JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.246.120.143

140.246.120.143 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 42%: ?

42%

ISP	CHINANET SHANDONG PROVINCE NETWORK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58519
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Guiyang, Guizhou

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.246.120.143

Whois 140.246.120.143

IP Abuse Reports for 140.246.120.143:

This IP address has been reported a total of 17 times from 7 distinct sources. 140.246.120.143 was first reported on June 25th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-17 22:01:19 (3 days ago)	Auto-ban: >3000 req/min op 2026-07-17	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-17 17:26:42 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:26:36.174096 2026] [security2:error] [pid 1461778:tid 1461782] [client 140.246.120.143:58182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalattorney.biz.aafm.us"] [uri "/.env.production"] [unique_id "alplzHKZfzaLQTwehz7rfwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 11:08:59 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:08:54.988910 2026] [security2:error] [pid 32672:tid 32672] [client 140.246.120.143:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pixacast.com"] [uri "/.env.development"] [unique_id "aloNRkbNlgQaNvp5UMHRWQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 10:44:47 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:44:39.522637 2026] [security2:error] [pid 11563:tid 11563] [client 140.246.120.143:59763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "advantagebrandservices.advantageinvestigation.com"] [uri "/.env.production"] [unique_id "aloHl81LSJF1ZKDD3cXpzgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:48:21 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:48:15.262958 2026] [security2:error] [pid 433690:tid 433690] [client 140.246.120.143:47302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desoucey.com"] [uri "/.env.development"] [unique_id "alneP1Z1Rmu-fJYsAXYYyQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 03:09:03 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:08:55.144833 2026] [security2:error] [pid 152172:tid 152172] [client 140.246.120.143:50093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easyweb-publishing.com"] [uri "/.env~"] [unique_id "almcx5ys_tfqaEt15tmDfQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 02:50:16 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 22:50:08.802071 2026] [security2:error] [pid 26187:tid 26187] [client 140.246.120.143:48175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brownbarn.com"] [uri "/.env.old"] [unique_id "almYYEdU0pL-PxAMTABsVgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-16 21:53:48 (4 days ago)	[ThuJul1623:53:43.7588102026][security2:error][pid1473269:tid1473551][client140.246.120.143:0]ModSec ... show more [ThuJul1623:53:43.7588102026][security2:error][pid1473269:tid1473551][client140.246.120.143:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"aidweb.ch.81-17-25-250.cpanel.site\"][uri\"/.env.tmp\"][unique_id\"allS51EJcC0OZPhx3AedUAAAARE\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 20:10:55 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:10:52.002529 2026] [security2:error] [pid 32716:tid 32716] [client 140.246.120.143:58177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icansayit.com"] [uri "/.env.prod"] [unique_id "alk6zMjoVXiKkUYrwCONsAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 19:05:15 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 15:05:08.043146 2026] [security2:error] [pid 23540:tid 23540] [client 140.246.120.143:48451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rancomfl.gregorii.com"] [uri "/.env.example"] [unique_id "alkrZKlTw0zTpYtDH4muHgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-16 18:52:46 (4 days ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-16 17:31:14 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 140.246.120.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:31:07.771554 2026] [security2:error] [pid 5400:tid 5400] [client 140.246.120.143:56887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bobfaw.com"] [uri "/.env.development.local"] [unique_id "alkVWyHyCsaNdGzUlSY9HAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 17:20:02 (4 days ago)	\| [Dangerous/China] Aggressive IP 140.246.120.143 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/China] Aggressive IP 140.246.120.143 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 mnsf	2026-06-27 09:05:14 (3 weeks ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-26 22:03:11 (3 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-25. show less	Web App Attack SSH Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 217.160.163.127

🇩🇪 217.160.134.38

🇨🇱 216.155.93.75

🇺🇸 185.180.141.45

🇮🇳 182.95.116.190

🇨🇳 182.88.26.34

🇧🇷 179.164.48.238

🇧🇬 103.155.93.171

🇳🇱 91.92.40.153

🇲🇽 69.6.207.207

🇨🇳 60.208.125.156

🇳🇱 52.101.69.57

🇳🇱 45.148.10.151

🇸🇬 217.142.185.108

🇳🇱 217.103.42.129

🇺🇸 216.73.163.91

🇦🇴 193.163.125.171

🇩🇪 167.94.145.16

🇧🇬 79.124.56.250

🇩🇪 69.5.169.193