JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.138.218.213

193.138.218.213 was found in our database!

This IP was reported 341 times. Confidence of Abuse is 44%: ?

44%

ISP	31173 Services AB infrastructure in Malmo, Sweden.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS39351
Domain Name	31173.se
Country	🇸🇪 Sweden
City	Malmo, Skane

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.138.218.213

Whois 193.138.218.213

IP Abuse Reports for 193.138.218.213:

This IP address has been reported a total of 341 times from 117 distinct sources. 193.138.218.213 was first reported on May 18th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-08-19 20:26:20 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-18 13:00:45 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 matthieul.dev	2026-08-06 21:00:12 (3 weeks ago)	Blocked by os-abuseipdb; 12 hits, proto=tcp,udp, ports=1538	Port Scan Brute-Force
🇹🇷 neron	2026-08-05 20:29:43 (3 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 xmission.com	2026-08-05 05:56:14 (3 weeks ago)	Blocked by UFW (TCP on 60973) Source port: 42173 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 60973) Source port: 42173 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 193.138.218.213) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-04 16:41:15 (3 weeks ago)	Blocked by UFW (TCP on 60973) Source port: 48299 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 60973) Source port: 48299 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 193.138.218.213) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 neron	2026-08-04 02:29:42 (4 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-02 20:52:55 (4 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-28 00:19:38 (1 month ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-07-27 19:38:08 (1 month ago)	"GET /.git/index HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 12:50:59 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 193.138.218.213 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 193.138.218.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:50:52.721490 2026] [security2:error] [pid 265996:tid 265996] [client 193.138.218.213:48016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centuryabsinthe.com"] [uri "/.git/index"] [unique_id "amdULD1UhXioIatfXcsJ_QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-07-27 12:21:28 (1 month ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 TPI-Abuse	2026-07-27 12:16:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 193.138.218.213 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 193.138.218.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:15:58.178485 2026] [security2:error] [pid 3647504:tid 3647504] [client 193.138.218.213:39426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catholicshopper.com"] [uri "/.git/index"] [unique_id "amdL_mhzlSIckHm7uouL2AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:59:13 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 193.138.218.213 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 193.138.218.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:59:09.609385 2026] [security2:error] [pid 3546716:tid 3546716] [client 193.138.218.213:39180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casadelsolmexico.net"] [uri "/.git/index"] [unique_id "amdIDb5QkQTwGa6_xR2sPAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:37:07 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 193.138.218.213 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 193.138.218.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:37:01.561901 2026] [security2:error] [pid 1743904:tid 1743904] [client 193.138.218.213:43372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carbonless.net"] [uri "/.git/index"] [unique_id "amdC3QLFod7wGdLXdan7pQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 341 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 213.234.9.218

🇭🇰 199.45.155.89

192.168.176.197

🇨🇴 191.97.12.90

🇺🇸 172.67.152.91

172.29.193.21

🇩🇪 167.94.145.21

🇺🇸 147.185.132.82

🇨🇦 138.197.147.76

🇨🇳 110.16.41.193

🇿🇦 102.23.194.195

🇷🇴 92.118.39.231

🇬🇧 92.26.55.35

🇬🇧 82.11.249.32

🇨🇳 61.145.181.7

🇸🇬 43.156.232.25

10.109.194.134

🇷🇺 5.128.200.38

🇹🇭 203.150.107.244

🇭🇰 199.45.154.77