client 143.255.91.12:19818] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 143.255.91.12 (+1 hits since last alert)\|janyoors.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "janyoors.com"] [uri "/xmlrpc.php"] [unique_id "aotxR3WImdCWPOTsJEwhnAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-23 22:15:04 (1 day ago)	WordPress login brute-force \| path: /xmlrpc.php \| 2026-08-23 22:15 UTC	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-23 20:13:18 (1 day ago)	(xmlrpc) Apache: Failed xmlrpc access from 143.255.91.12 (BR/Brazil/143-255-91-12.i9net.tec.br): 10 ... show more (xmlrpc) Apache: Failed xmlrpc access from 143.255.91.12 (BR/Brazil/143-255-91-12.i9net.tec.br): 10 in the last 3600 secs (0-201) show less	Hacking
Anonymous	2026-08-23 19:00:07 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 16:58:38 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 12:58:34.031659 2026] [security2:error] [pid 20760:tid 20760] [client 143.255.91.12:20355] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 143.255.91.12 (+1 hits since last alert)\|modalguitarist.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "modalguitarist.com"] [uri "/xmlrpc.php"] [unique_id "aosmuvpjzYkeusT5uxDNqQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇬 HighWay	2026-08-23 16:25:29 (2 days ago)	143.255.91.12 - - [23/Aug/2026:16:25:06 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4734 "-" "Jetpack/13. ... show more 143.255.91.12 - - [23/Aug/2026:16:25:06 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4734 "-" "Jetpack/13.0; WordPress/6.3; http://site83572823.com" 143.255.91.12 - - [23/Aug/2026:16:25:16 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4734 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 143.255.91.12 - - [23/Aug/2026:16:25:27 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4735 "-" "Jetpack by WordPress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 15:16:45 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:16:39.911584 2026] [security2:error] [pid 12307:tid 12307] [client 143.255.91.12:17434] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 143.255.91.12 (+1 hits since last alert)\|danielbrower.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "danielbrower.com"] [uri "/xmlrpc.php"] [unique_id "aosO170GTGYQVVppNQKDUQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-29 07:00:00 (3 weeks ago)	Apache probe; attempts=48; exact paths: /xmlrpc.php	Web App Attack
Anonymous	2026-07-24 02:05:35 (1 month ago)	143.255.91.12 - - [24/Jul/2026:04:05:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 143.255.91.12 - - ... show more 143.255.91.12 - - [24/Jul/2026:04:05:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 143.255.91.12 - - [24/Jul/2026:04:05:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 ... show less	Brute-Force Bad Web Bot
Anonymous	2026-07-24 01:06:17 (1 month ago)	Fail2Ban WordPress login brute-force detected	Brute-Force Web App Attack
🇩🇪 konseptit	2026-07-24 01:05:53 (1 month ago)	(wordpress) Failed wordpress login from 143.255.91.12 (BR/Brazil/143-255-91-12.i9net.tec.br)	Brute-Force
🇺🇸 IndigoRidge	2026-07-23 00:29:25 (1 month ago)	143.255.91.12 - - [22/Jul/2026:20:27:07 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.c ... show more 143.255.91.12 - - [22/Jul/2026:20:27:07 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" 143.255.91.12 - - [22/Jul/2026:20:27:50 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" 143.255.91.12 - - [22/Jul/2026:20:29:04 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" 143.255.91.12 - - [22/Jul/2026:20:29:14 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" 143.255.91.12 - - [22/Jul/2026:20:29:25 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5768 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 00:28:15 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 20:28:11.030077 2026] [security2:error] [pid 2253985:tid 2253985] [client 143.255.91.12:25126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 143.255.91.12 (+1 hits since last alert)\|laura-stone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "laura-stone.com"] [uri "/xmlrpc.php"] [unique_id "amFgG5OyOPf0SGsoEe4McQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 23:29:35 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 143.255.91.12 (143-255-91-12.i9net.tec.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 19:29:29.472191 2026] [security2:error] [pid 2179269:tid 2179269] [client 143.255.91.12:23615] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 143.255.91.12 (+1 hits since last alert)\|onlinesuretybonds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "onlinesuretybonds.com"] [uri "/xmlrpc.php"] [unique_id "amFSWbDN0hfVFhq8znIo6AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.153.34.165

🇸🇦 37.121.119.153

🇨🇳 8.138.131.26

🇭🇰 199.45.154.189

🇧🇷 172.237.54.237

🇺🇸 137.184.98.30

🇬🇧 134.65.60.219

🇺🇸 128.85.113.133

🇹🇼 111.70.49.188

🇰🇪 102.219.210.106

🇺🇸 47.89.186.170

🇦🇷 45.165.46.27

🇮🇳 172.253.226.118

🇺🇸 148.153.56.174

🇺🇸 107.167.34.125

🇺🇸 64.23.221.136

🇸🇬 34.124.209.19

🇺🇸 212.119.47.79

🇳🇱 195.178.110.217

🇨🇴 108.174.156.122