JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.135.38.32

139.135.38.32 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 49%: ?

49%

ISP	Cyber Internet Services Pakistan
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.135.38.32

Whois 139.135.38.32

IP Abuse Reports for 139.135.38.32:

This IP address has been reported a total of 21 times from 17 distinct sources. 139.135.38.32 was first reported on January 28th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-07-04 07:07:09 (13 hours ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 integrantservices.com	2026-07-03 15:45:23 (1 day ago)	(wordpress) Failed wordpress login from 139.135.38.32 (PK/Pakistan/-)	Brute-Force
🇫🇷 dynamix	2026-07-03 14:40:53 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 11:46:34 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 139.135.38.32 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 139.135.38.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 07:46:23.708443 2026] [security2:error] [pid 1944:tid 1944] [client 139.135.38.32:30169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 139.135.38.32 (+1 hits since last alert)\|fusionrep.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fusionrep.com"] [uri "/xmlrpc.php"] [unique_id "ajPajx8e96qZP7ImpE1-6gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-17 00:36:02 (2 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 08:41:30 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 139.135.38.32 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 139.135.38.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 04:41:18.053333 2026] [security2:error] [pid 457:tid 457] [client 139.135.38.32:29980] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 139.135.38.32 (+1 hits since last alert)\|certifiedfarmersmarkets.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "certifiedfarmersmarkets.org"] [uri "/xmlrpc.php"] [unique_id "ajEMLmse9e9elxIeNEVavgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-16 05:26:38 (2 weeks ago)	Fail2ban filtered ...	Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-16 01:23:34 (2 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC US/United States/-	Web App Attack
🇩🇪 Marc	2026-06-14 05:46:09 (2 weeks ago)	139.135.38.32 - - [14/Jun/2026:07:43:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3552 "-" "Jetpack by ... show more 139.135.38.32 - - [14/Jun/2026:07:43:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3552 "-" "Jetpack by WordPress.com" 139.135.38.32 - - [14/Jun/2026:07:43:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3552 "-" "Jetpack by WordPress.com" 139.135.38.32 - - [14/Jun/2026:07:46:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3552 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
Anonymous	2026-06-04 06:29:08 (1 month ago)	[redacted] 139.135.38.32 - - [04/Jun/2026:08:28:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 139.135.38.32 - - [04/Jun/2026:08:28:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site84218949.com" [redacted] 139.135.38.32 - - [04/Jun/2026:08:28:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site44777268.com" [redacted] 139.135.38.32 - - [04/Jun/2026:08:28:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 139.135.38.32 - - [04/Jun/2026:08:28:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" [redacted] 139.135.38.32 - - [04/Jun/2026:08:29:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
Anonymous	2026-05-24 14:55:00 (1 month ago)	Fail2ban filtered ...	Web App Attack
🇱🇻 garmtech.com	2026-05-24 03:08:39 (1 month ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇺🇸 Jason Howell	2026-05-13 13:02:49 (1 month ago)	139.135.38.32 - - [13/May/2026:08:00:12 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "Jetpack by ... show more 139.135.38.32 - - [13/May/2026:08:00:12 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "Jetpack by WordPress.com" 139.135.38.32 - - [13/May/2026:08:00:36 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" 139.135.38.32 - - [13/May/2026:08:01:08 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3218 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 139.135.38.32 - - [13/May/2026:08:02:37 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3216 "-" "WordPress.com; https://wordpress.com" 139.135.38.32 - - [13/May/2026:08:02:48 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3216 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" ... show less	Web App Attack
🇺🇸 Jason Howell	2026-05-13 07:53:58 (1 month ago)	139.135.38.32 - - [13/May/2026:02:50:49 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3218 "-" "WordPress.c ... show more 139.135.38.32 - - [13/May/2026:02:50:49 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3218 "-" "WordPress.com; https://wordpress.com" 139.135.38.32 - - [13/May/2026:02:53:21 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "WordPress.com; https://wordpress.com" 139.135.38.32 - - [13/May/2026:02:53:30 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "Jetpack/13.0; WordPress/6.3; http://site35242395.com" 139.135.38.32 - - [13/May/2026:02:53:41 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "Jetpack by WordPress.com" 139.135.38.32 - - [13/May/2026:02:53:56 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3217 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇨🇦 Paulo Henrique dos Santos Nichio	2026-05-11 09:25:31 (1 month ago)	(ls_brute) LiteSpeed Brute Force Attack 139.135.38.32 (PK/Pakistan/-): 3 in the last 600 secs; Ports ... show more (ls_brute) LiteSpeed Brute Force Attack 139.135.38.32 (PK/Pakistan/-): 3 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-05-11 06:24:58.708825 [WARN] [3224225] [T0] [139.135.38.32:29758-33#APVH_www.finaestampatextil.com:443] Brute force detected for IP [139.135.38.32], throttle. 2026-05-11 06:25:09.700058 [WARN] [3224225] [T0] [139.135.38.32:29758-34#APVH_www.finaestampatextil.com:443] Brute force detected for IP [139.135.38.32], throttle. 2026-05-11 06:25:20.734662 [WARN] [3224225] [T0] [139.135.38.32:29758-35#APVH_www.finaestampatextil.com:443] Brute force detected for IP [139.135.38.32], throttle. show less	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 202.76.188.34

🇩🇪 185.243.11.39

🇨🇳 183.31.66.186

🇩🇿 154.241.21.60

🇵🇭 119.92.70.82

🇻🇳 116.110.210.160

🇷🇴 92.118.39.77

🇺🇸 50.16.216.166

🇳🇱 45.148.120.187

🇧🇷 177.55.61.255

🇺🇸 162.216.150.120

🇻🇳 113.161.222.150

🇧🇩 103.213.238.91

🇮🇳 66.116.224.161

🇰🇷 211.105.129.57

🇨🇦 192.95.10.202

🇺🇸 172.66.47.128

🇺🇸 162.216.149.49

🇹🇼 198.235.24.70

🇺🇸 198.44.167.110