JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.134.139.193

38.134.139.193 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 52%: ?

52%

ISP	Cogent Communications, LLC
Usage Type	Fixed Line ISP
ASN	AS136336
Domain Name	cogentco.com
Country	🇮🇳 India
City	Chennai, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.134.139.193

Whois 38.134.139.193

IP Abuse Reports for 38.134.139.193:

This IP address has been reported a total of 12 times from 9 distinct sources. 38.134.139.193 was first reported on May 6th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-16 06:02:13 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 38.134.139.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.134.139.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:02:07.471306 2026] [security2:error] [pid 5643:tid 5643] [client 38.134.139.193:16497] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.134.139.193 (+1 hits since last alert)\|stellabluesales.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stellabluesales.com"] [uri "/xmlrpc.php"] [unique_id "alhz3_drqCin-9a_ZGQiNgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 03:57:28 (2 days ago)	[redacted] 38.134.139.193 - - [16/Jul/2026:05:56:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 38.134.139.193 - - [16/Jul/2026:05:56:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" [redacted] 38.134.139.193 - - [16/Jul/2026:05:56:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 38.134.139.193 - - [16/Jul/2026:05:57:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 38.134.139.193 - - [16/Jul/2026:05:57:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 38.134.139.193 - - [16/Jul/2026:05:57:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" ... show less	Hacking Web App Attack
🇺🇸 IndigoRidge	2026-07-15 11:08:44 (2 days ago)	38.134.139.193 - - [15/Jul/2026:07:07:49 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress. ... show more 38.134.139.193 - - [15/Jul/2026:07:07:49 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 38.134.139.193 - - [15/Jul/2026:07:08:11 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 38.134.139.193 - - [15/Jul/2026:07:08:21 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 38.134.139.193 - - [15/Jul/2026:07:08:32 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" 38.134.139.193 - - [15/Jul/2026:07:08:43 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
Anonymous	2026-07-15 07:41:00 (2 days ago)	[ns31.kdns.gr] httpd-xmlrpc-post: sites=www.savouras.gr; logs=/var/log/httpd/domains/savouras.gr.log ... show more [ns31.kdns.gr] httpd-xmlrpc-post: sites=www.savouras.gr; logs=/var/log/httpd/domains/savouras.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-07-15 06:11:20 (3 days ago)	38.134.139.193 - - [15/Jul/2026:02:09:30 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5516 "-" "WordPress. ... show more 38.134.139.193 - - [15/Jul/2026:02:09:30 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5516 "-" "WordPress.com; https://wordpress.com" 38.134.139.193 - - [15/Jul/2026:02:09:52 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5516 "-" "WordPress.com; https://wordpress.com" 38.134.139.193 - - [15/Jul/2026:02:10:36 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5516 "-" "WordPress.com; https://wordpress.com" 38.134.139.193 - - [15/Jul/2026:02:11:09 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5516 "-" "WordPress.com; https://wordpress.com" 38.134.139.193 - - [15/Jul/2026:02:11:20 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5516 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇩🇪 ghostwarriors	2026-07-15 04:20:26 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-15 04:02:28 (3 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 09:26:35 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 38.134.139.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 38.134.139.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 05:26:30.484661 2026] [security2:error] [pid 31171:tid 31171] [client 38.134.139.193:25531] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 38.134.139.193 (+1 hits since last alert)\|marianozaro.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "marianozaro.com"] [uri "/xmlrpc.php"] [unique_id "alYAxg8S3k0Zg6-uIQ1a7QAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-07-14 09:24:35 (3 days ago)	(wordpress) Failed wordpress login from 38.134.139.193 (IN/India/-): (CF_ENABLE)	Brute-Force
🇮🇹 A000Z	2026-07-12 05:01:24 (6 days ago)	Fail2Ban: 38.134.139.193 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 38.134.139.193 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-05-06 22:09:29 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2026-05-06 11:12:32 (2 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:9442:3af::5e:55

🇬🇧 198.244.168.152

🇸🇬 173.239.196.170

🇺🇸 172.172.23.207

🇩🇪 167.94.146.32

🇨🇳 140.206.195.19

🇰🇷 111.91.150.186

🇷🇴 92.118.39.71

🇩🇪 69.5.169.166

🇮🇶 65.20.158.10

🇦🇺 16.176.17.247

🇺🇸 8.34.210.48

🇮🇳 223.191.81.216

🇧🇷 187.93.51.46

🇨🇳 119.146.132.156

🇧🇷 38.191.94.152

🇳🇱 34.12.129.58

🇺🇸 216.25.89.78

🇭🇰 199.45.155.104

🇩🇪 139.162.156.169