JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 141.11.146.77

141.11.146.77 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 39%: ?

39%

ISP	PT Lancar Jaya Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS134972
Domain Name	lancarjaya.net.id
Country	🇭🇰 Hong Kong
City	Kwai Chung, Kwai Tsing District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 141.11.146.77

Whois 141.11.146.77

IP Abuse Reports for 141.11.146.77:

This IP address has been reported a total of 21 times from 12 distinct sources. 141.11.146.77 was first reported on February 3rd 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 14:49:46 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 10:49:42.437525 2026] [security2:error] [pid 18724:tid 18804] [client 141.11.146.77:63538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ethicmark.org"] [uri "/.env"] [unique_id "akkdhoS2K2WtjI3fHVZmFgAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-03 15:55:36 (1 day ago)	Aggressive web search of vulnerable pages: /wp-json/ /.env /.env.local /docker-compose.yml /docker-c ... show more Aggressive web search of vulnerable pages: /wp-json/ /.env /.env.local /docker-compose.yml /docker-compose.override.yml /config.yml /config/dat ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 15:00:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 11:00:04.227593 2026] [security2:error] [pid 11219:tid 11219] [client 141.11.146.77:14527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dentsville398.org"] [uri "/.env.staging"] [unique_id "akfOdK-5XYgKL8ZOOkR-vwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 07:00:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 03:00:23.315842 2026] [security2:error] [pid 29627:tid 29627] [client 141.11.146.77:51095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ctjcisenate.org"] [uri "/.env.development"] [unique_id "akdeB1gK3OKabXQ3R_fKwgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 06:21:14 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:21:06.515493 2026] [security2:error] [pid 12802:tid 12852] [client 141.11.146.77:59571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daviscountyossr.org"] [uri "/wp-config.php.bak"] [unique_id "akdU0uXvAwbx9B2CWJ1ZXQAAAVE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 18:21:00 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 14:20:52.616222 2026] [security2:error] [pid 31537:tid 31537] [client 141.11.146.77:2663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "conquesticon.org"] [uri "/.env.local"] [unique_id "akasBH0phKJ7FwgFJs2YgAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 09:20:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:20:51.855851 2026] [security2:error] [pid 24319:tid 24319] [client 141.11.146.77:35892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "circleway.org"] [uri "/.env.development"] [unique_id "akYtcw5mND2fyVZ2C8VAUQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 20:09:24 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 16:09:19.411330 2026] [security2:error] [pid 28289:tid 28289] [client 141.11.146.77:1861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "budinger.org"] [uri "/.env"] [unique_id "akVz7z64vVyGfoJZE_4JSgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 18:53:59 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 14:53:53.619737 2026] [security2:error] [pid 26950:tid 27034] [client 141.11.146.77:2615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bronnimann.org"] [uri "/.env.local"] [unique_id "akViQW_Ojv9vTO6tS-a47AAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 blinx	2026-06-28 10:25:04 (6 days ago)	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-06-28 04:07:54 (6 days ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-26 21:09:01 (1 week ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice02,mx01,mx02,mx03]	Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-26 19:06:01 (1 week ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 22:25:19 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 141.11.146.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 18:25:09.020273 2026] [security2:error] [pid 19043:tid 19043] [client 141.11.146.77:49637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ospectra.ai"] [uri "/.env.example"] [unique_id "ajxZRYZilaf55lYUUt2wLwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mccsoft.io	2026-06-24 12:14:10 (1 week ago)	Web application attack / vulnerability scanning. Source sent 2 HTTP request(s) (2 distinct paths) to ... show more Web application attack / vulnerability scanning. Source sent 2 HTTP request(s) (2 distinct paths) to our public nginx web server on TCP 80/443, probing blocked/sensitive paths; all returned HTTP 444 (connection closed by security rule, jail nginx-444). Sample requests: GET /api/v1/namespaces/default/secrets \| GET /.zshrc. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) V. Observed 2026-06-24 12:12:27 to 2026-06-24 12:12:40 UTC. TCP handshake completed (requests fully received). Categories: Web App Attack / Bad Web Bot. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.101.68.88

🇫🇷 185.245.182.49

🇺🇸 165.227.62.47

🇭🇰 165.154.41.90

🇭🇰 152.32.215.244

🇨🇳 123.154.132.11

🇨🇳 118.145.104.37

🇺🇸 103.143.238.100

🇺🇸 66.132.186.171

🇱🇹 62.60.130.219

🇺🇸 47.251.164.231

🇹🇷 45.43.154.6

🇩🇪 209.50.190.224

🇺🇸 162.216.150.36

🇺🇸 162.216.149.43

🇰🇷 162.158.138.127

🇺🇸 147.185.132.181

🇺🇸 147.185.132.170

🇺🇸 147.185.132.107

🇵🇭 136.158.39.19