AbuseIPDB » 136.0.184.11
136.0.184.11 was found in our database!
This IP was reported 7 times. Confidence of
Abuse
is 11% : ?
ISP
Ace Data Centers II, L.L.C.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS395954
Hostname(s)
136-0-184-11.ips.acedatacenter.com
Domain Name
acedatacenter.com
Country
๐บ๐ธ
United States of America
City
Los Angeles, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 136.0.184.11 :
This IP address has been reported a total of
7
times from
4 distinct
sources.
136.0.184.11 was first reported on
May 31st 2025 , and the most recent report was
1 day ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-07-14 20:00:32
(1 day ago)
| SQL injection attempt.
Web App Attack
Hacking
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-06-01 03:03:31
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 136.0.184.11 (136-0-184-11.ips.acedatacenter.co ...
show more
(mod_security) mod_security (id:210730) triggered by 136.0.184.11 (136-0-184-11.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 23:03:23.798512 2026] [security2:error] [pid 7572:tid 7672] [client 136.0.184.11:45457] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.kettlehill.net|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.kettlehill.net"] [uri "/footer.php.bak"] [unique_id "ahz2e4dYk5YR-blX3soZnwAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-01 11:22:23
(5 months ago)
(mod_security) mod_security (id:212620) triggered by 136.0.184.11 (136-0-184-11.ips.acedatacenter.co ...
show more
(mod_security) mod_security (id:212620) triggered by 136.0.184.11 (136-0-184-11.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:22:11.235296 2026] [security2:error] [pid 16722:tid 16895] [client 136.0.184.11:49579] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||ftp.kettlehill.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /wp-login.php?action=register&redirect_to=x\\x22><script>alert(document.domain)</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.kettlehill.com"] [uri "/wp-login.php"] [unique_id "aX83Y8yMbG6v0xSDvGJSOQAAAsk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-01 06:17:15
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 136.0.184.11 (136-0-184-11.ips.acedatacenter.co ...
show more
(mod_security) mod_security (id:210730) triggered by 136.0.184.11 (136-0-184-11.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 01:17:11.773049 2025] [security2:error] [pid 31256:tid 31277] [client 136.0.184.11:53549] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.kettlehill.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.kettlehill.com"] [uri "/admin/logs/error.log"] [unique_id "aS0y5228JkE_f6YcP876mAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฟ
lp
2025-06-01 19:50:04
(1 year ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 136.0.184.11
2025-06-01T20:32:46+02:0 ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 136.0.184.11
2025-06-01T20:32:46+02:00 vpn Access-Reject 'muller_k' station: 136.0.184.11 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-01T20:43:19+02:00 vpn Access-Reject 'cz_v' station: 136.0.184.11 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-01T21:11:54+02:00 vpn Access-Reject 'sedivalibuse' station: 136.0.184.11 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-01T21:15:19+02:00 vpn Access-Reject 'cz_vse' station: 136.0.184.11 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2025-06-01 13:49:39
(1 year ago)
Unauthorized VPN login attempts: 6 attempts were recorded from 136.0.184.11
2025-06-01T14:23:34+02:0 ...
show more
Unauthorized VPN login attempts: 6 attempts were recorded from 136.0.184.11
2025-06-01T14:23:34+02:00 vpn Access-Reject 'jana' station: 136.0.184.11 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-01T14:27:17+02:00 vpn Access-Reject 'saldova-helena' station: 136.0.184.11 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-01T15:01:22+02:00 vpn Access-Reject 'hudcekova-j' station: 136.0.184.11 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-01T15:03:26+02:00 vpn Access-Reject 'vklara' station: 136.0.184.11 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-01T15:35:38+02:00 vpn Access-Reject 'pacakova_jana' station: 136.0.184.11 auth-type: - realm: vse.cz nas
show less
Brute-Force
Web App Attack
๐จ๐ฆ
wil.com
2025-05-31 17:41:44
(1 year ago)
GlobalProtect login attempts with user teen-t.
VPN IP
Brute-Force
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: