JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.138.7.143

193.138.7.143 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 51%: ?

51%

ISP	Blix Group AS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS50304
Hostname(s)	s1931387143.blix.com
Domain Name	blix.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.138.7.143

Whois 193.138.7.143

IP Abuse Reports for 193.138.7.143:

This IP address has been reported a total of 28 times from 21 distinct sources. 193.138.7.143 was first reported on May 7th 2023, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Kenshin869	2026-07-24 21:43:46 (3 hours ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-07-24 15:11:14 (10 hours ago)	(mod_security) mod_security (id:240335) triggered by 193.138.7.143 (s1931387143.blix.com): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 193.138.7.143 (s1931387143.blix.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 11:11:09.354754 2026] [security2:error] [pid 3890827:tid 3890827] [client 193.138.7.143:49901] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 193.138.7.143 (+1 hits since last alert)\|pinetreedistrict.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pinetreedistrict.org"] [uri "/xmlrpc.php"] [unique_id "amOAjZqks34BStXoWOQz9AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 14:38:15 (10 hours ago)	[osotir.org] httpd-xmlrpc-post: sites=www.prostiniki.gr; logs=/var/log/httpd/domains/prostiniki.gr.l ... show more [osotir.org] httpd-xmlrpc-post: sites=www.prostiniki.gr; logs=/var/log/httpd/domains/prostiniki.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 11:14:56 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 193.138.7.143 (s1931387143.blix.com): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 193.138.7.143 (s1931387143.blix.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 07:14:48.880234 2026] [security2:error] [pid 3081814:tid 3081814] [client 193.138.7.143:49207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 193.138.7.143 (+1 hits since last alert)\|reallifelearninghub.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "reallifelearninghub.com"] [uri "/xmlrpc.php"] [unique_id "amH3qNpFsrbVcyjNW5OZqAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Yepngo	2026-07-23 09:09:15 (1 day ago)	193.138.7.143 - - [23/Jul/2026:11:09:05 +0200] "POST /xmlrpc.php HTTP/2.0" 200 410 "-" "WordPress.co ... show more 193.138.7.143 - - [23/Jul/2026:11:09:05 +0200] "POST /xmlrpc.php HTTP/2.0" 200 410 "-" "WordPress.com; https://wordpress.com" 193.138.7.143 - - [23/Jul/2026:11:09:15 +0200] "POST /xmlrpc.php HTTP/2.0" 200 410 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-07-23 08:28:23 (1 day ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇱🇻 garmtech.com	2026-07-23 08:20:12 (1 day ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇪🇸 alferez	2026-07-23 08:09:23 (1 day ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇫🇷 dynamix	2026-07-23 08:04:16 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 07:12:47 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 193.138.7.143 (s1931387143.blix.com): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 193.138.7.143 (s1931387143.blix.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 03:12:39.134878 2026] [security2:error] [pid 2678703:tid 2678703] [client 193.138.7.143:56416] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 193.138.7.143 (+1 hits since last alert)\|hiidied.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hiidied.com"] [uri "/xmlrpc.php"] [unique_id "amG-5wX8eU8obVZGMg0MkAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-20 11:15:19 (1 month ago)	Blocked by UFW (TCP on 63150) Source port: 39729 TTL: 41 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 63150) Source port: 39729 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 193.138.7.143) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 albionfreemarket.com	2026-05-06 17:55:42 (2 months ago)	2026/05/06 17:55:41 [error] 274#274: 230358 limiting requests, excess: 100.500 by zone "limit_cdn_i ... show more 2026/05/06 17:55:41 [error] 274#274: 230358 limiting requests, excess: 100.500 by zone "limit_cdn_images", client: 193.138.7.143, server: cdn.albionfreemarket.com, request: "GET /AlbionWorld/map/maps/4/map_11_6.webp HTTP/2.0", host: "cdn.albionfreemarket.com", referrer: "https://albionfreemarket.com/" 2026/05/06 17:55:41 [error] 274#274: 230358 limiting requests, excess: 100.500 by zone "limit_cdn_images", client: 193.138.7.143, server: cdn.albionfreemarket.com, request: "GET /AlbionWorld/map/maps/4/map_11_6.webp HTTP/2.0", host: "cdn.albionfreemarket.com", referrer: "https://albionfreemarket.com/" 2026/05/06 17:55:41 [error] 272#272: 230362 limiting requests, excess: 100.150 by zone "limit_cdn_images", client: 193.138.7.143, server: cdn.albionfreemarket.com, request: "GET /AlbionWorld/map/maps/4/map_8_6.webp HTTP/2.0", host: "cdn.albionfreemarket.com", referrer: "https://albionfreemarket.com/" 2026/05/06 17:55:41 [error] 272#272: *230362 limiting requests, excess: 100.150 by zone " ... show less	Brute-Force
🇩🇪 HandyTreff.de	2026-03-28 12:32:58 (3 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.442 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.442 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.93 Safari/53 show less	Web App Attack Bad Web Bot
🇳🇱 FREAKISH	2025-12-03 07:08:32 (7 months ago)	2025-12-03 08:08:32: Minecraft server scan detected from 193.138.7.143 on port 25565 of 127.0.0.1	Port Scan
🇺🇸 cpxducky	2025-12-03 07:08:04 (7 months ago)	2025-12-03 07:08:04: Minecraft server scan detected from 193.138.7.143 on port 25565 of mail.cpxduck ... show more 2025-12-03 07:08:04: Minecraft server scan detected from 193.138.7.143 on port 25565 of mail.cpxducky.com show less	Port Scan

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 217.21.193.74

🇺🇸 205.147.22.18

🇬🇧 193.163.125.201

🇮🇹 151.60.164.192

🇫🇮 147.185.133.22

🇺🇸 146.190.154.85

🇸🇬 124.197.123.46

🇫🇷 92.205.58.210

🇧🇷 45.172.66.210

🇸🇬 43.160.249.98

🇸🇬 43.160.208.253

🇹🇼 34.81.125.215

🇬🇧 31.171.130.43

🇪🇨 186.68.83.104

🇫🇮 172.217.37.152

🇮🇹 158.47.242.243

🇫🇮 147.185.133.161

🇹🇼 128.14.229.76

🇩🇪 104.207.54.71

🇭🇰 101.36.121.22