JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 141.148.138.247

141.148.138.247 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 66%: ?

66%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 141.148.138.247

Whois 141.148.138.247

IP Abuse Reports for 141.148.138.247:

This IP address has been reported a total of 24 times from 13 distinct sources. 141.148.138.247 was first reported on June 24th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 2000cn.com.au	2026-07-14 03:16:14 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 LRob	2026-07-13 23:04:31 (11 hours ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: /fr/cas-clients/inemotion-support-multilingue-ino ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: /fr/cas-clients/inemotion-support-multilingue-inocx \| 2 distinct paths \| UA: Scrapy/2.16.0 (+https://scrapy.org) show less	Bad Web Bot
🇩🇪 LRob	2026-07-12 21:00:46 (1 day ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/fr/cas-clients/groupe-realites","/fr/success-s ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/fr/cas-clients/groupe-realites","/fr/success-stories/realites-group/"] \| UA: ["Scrapy/2.16.0 (+https://scrapy.org)"] show less	Bad Web Bot
Anonymous	2026-07-12 16:57:04 (1 day ago)	Detected by CrowdSec: crowdsecurity/http-bad-user-agent	Web App Attack
🇩🇪 LRob	2026-07-11 21:43:54 (2 days ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/7emes-journees-nationales-du-don-agricole-mobi ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/7emes-journees-nationales-du-don-agricole-mobilisation-record?%2F=","/7emes-journees-nationales-du-don-agricole-mobilisation-record/?%2F="] \| UA: ["Scrapy/2.16.0 (+https://scrapy.org)"] show less	Bad Web Bot
🇩🇪 LRob	2026-07-11 10:49:16 (3 days ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/nouvelle-aquitaine/vous-souhaitez-faire-un-don ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/nouvelle-aquitaine/vous-souhaitez-faire-un-don-2","/nouvelle-aquitaine/vous-souhaitez-faire-un-don-2/"] \| UA: ["Scrapy/2.16.0 (+https://scrapy.org)"] show less	Bad Web Bot
🇩🇪 LRob	2026-07-11 06:34:09 (3 days ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/hauts-de-france/2025/10/29/solaal-hauts-de-fra ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/hauts-de-france/2025/10/29/solaal-hauts-de-france-7-ans-de-dons-agricoles-au-service-de-la-solidarite-3","/hauts-de-france/2025/10/29/solaal-hauts-de-france-7-ans-de-dons-agricoles-au-service-de-la-solidarite-3/"] \| UA: ["Scrapy/2.16.0 (+https://scrapy.org)"] show less	Bad Web Bot
🇩🇪 LRob	2026-07-11 04:16:12 (3 days ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/decouvrez-lassociation/les-associations-daide- ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/decouvrez-lassociation/les-associations-daide-alimentaire?%2F=","/decouvrez-lassociation/les-associations-daide-alimentaire/?%2F="] \| UA: ["Scrapy/2.16.0 (+https://scrapy.org)"] show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-07 15:36:01 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 141.148.138.247 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 141.148.138.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 11:35:56.469512 2026] [security2:error] [pid 2973:tid 2973] [client 141.148.138.247:36785] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.andrejblatnik.com\|F\|2"] [data ".dalkeyarchive.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.andrejblatnik.com"] [uri "/www.dalkeyarchive.com"] [unique_id "ak0c3AqzQbEQRkO5Cw5SwQAAADQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-07-07 08:33:33 (1 week ago)	http-bad-user-agent - IP: 141.148.138.247 - time="2026-07-07T10:33:33+02:00" level=info msg="(555f6 ... show more http-bad-user-agent - IP: 141.148.138.247 - time="2026-07-07T10:33:33+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 141.148.138.247 (US/31898) : 4h ban on Ip 141.148.138.247" module=db show less	Bad Web Bot
🇬🇧 Oakley	2026-07-05 12:37:57 (1 week ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇳🇱 Roderic	2026-07-04 11:35:00 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇺🇸 SYSMarshal	2026-07-01 21:33:14 (1 week ago)	SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port: ... show more SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152] show less	Port Scan Web App Attack Bad Web Bot
🇨🇭 Origon	2026-06-30 21:59:37 (1 week ago)	http-bad-user-agent - IP: 141.148.138.247 - time="2026-06-30T23:59:37+02:00" level=info msg="(555f6 ... show more http-bad-user-agent - IP: 141.148.138.247 - time="2026-06-30T23:59:37+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 141.148.138.247 (US/31898) : 4h ban on Ip 141.148.138.247" module=db show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-29 02:52:29 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 141.148.138.247 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 141.148.138.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 22:52:22.874481 2026] [security2:error] [pid 22257:tid 22257] [client 141.148.138.247:52600] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.dalessalesandservice.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dalessalesandservice.com"] [uri "/repairs/[email protected]"] [unique_id "akHd5hixOhVIY_PBLHnShQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 167.99.64.59

🇺🇸 132.148.29.10

🇮🇳 106.219.170.86

🇻🇳 103.172.236.241

🇺🇸 97.107.137.219

🇩🇪 47.254.144.111

🇲🇾 47.250.160.227

🇫🇷 2001:41d0:33a:a00::402

🇧🇷 205.210.31.201

🇮🇹 185.15.171.228

🇳🇱 172.94.9.136

🇺🇸 165.154.134.203

🇺🇸 162.216.149.221

🇺🇸 162.216.149.212

🇺🇸 162.216.149.41

🇨🇳 121.229.13.210

🇺🇸 103.143.231.2

🇫🇷 91.231.89.194

🇺🇸 65.49.1.153

🇳🇱 45.153.34.16