JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.103.38.238

146.103.38.238 was found in our database!

This IP was reported 334 times. Confidence of Abuse is 100%: ?

100%

ISP	Brander Group Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213772
Domain Name	brandergroup.net
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.103.38.238

Whois 146.103.38.238

IP Abuse Reports for 146.103.38.238:

This IP address has been reported a total of 334 times from 238 distinct sources. 146.103.38.238 was first reported on July 19th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 iamxorum	2026-07-22 23:19:33 (2 days ago)	2026-07-22T23:19:32.610430+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-07-22T23:19:32.610430+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=146.103.38.238 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=22237 DF PROTO=TCP SPT=54766 DPT=8080 WINDOW=32120 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-07-22 23:16:26 (2 days ago)	Jul 22 19:16:26 localhost kernel: [113107402.544170] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 22 19:16:26 localhost kernel: [113107402.544170] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=146.103.38.238 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=5124 DF PROTO=TCP SPT=46684 DPT=5000 WINDOW=32120 RES=0x00 SYN URGP=0 Jul 22 19:16:26 localhost kernel: [113107402.546241] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=146.103.38.238 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=31177 DF PROTO=TCP SPT=56812 DPT=4000 WINDOW=32120 RES=0x00 SYN URGP=0 Jul 22 19:16:26 localhost kernel: [113107402.548047] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=146.103.38.238 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=31177 DF PROTO=TCP SPT=56812 DPT=4000 SEQ=4220290403 ACK=0 WINDOW=32120 RES=0x00 SYN URGP=0 OPT (020405B40402080ABD71FC330000000001030307) Jul 22 19:16:26 localhost kernel: [113107402.548065] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f: show less	Port Scan
🇺🇸 pixiekat	2026-07-22 21:46:30 (3 days ago)	[Wed Jul 22 21:46:27.169179 2026] [authz_core:error] [pid 405929:tid 405947] [client 146.103.38.238: ... show more [Wed Jul 22 21:46:27.169179 2026] [authz_core:error] [pid 405929:tid 405947] [client 146.103.38.238:43058] AH01630: client denied by server configuration: /var/www/html/.env [Wed Jul 22 21:46:27.837858 2026] [authz_core:error] [pid 405901:tid 405917] [client 146.103.38.238:43060] AH01630: client denied by server configuration: /var/www/html/.env.bak [Wed Jul 22 21:46:28.187649 2026] [authz_core:error] [pid 405929:tid 405941] [client 146.103.38.238:43080] AH01630: client denied by server configuration: /var/www/html/.env.production [Wed Jul 22 21:46:30.085007 2026] [authz_core:error] [pid 405901:tid 405923] [client 146.103.38.238:50652] AH01630: client denied by server configuration: /var/www/html/.env.bak [Wed Jul 22 21:46:30.306594 2026] [authz_core:error] [pid 405929:tid 405939] [client 146.103.38.238:50682] AH01630: client denied by server configuration: /var/www/html/.env.production ... show less	Brute-Force
🇳🇱 wlt-blocker	2026-07-22 21:31:43 (3 days ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 sandra361	2026-07-22 21:16:01 (3 days ago)	Port scan detected: 18 attempts across 6 ports (80,4000,8000,8080,8443,9000). \| Evidence: REAPER_TAR ... show more Port scan detected: 18 attempts across 6 ports (80,4000,8000,8080,8443,9000). \| Evidence: REAPER_TARPIT: IN=ens3 SRC=146.103.38.238 LEN=40 TOS=0x00 PREC=0x00 TTL=60 ID=4588 DF PROTO=TCP SPT=52840 DPT=4000 WINDOW=32120 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇮🇪 AutosOnShow	2026-07-22 21:15:07 (3 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-22 21:14:42.313 \|	Web App Attack
🇺🇸 cazae	2026-07-22 20:00:14 (3 days ago)	Unauthorized attempt on debian [443/tcp] Source port: 55010 TTL: 47 Packet length: 60 TOS: 0x08 htt ... show more Unauthorized attempt on debian [443/tcp] Source port: 55010 TTL: 47 Packet length: 60 TOS: 0x08 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-22 19:54:10 (3 days ago)	Unauthorized access (80/tcp/http)	Port Scan Web App Attack
🇺🇸 Floofie	2026-07-22 19:45:34 (3 days ago)	146.103.38.238 - - [22/Jul/2026:15:45:33 -0400] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compati ... show more 146.103.38.238 - - [22/Jul/2026:15:45:33 -0400] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 146.103.38.238 - - [22/Jul/2026:15:45:34 -0400] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 146.103.38.238 - - [22/Jul/2026:15:45:34 -0400] "GET /.env.bak HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SA19999	2026-07-22 19:14:02 (3 days ago)	Auto-report: cwp:attack_Laravel framework Information \| sources=["cwp"] \| Fox honeypot cluster	Web App Attack
🇩🇪 cloudmax	2026-07-22 19:07:05 (3 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇬🇧 Andrew	2026-07-22 19:06:57 (3 days ago)	Blocked by UFW (TCP on port 8080). Source port: 44734 TTL: 53 Packet length: 60 TOS: 0x00 This repo ... show more Blocked by UFW (TCP on port 8080). Source port: 44734 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 146.103.38.238) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇨🇳 pengpeng	2026-07-22 19:03:10 (3 days ago)	monitor: on VM-0-7-ubuntu \| port: 3000 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇵🇱 kwiatekstas	2026-07-22 18:59:33 (3 days ago)	146.103.38.238 - - [22/Jul/2026:20:59:31 +0200] "GET /.env HTTP/1.1" 404 4316 "-" "Mozilla/5.0 (comp ... show more 146.103.38.238 - - [22/Jul/2026:20:59:31 +0200] "GET /.env HTTP/1.1" 404 4316 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 146.103.38.238 - - [22/Jul/2026:20:59:32 +0200] "GET /.env.bak HTTP/1.1" 404 4317 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 146.103.38.238 - - [22/Jul/2026:20:59:32 +0200] "GET /.env.production HTTP/1.1" 404 4315 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Hacking Web App Attack
Anonymous	2026-07-22 18:30:04 (3 days ago)	Triggered: repeated knocking on closed ports.	Port Scan

Showing 1 to 15 of 334 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.93.0.66

🇳🇱 45.153.34.71

🇳🇱 45.148.10.141

🇺🇸 20.65.195.60

🇺🇸 205.210.31.58

🇩🇪 167.99.140.244

🇺🇸 146.190.63.48

🇷🇺 128.204.70.169

🇹🇼 128.14.236.30

🇺🇸 104.28.246.112

🇺🇸 45.63.4.69

🇰🇷 211.37.174.180

🇮🇳 203.192.232.180

🇺🇸 162.216.150.125

🇺🇸 147.185.132.106

🇺🇸 141.148.165.230

🇨🇦 104.239.38.142

🇺🇸 104.168.4.152

🇸🇬 103.252.202.126

🇧🇬 79.124.62.134