AbuseIPDB » 193.138.7.215

193.138.7.215 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 27%: ?

27%

ISP	Blix Solutions - Helsinki
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	s1931387215.blix.com
Domain Name	blix.com
Country	Finland
City	Helsinki, Uusimaa

Report 193.138.7.215

Whois 193.138.7.215

IP Abuse Reports for 193.138.7.215:

This IP address has been reported a total of 41 times from 19 distinct sources. 193.138.7.215 was first reported on February 24th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
mescribano	2024-11-04 00:10:03 (1 month ago)		Bad Web Bot Web App Attack
spyra.rocks	2024-11-04 00:03:20 (1 month ago)	NGINX	Bad Web Bot
Holger	2024-11-03 23:59:44 (1 month ago)	URL probing: GET /.env	Web App Attack
MSZ	2024-11-03 23:16:14 (1 month ago)	Blocked by Fail2Ban (plesk-modsecurity)	Hacking Brute-Force Web App Attack
barbarella	2024-11-03 23:06:18 (1 month ago)	Multiple (2) times attack on https port 443: Configuration snooping with .env file (GET /.env) <br / ... show moreMultiple (2) times attack on https port 443: Configuration snooping with .env file (GET /.env) 23:06:21 unauthorized access PHPunit framework files (GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php) show less	Hacking Web App Attack
Raist	2024-11-03 22:54:44 (1 month ago)	Auto reported : Massive generation of 404/403	Web App Attack
David Gebler	2024-11-03 22:32:17 (1 month ago)	193.138.7.215 - - [03/Nov/2024:22:32:17 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ... show more193.138.7.215 - - [03/Nov/2024:22:32:17 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4631 "-" "python-requests/2.32.3" show less	Brute-Force Web App Attack
v1nc	2024-11-03 22:26:50 (1 month ago)	193.138.7.215 - - [03/Nov/2024:22:26:50 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ... show more193.138.7.215 - - [03/Nov/2024:22:26:50 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 118 "-" "python-requests/2.32.3" ... show less	Hacking
Starburst SysOp Team	2024-11-03 22:26:18 (1 month ago)	(mod_security-custom) mod_security (id:210492) triggered by 193.138.7.215 (FI/Finland/s1931387215.bl ... show more(mod_security-custom) mod_security (id:210492) triggered by 193.138.7.215 (FI/Finland/s1931387215.blix.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Sun Nov 03 22:26:13.836396 2024] [:error] [pid 3501346:tid 3501388] [client 193.138.7.215:61044] [client 193.138.7.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.45.158"] [uri "/.env"] [unique_id "Zyf4hQIBaGbgioOisAaAhwAAAI0"] show less	Hacking
TheMadBeaker	2024-08-23 10:48:09 (3 months ago)	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	Hacking SQL Injection
diego	2024-06-21 06:17:41 (5 months ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack DDoS Attack
diego	2024-06-20 21:39:07 (5 months ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack DDoS Attack
diego	2024-06-20 18:53:11 (5 months ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack DDoS Attack
diego	2024-06-20 09:21:23 (5 months ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack DDoS Attack
diego	2024-06-19 19:35:04 (5 months ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack DDoS Attack