JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.120.231.165

146.120.231.165 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 25%: ?

25%

ISP	Inform Communications Ltd.
Usage Type	Fixed Line ISP
ASN	AS42581
Domain Name	neotelecom.kg
Country	🇰🇬 Kyrgyzstan
City	Bishkek, Bishkek

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.120.231.165

Whois 146.120.231.165

IP Abuse Reports for 146.120.231.165:

This IP address has been reported a total of 24 times from 17 distinct sources. 146.120.231.165 was first reported on January 16th 2024, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 20:21:39 (18 hours ago)	(mod_security) mod_security (id:210730) triggered by 146.120.231.165 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 146.120.231.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 16:21:36.257295 2026] [security2:error] [pid 14277:tid 14277] [client 146.120.231.165:53436] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|tulsatvmemories.com\|F\|2"] [data ".ktul.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tulsatvmemories.com"] [uri "/www.ktul.com"] [unique_id "aq2dUDEu4gnQiN32wsHP_AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-03 20:13:43 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-30 19:09:17 (2 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 19:51:27 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇪🇸 el-brujo	2026-08-26 13:01:11 (3 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 gui-ying233	2026-08-26 10:39:41 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-22 18:17:40 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-25 22:13:11 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-05-11 05:27:27 (4 months ago)	Attack Signature Blocked: /wishlist/index/add/product/11106/form_key/T1uOEGpBjymvPop7/ (Magento Site ... show more Attack Signature Blocked: /wishlist/index/add/product/11106/form_key/T1uOEGpBjymvPop7/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇨🇦 polycoda	2026-05-07 10:29:11 (4 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2026-02-27 13:05:13 (6 months ago)	Blocked: Reason='Possible SQL injection activity (6/60 min)'; Requests=6	SQL Injection
🇫🇷 Sklurk	2025-12-13 06:23:06 (9 months ago)	Web App Attack	Web App Attack
🇫🇷 bigorre.org	2025-12-05 10:06:17 (9 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇮🇩 hermawan	2025-11-24 08:43:53 (9 months ago)	[Mon Nov 24 15:33:46.308515 2025] [security2:error] [pid 757143:tid 140014658778816] [client 146.120 ... show more [Mon Nov 24 15:33:46.308515 2025] [security2:error] [pid 757143:tid 140014658778816] [client 146.120.231.165:38112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Brave found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/78.0.3904.87 Safari/537.36 request_line = GET /index.php/prakiraan-bulanan/257-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-malang/prakiraan-sifat-hujan-bulanan-di-malang-tahun-2015/752-prakiraan-sifat-hujan-di-malang-bulan-desember-tahun-2015 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-bulanan/257-prakiraan-sifat-hujan-bulanan/prakiraan-sifat-hujan-bulanan-di-malang/prakiraan-sifat-huja ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-19 00:59:30 (10 months ago)	[Wed Nov 19 07:59:05.216807 2025] [security2:error] [pid 18423:tid 140253415331520] [client 146.120. ... show more [Wed Nov 19 07:59:05.216807 2025] [security2:error] [pid 18423:tid 140253415331520] [client 146.120.231.165:28292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/daerah-potensi-banjir-provinsi-jawa-timur/555562030-prediksi-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-juli-dasarian-i-tahun-2025-tanggal-1-10-juli-2025-update-30-juni-2026 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/daerah-potensi-banjir-provinsi-jawa-timur/555562030-prediksi-dasarian-da ... show less	Hacking Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇸 188.161.229.135

🇨🇳 106.125.155.62

🇺🇸 2400:cb00:1342:1000:2dc3:c267:6973:f096

🇹🇼 2400:cb00:80:1000:1e5c:68de:1508:43c6

🇳🇱 185.224.128.16

🇦🇿 185.143.197.45

🇺🇸 168.91.173.57

🇮🇩 128.14.233.38

🇨🇳 106.75.165.16

🇮🇳 103.110.48.166

🇳🇱 86.54.31.38

🇺🇸 76.79.213.70

🇺🇸 66.132.186.239

🇳🇱 45.148.10.230

🇺🇸 2a06:98c0:3600::103

🇳🇱 193.47.62.69

🇻🇳 180.93.250.126

🇮🇳 162.4.81.4

🇺🇸 73.141.127.92

🇳🇱 5.255.98.143