JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.196.38.135

146.196.38.135 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 43%: ?

43%

ISP	Satendra Networks
Usage Type	Fixed Line ISP
ASN	AS133982
Domain Name	excitel.com
Country	🇮🇳 India
City	Jhansi, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.196.38.135

Whois 146.196.38.135

IP Abuse Reports for 146.196.38.135:

This IP address has been reported a total of 19 times from 14 distinct sources. 146.196.38.135 was first reported on November 9th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Yepngo	2026-07-16 16:48:32 (3 days ago)	146.196.38.135 - - [16/Jul/2026:18:48:21 +0200] "POST /xmlrpc.php HTTP/2.0" 200 410 "-" "Jetpack by ... show more 146.196.38.135 - - [16/Jul/2026:18:48:21 +0200] "POST /xmlrpc.php HTTP/2.0" 200 410 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" 146.196.38.135 - - [16/Jul/2026:18:48:31 +0200] "POST /xmlrpc.php HTTP/2.0" 200 410 "-" "Jetpack/12.5; WordPress/6.4; http://site52164849.com" ... show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-16 11:30:45 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 11:03:10 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 07:03:02.862610 2026] [security2:error] [pid 543:tid 543] [client 146.196.38.135:58513] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 146.196.38.135 (+1 hits since last alert)\|stukabird.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stukabird.com"] [uri "/xmlrpc.php"] [unique_id "ali6ZhuBAy9p46ZJTD_P8QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 08:25:58 (4 days ago)	[redacted] 146.196.38.135 - - [16/Jul/2026:10:25:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" " ... show more [redacted] 146.196.38.135 - - [16/Jul/2026:10:25:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.1; WordPress/6.1; http://site23017510.com" [redacted] 146.196.38.135 - - [16/Jul/2026:10:25:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 146.196.38.135 - - [16/Jul/2026:10:25:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 146.196.38.135 - - [16/Jul/2026:10:25:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 146.196.38.135 - - [16/Jul/2026:10:25:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 06:56:10 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:56:03.467846 2026] [security2:error] [pid 14968:tid 14986] [client 146.196.38.135:65467] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 146.196.38.135 (+1 hits since last alert)\|willmanlawfirm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "willmanlawfirm.com"] [uri "/xmlrpc.php"] [unique_id "aliAg_qlF1eokfKBPw6rPAAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 14:29:33 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 10:29:29.345342 2026] [security2:error] [pid 13385:tid 13445] [client 146.196.38.135:56634] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 146.196.38.135 (+1 hits since last alert)\|planmytrust.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "planmytrust.com"] [uri "/xmlrpc.php"] [unique_id "aleZSf65-UX5BYTTHsKWwAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-15 14:25:57 (4 days ago)	(wordpress) Failed wordpress login from 146.196.38.135 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-14 09:25:36 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 05:25:30.271395 2026] [security2:error] [pid 3213747:tid 3213747] [client 146.196.38.135:61166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 146.196.38.135 (+1 hits since last alert)\|hendersonhomes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hendersonhomes.com"] [uri "/xmlrpc.php"] [unique_id "alYAil44avehd79X29RzHgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 04:28:41 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 146.196.38.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 00:28:37.366558 2026] [security2:error] [pid 23612:tid 23612] [client 146.196.38.135:60450] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 146.196.38.135 (+1 hits since last alert)\|comicpreservation.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "comicpreservation.com"] [uri "/xmlrpc.php"] [unique_id "alW69RISHPuN90KGquq7IgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-07 15:10:54 (1 week ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=688&p=3&q=AC+USB+212+EU&rating=6&stock=1 \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 14_2_1 like Mac OS X) AppleWebKit/534.2 (KHTML, like Gecko) FxiOS/18.9g9534.0 Mobile/41T400 Safari/534.2 \| (Magento Site) show less	Hacking Bad Web Bot
🇩🇪 Vegascosmetics	2026-07-01 05:21:18 (2 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-05-12 11:47:44 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇨🇦 Blinker73	2026-04-22 19:05:55 (2 months ago)	2026-04-22T15:05 kernel: OUT= SRC=146.196.38.135 LEN=60 TOS=0x00 PREC=0x00 TTL=33 ID=30382 DF ... show more 2026-04-22T15:05 kernel: OUT= SRC=146.196.38.135 LEN=60 TOS=0x00 PREC=0x00 TTL=33 ID=30382 DF PROTO=TCP SPT=60154 DPT=6036 WINDOW=29040 RES=0x00 SYN URGP=0 2026-04-22T15:05 kernel: OUT= SRC=146.196.38.135 LEN=60 TOS=0x00 PREC=0x00 TTL=33 ID=30383 DF PROTO=TCP SPT=60154 DPT=6036 WINDOW=29040 RES=0x00 SYN URGP=0 2026-04-22T15:05 kernel: OUT= SRC=146.196.38.135 LEN=60 TOS=0x00 PREC=0x00 TTL=33 ID=30384 DF PROTO=TCP SPT=60154 DPT=6036 WINDOW=29040 RES=0x00 SYN URGP= show less	Port Scan
🇩🇪 IP Analyzer	2026-04-01 10:00:24 (3 months ago)	Unauthorized connection attempt from IP address 146.196.38.135 on Port 445(SMB)	Port Scan
🇱🇹 NotACaptcha	2026-03-31 12:13:14 (3 months ago)	Unauthorised access (Mar 31 15:13) SRC=146.196.38.135 LEN=52 TTL=108 ID=555 DF TCP DPT=445 WINDOW=81 ... show more Unauthorised access (Mar 31 15:13) SRC=146.196.38.135 LEN=52 TTL=108 ID=555 DF TCP DPT=445 WINDOW=8192 SYN show less	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.85.160.70

🇩🇪 162.158.94.190

🇮🇳 157.48.176.11

🇩🇪 116.203.25.15

🇫🇷 91.162.57.110

🇱🇹 77.90.185.78

🇫🇷 54.37.10.124

🇷🇺 31.173.247.254

🇩🇪 2a03:b0c0:3:f0:0:2:aed3:0

🇺🇸 198.145.226.60

🇺🇸 195.26.244.42

🇨🇱 190.151.5.26

🇩🇪 185.242.3.226

🇨🇳 115.190.53.236

🇨🇳 113.250.177.24

🇮🇳 103.184.238.195

🇱🇹 84.15.178.121

🇺🇸 64.62.156.57

🇮🇳 49.37.73.75

🇩🇪 43.228.157.9