JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.146.119.227

129.146.119.227 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 0%: ?

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.146.119.227

Whois 129.146.119.227

IP Abuse Reports for 129.146.119.227:

This IP address has been reported a total of 26 times from 10 distinct sources. 129.146.119.227 was first reported on January 3rd 2025, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2025-01-05 01:15:54 (1 year ago)	129.146.119.227 - - [05/Jan/2025:03:15:54 +0200] "GET /.env HTTP/1.1" 404 499 "-" "Mozilla/5.0 (X11; ... show more 129.146.119.227 - - [05/Jan/2025:03:15:54 +0200] "GET /.env HTTP/1.1" 404 499 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 129.146.119.227 - - [05/Jan/2025:03:15:54 +0200] "GET /.env HTTP/1.1" 404 499 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-01-05 00:54:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 04 19:54:42.135677 2025] [security2:error] [pid 19723:tid 19723] [client 129.146.119.227:57173] [client 129.146.119.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cityoffoley.gov"] [uri "/.env"] [unique_id "Z3nYUkWmMj78uqHow_ekrgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-05 00:40:41 (1 year ago)	Probing to gain illegal access	Web App Attack
🇺🇸 TPI-Abuse	2025-01-04 22:10:40 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 04 17:10:34.545329 2025] [security2:error] [pid 3262996:tid 3262996] [client 129.146.119.227:64934] [client 129.146.119.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webwzl.com"] [uri "/.env"] [unique_id "Z3mx2hre4DUXul_LtRm1mgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 franz	2025-01-04 20:59:00 (1 year ago)	"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/ ... show more "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-01-04 17:33:37 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 04 12:33:30.948811 2025] [security2:error] [pid 2097690:tid 2097690] [client 129.146.119.227:53655] [client 129.146.119.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lbee.com"] [uri "/.env"] [unique_id "Z3lw6r1qx0kLOF6pQtsYUgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2025-01-04 15:10:16 (1 year ago)	Scanning for Laravel vulnerabilities	Web App Attack
🇫🇮 paissangroup	2025-01-04 14:12:45 (1 year ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-01-04 12:38:20 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 04 07:38:14.721249 2025] [security2:error] [pid 799209:tid 799209] [client 129.146.119.227:65314] [client 129.146.119.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icbsmonitor.net"] [uri "/.env"] [unique_id "Z3krthw8eVo33q8X15LzJwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 advena	2025-01-04 12:15:55 (1 year ago)	129.146.119.227 (AS31898 ORACLE-BMC-31898) was intercepted at 2025-01-04T12:07:34Z after violating W ... show more 129.146.119.227 (AS31898 ORACLE-BMC-31898) was intercepted at 2025-01-04T12:07:34Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇺🇸 Epimetheus	2025-01-04 10:10:33 (1 year ago)	Unauthorized access attempts: From: 129.146.119.227 Method: HTTP GET URI Path: /.env UA: "Mo ... show more Unauthorized access attempts: From: 129.146.119.227 Method: HTTP GET URI Path: /.env UA: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2025-01-04 08:35:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 04 03:35:06.746834 2025] [security2:error] [pid 21524:tid 21524] [client 129.146.119.227:50655] [client 129.146.119.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "954glass.com"] [uri "/.env"] [unique_id "Z3jyultuSas_eZay2s6djAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-04 08:35:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 04 03:35:07.432331 2025] [security2:error] [pid 18809:tid 18809] [client 129.146.119.227:58521] [client 129.146.119.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stananddana.com"] [uri "/.env"] [unique_id "Z3jyu8lio9WFhN1JQ7CSUgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-04 07:23:30 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 04 02:23:22.992991 2025] [security2:error] [pid 18721:tid 18721] [client 129.146.119.227:49956] [client 129.146.119.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "techworksunlimited.com"] [uri "/.env"] [unique_id "Z3jh6uR8RaMs1FfnzHtt2AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-04 07:04:21 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 129.146.119.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 04 02:04:15.872935 2025] [security2:error] [pid 26655:tid 26655] [client 129.146.119.227:64838] [client 129.146.119.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acquivest.net"] [uri "/.env"] [unique_id "Z3jdbx3vS6mfeD0HJRrNAAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.74.240.254

🇺🇸 216.73.217.71

🇷🇺 195.112.111.130

🇸🇬 151.192.163.216

🇮🇳 143.110.247.221

🇦🇺 118.211.165.46

🇻🇳 103.237.144.204

🇺🇸 91.230.168.122

🇪🇬 41.128.145.127

🇭🇰 35.220.200.58

🇨🇱 34.176.71.136

🇹🇼 34.80.128.31

🇸🇪 31.59.160.12

🇩🇪 5.175.188.71

🇮🇪 3.253.53.203

🇬🇧 217.60.78.71

🇺🇸 147.182.136.122

🇺🇸 107.22.139.7

🇵🇰 103.134.238.222

🇬🇧 45.82.76.132