JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.111.152.129

142.111.152.129 was found in our database!

This IP was reported 118 times. Confidence of Abuse is 65%: ?

65%

ISP	Ace Data Centers II, L.L.C.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	acedatacenter.com
Country	🇺🇸 United States of America
City	Houston, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.111.152.129

Whois 142.111.152.129

IP Abuse Reports for 142.111.152.129:

This IP address has been reported a total of 118 times from 57 distinct sources. 142.111.152.129 was first reported on March 19th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-26 23:14:16 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 142.111.152.129 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 142.111.152.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 19:13:30.587711 2026] [security2:error] [pid 13653:tid 13653] [client 142.111.152.129:63397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.43"] [uri "/app/config/.env"] [unique_id "ao9zGqat2ubSwIxnkuneewAAADg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 16:49:16 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 142.111.152.129 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 142.111.152.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 12:48:46.809076 2026] [security2:error] [pid 4415:tid 4429] [client 142.111.152.129:53175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.129"] [uri "/base/.env"] [unique_id "ao8Y7hC_uvzrkU5Ph4VGKwAAAIs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Halux	2026-08-26 15:35:19 (15 hours ago)	142.111.152.129 Probing protected path or service	Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 08:07:14 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 142.111.152.129 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 142.111.152.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 04:06:55.219553 2026] [security2:error] [pid 32072:tid 32134] [client 142.111.152.129:53725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.24"] [uri "/laravel/.env"] [unique_id "ao6enzH-mGsmjCKOCdOYHAAAAZM"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 oalver	2026-08-24 16:19:21 (2 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-03. Risk score: 60/100. show less	Web App Attack
🇫🇮 YF	2026-08-23 17:00:34 (3 days ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
Anonymous	2026-08-22 13:29:01 (4 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-08-21 00:07:43 (6 days ago)	WordPress login brute-force \| path: /wp-login.php	Brute-Force Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-16 18:10:56 (1 week ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇮🇹 CoreTech srl	2026-08-16 05:28:57 (1 week ago)	cloudlinux2 fail2ban: 2026-08-16 07:24:56,685 fail2ban.actions [1791]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-16 07:24:56,685 fail2ban.actions [1791]: NOTICE [plesk-modsecurity] Ban 182.70.183.136cloudlinux2 fail2ban: 2026-08-16 07:24:56,837 fail2ban.filter [1791]: INFO [recidive] Found 182.70.183.136 - 2026-08-16 07:24:56cloudlinux2 fail2ban: 2026-08-16 07:24:56,122 fail2ban.filter [1791]: INFO [plesk-modsecurity] Found 182.70.183.136 - 2026-08-16 07:24:56cloudlinux2 fail2ban: 2026-08-16 07:25:43,788 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 45.146.54.74 - 2026-08-16 07:25:41cloudlinux2 fail2ban: 2026-08-16 07:25:40,216 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 142.111.152.129 - 2026-08-16 07:25:38cloudlinux2 fail2ban: 2026-08-16 07:25:39,728 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 142.111.152.19 - 2026-08-16 07:25:38cloudlinux2 fail2ban: 2026-08-16 07:25:43,686 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 45.146.54.71 - 2026-08-16 07:25:41cloudlinux2 fail2ban: 2026-08-16 show less	FTP Brute-Force Web App Attack
🇺🇸 WizardsToolkit	2026-08-16 03:54:21 (1 week ago)	attempted to access	Web App Attack
Anonymous	2026-08-06 19:21:11 (2 weeks ago)	Failed Wordpress Logins	Web App Attack
🇳🇱 MyGlobalFlowers	2026-08-05 13:55:10 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇹🇷 oalver	2026-08-03 21:28:49 (3 weeks ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-03. Risk score: 30/100. show less	Web App Attack
Anonymous	2026-08-02 19:48:16 (3 weeks ago)	Failed Wordpress Logins	Web App Attack

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.39

🇺🇸 23.234.113.209

🇫🇷 5.135.71.167

🇺🇸 2602:80d:1007::79

🇷🇴 193.32.162.218

🇨🇳 171.112.158.43

🇫🇷 157.143.170.246

🇩🇪 151.243.11.159

🇬🇧 145.239.200.55

🇨🇦 144.217.79.205

🇮🇳 122.183.45.138

🇺🇦 91.211.134.62

🇨🇦 85.217.149.70

🇫🇮 37.27.241.242

🇺🇸 18.222.28.39

🇸🇬 13.214.139.225

🇺🇿 213.230.86.69

🇫🇷 212.83.181.139

🇺🇸 162.216.150.79

🇺🇸 162.216.149.198