JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 141.148.184.46

141.148.184.46 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 65%: ?

65%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 141.148.184.46

Whois 141.148.184.46

IP Abuse Reports for 141.148.184.46:

This IP address has been reported a total of 20 times from 13 distinct sources. 141.148.184.46 was first reported on June 24th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-07-14 11:46:49 (1 day ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: /elementor-business-one-page/service/%20 \| 2 dist ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: /elementor-business-one-page/service/%20 \| 2 distinct paths \| UA: Scrapy/2.16.0 (+https://scrapy.org) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-13 00:12:44 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 141.148.184.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 141.148.184.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 20:12:38.416672 2026] [security2:error] [pid 13055:tid 13055] [client 141.148.184.46:48181] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|garyandthegroove.com\|F\|2"] [data ".barebonesgrill.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "garyandthegroove.com"] [uri "/www.barebonesgrill.com"] [unique_id "alQtdvugVeEDk4Z-c8hq5gAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-07-12 00:22:34 (3 days ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇱🇺 conseilgouz	2026-07-11 11:04:48 (4 days ago)	arw-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2026-07-08 16:14:41 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 141.148.184.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 141.148.184.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 12:14:34.727495 2026] [security2:error] [pid 4364:tid 4364] [client 141.148.184.46:31485] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.phantomkennels.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.phantomkennels.com"] [uri "/[email protected]"] [unique_id "ak53atwS23aMFbnm319p-wAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-07-08 15:00:33 (6 days ago)	CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-bad-user-agent	Hacking
🇨🇭 Origon	2026-07-08 14:51:08 (6 days ago)	http-bad-user-agent - IP: 141.148.184.46 - time="2026-07-08T16:51:08+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 141.148.184.46 - time="2026-07-08T16:51:08+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 141.148.184.46 (US/31898) : 4h ban on Ip 141.148.184.46" module=db show less	Bad Web Bot
🇫🇷 LRob	2026-07-07 18:25:29 (1 week ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/acces","/acces/"] \| UA: ["Scrapy/2.16.0 (+http ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/acces","/acces/"] \| UA: ["Scrapy/2.16.0 (+https://scrapy.org)"] show less	Bad Web Bot
🇨🇿 ptlab	2026-07-04 22:45:09 (1 week ago)	Detected php_null_array_access attack from WP-host.	Hacking Web App Attack
🇬🇧 Oakley	2026-07-04 17:38:20 (1 week ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇨🇭 Origon	2026-07-04 08:52:57 (1 week ago)	http-bad-user-agent - IP: 141.148.184.46 - time="2026-07-04T10:52:56+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 141.148.184.46 - time="2026-07-04T10:52:56+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 141.148.184.46 (US/31898) : 4h ban on Ip 141.148.184.46" module=db show less	Bad Web Bot
🇺🇸 ipblock.com	2026-07-02 00:26:00 (1 week ago)	IPBlock protected site ID [4055-d][s=03]. Rogue crawler, does not respect robots.txt	Bad Web Bot
🇨🇭 Origon	2026-07-01 03:01:43 (2 weeks ago)	http-bad-user-agent - IP: 141.148.184.46 - time="2026-07-01T05:01:42+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 141.148.184.46 - time="2026-07-01T05:01:42+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 141.148.184.46 (US/31898) : 4h ban on Ip 141.148.184.46" module=db show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-27 22:57:22 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 141.148.184.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 141.148.184.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 18:57:16.252432 2026] [security2:error] [pid 22725:tid 22725] [client 141.148.184.46:32753] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/Gesture/Thumbs.db"] [unique_id "akBVTFVKsBPmjesrIiGgswAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-06-27 07:08:43 (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-bad-user-agent.	Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.231.199.148

🇨🇦 165.22.234.189

🇺🇸 81.30.98.90

🇺🇦 194.156.249.154

🇨🇳 115.182.75.28

🇭🇰 114.111.54.189

🇨🇳 106.75.153.103

🇮🇩 103.90.27.83

🇺🇸 81.30.98.81

🇷🇺 79.135.240.99

🇺🇸 34.227.163.200

🇫🇷 13.140.189.130

🇺🇸 2.58.202.98

🇨🇳 220.175.88.67

🇬🇧 87.236.176.21

🇺🇸 20.124.124.70

🇺🇸 20.51.198.196

🇺🇸 172.217.113.4

🇺🇸 172.172.87.196

🇩🇿 154.241.154.211