JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 143.255.91.3

143.255.91.3 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 45%: ?

45%

ISP	PAULO ROGERIO VIEIRA PIRES & FILHO LTDA - ME
Usage Type	Fixed Line ISP
ASN	AS265164
Hostname(s)	143-255-91-3.i9net.tec.br
Domain Name	i9net.tec.br
Country	🇧🇷 Brazil
City	Sao Jorge d'Oeste, Parana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 143.255.91.3

Whois 143.255.91.3

IP Abuse Reports for 143.255.91.3:

This IP address has been reported a total of 14 times from 11 distinct sources. 143.255.91.3 was first reported on May 22nd 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-03 02:13:57 (9 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 20:43:29 (14 hours ago)	(mod_security) mod_security (id:240335) triggered by 143.255.91.3 (143-255-91-3.i9net.tec.br): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 143.255.91.3 (143-255-91-3.i9net.tec.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:43:22.536836 2026] [security2:error] [pid 14703:tid 14703] [client 143.255.91.3:22505] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 143.255.91.3 (+1 hits since last alert)\|desertalfas.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "desertalfas.org"] [uri "/xmlrpc.php"] [unique_id "akbNaqrAOsVqIqkH9jCiTQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 23:06:54 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 143.255.91.3 (143-255-91-3.i9net.tec.br): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 143.255.91.3 (143-255-91-3.i9net.tec.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 19:06:45.661760 2026] [security2:error] [pid 30938:tid 30938] [client 143.255.91.3:25184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 143.255.91.3 (+1 hits since last alert)\|adlc18.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "adlc18.org"] [uri "/xmlrpc.php"] [unique_id "akWdhap7ZcmmzOk3PX0riQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-01 22:32:50 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC BR/Brazil/143-255-91-3.i9net.tec.br	Web App Attack
🇺🇸 jsjdmediallc	2026-07-01 22:20:04 (1 day ago)	Auto-blocked: score 501 (threshold 10). Tier: HIGH. Hits: 99. Flags: xmlrpc, xmlrpc-burst, single-pa ... show more Auto-blocked: score 501 (threshold 10). Tier: HIGH. Hits: 99. Flags: xmlrpc, xmlrpc-burst, single-path-flood. Paths: /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php show less	Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2026-06-30 23:44:21 (2 days ago)	Wordpress unauthorized access attempt	Brute-Force
🇫🇷 dynamix	2026-06-30 20:59:52 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇮 inlink.ltd	2026-06-30 16:13:52 (2 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇫🇷 masterguru	2026-06-20 20:12:35 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-20 16:40:32 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 143.255.91.3 (143-255-91-3.i9net.tec.br): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 143.255.91.3 (143-255-91-3.i9net.tec.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 12:40:28.143880 2026] [security2:error] [pid 13169:tid 13169] [client 143.255.91.3:8543] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 143.255.91.3 (+1 hits since last alert)\|guldunyayayinlari.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "guldunyayayinlari.com"] [uri "/xmlrpc.php"] [unique_id "ajbCfL2IlnQYxO0XL3Bg6gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-23 05:17:35 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-09-01 06:05:17 (10 months ago)	Attacks with Bad user agents	Hacking
🇩🇪 botreporter	2025-05-23 03:03:09 (1 year ago)	botnet ignoring robots.txt 2	Bad Web Bot
🇩🇪 stalker.to	2025-05-22 13:32:39 (1 year ago)	Datacenter Proxy	Web Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.147.160.73

🇱🇹 194.165.16.161

🇧🇷 179.183.114.175

🇩🇪 176.115.236.182

🇺🇸 173.255.223.115

🇺🇸 159.223.132.86

🇷🇺 152.32.228.20

🇺🇸 149.57.176.29

🇨🇦 143.110.217.47

🇺🇸 143.42.164.182

🇨🇳 125.39.93.73

🇰🇷 118.39.219.45

🇳🇬 105.112.126.74

🇳🇱 93.123.109.102

🇫🇮 74.125.230.192

🇺🇸 71.6.236.201

🇩🇪 69.5.169.48

🇸🇬 43.153.213.101

🇺🇸 20.12.41.6

🇬🇧 5.133.46.179