JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.19.39.182

146.19.39.182 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 16%: ?

16%

ISP	Atlas Network Holdings LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	atlasnetworkholdings.online
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.19.39.182

Whois 146.19.39.182

IP Abuse Reports for 146.19.39.182:

This IP address has been reported a total of 14 times from 8 distinct sources. 146.19.39.182 was first reported on February 8th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-26 01:19:07 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 146.19.39.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 146.19.39.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:19:01.413119 2026] [security2:error] [pid 3737:tid 3737] [client 146.19.39.182:57463] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|persnicketyinc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/im-engaged-now-what/"] [unique_id "at6qhbUD_o5nXBzRG8U3awAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-09-13 17:12:50 (1 month ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0 \| 2026-09-13 17:12 UTC show less	Hacking Web App Attack
🇩🇪 stinpriza	2026-09-03 19:46:30 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 00:23:19 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 146.19.39.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 146.19.39.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 20:23:13.013101 2026] [security2:error] [pid 29046:tid 29046] [client 146.19.39.182:32265] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|burlison.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "burlison.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agutcUdw_EHHIp7NVl3QCAAAABA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-04-24 13:58:50 (6 months ago)	http-bad-user-agent - IP: 146.19.39.182 - time="2026-04-24T15:58:50+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 146.19.39.182 - time="2026-04-24T15:58:50+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 146.19.39.182 (US/26548) : 4h ban on Ip 146.19.39.182" module=db show less	Bad Web Bot
🇺🇸 island-freaks.com	2026-04-18 16:02:55 (6 months ago)	Attack Type: WordPress Exploit Bot attempt on /photo/113997/ \| DNS 146.19.39.182 \| Agent: Mozilla/5. ... show more Attack Type: WordPress Exploit Bot attempt on /photo/113997/ \| DNS 146.19.39.182 \| Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0 show less	Port Scan Hacking Bad Web Bot Exploited Host Web App Attack
🇨🇳 ThreatBook.io	2025-04-23 22:42:42 (1 year ago)	ThreatBook Intelligence: http_proxy more details on http://threatbook.io/ip/146.19.39.182 2025-04-23 ... show more ThreatBook Intelligence: http_proxy more details on http://threatbook.io/ip/146.19.39.182 2025-04-23 19:07:20 /+CSCOE+/logon.html show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-18 22:54:40 (1 year ago)	2025-04-18 16:11:19 /+CSCOE+/logon.html	Web App Attack
🇺🇸 oncord	2025-03-30 04:19:06 (1 year ago)	Form spam	Web Spam
🇦🇺 oncord	2025-03-18 13:13:58 (1 year ago)	Form spam	Web Spam
🇺🇸 oncord	2025-03-10 17:05:12 (1 year ago)	Form spam	Web Spam
🇺🇸 oncord	2025-02-27 16:40:07 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-02-27 08:17:54 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 146.19.39.182 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 146.19.39.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 03:17:50.525434 2025] [security2:error] [pid 23868:tid 23868] [client 146.19.39.182:10451] [client 146.19.39.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ergocorrect.com"] [uri "/.env"] [unique_id "Z8Afrs_VxGO6Pcceptp_hgAAABM"], referer: https://tasamm.com/about/eee38.html show less	Brute-Force Bad Web Bot Web App Attack
🇪🇨 Almas	2025-02-08 22:36:00 (1 year ago)	Nasty russian spammers	Web Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.92

🇺🇸 172.58.120.8

🇭🇰 165.154.64.136

🇷🇴 92.118.39.49

🇨🇳 43.138.5.244

🇬🇧 5.252.83.247

🇺🇸 147.185.132.190

🇺🇸 144.172.105.154

🇫🇷 85.69.240.210

🇳🇱 81.171.72.135

🇳🇱 77.239.124.73

🇺🇸 20.102.98.53

🇺🇸 162.216.149.118

🇨🇳 120.232.250.170

🇳🇱 91.108.9.50

🇸🇬 47.128.35.142

🇬🇧 35.203.210.244

🇧🇪 35.189.229.134

🇦🇺 20.53.249.197

🇷🇺 5.128.232.43