JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.54.236.97

142.54.236.97 was found in our database!

This IP was reported 473 times. Confidence of Abuse is 45%: ?

45%

ISP	Performive LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46562
Hostname(s)	ip-142-54-236-97.hosts.zerolag.com
Domain Name	performive.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.54.236.97

Whois 142.54.236.97

IP Abuse Reports for 142.54.236.97:

This IP address has been reported a total of 473 times from 135 distinct sources. 142.54.236.97 was first reported on August 20th 2021, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jkhorvath.com	2026-07-13 05:42:16 (7 hours ago)	Request for URL https:/www.zapmeta.com/?q=206.123.156.240%3A4765&vid=7ae5a7c6-de3a-4698-9927-2786000 ... show more Request for URL https:/www.zapmeta.com/?q=206.123.156.240%3A4765&vid=7ae5a7c6-de3a-4698-9927-2786000b79b6 show less	Phishing Brute-Force Web App Attack
🇺🇸 xmission.com	2026-07-09 01:21:59 (4 days ago)	Blocked by UFW (TCP on 9101) Source port: 38722 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 38722 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 142.54.236.97) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 big-cloud.nl	2026-07-07 09:31:16 (6 days ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 big-cloud.nl	2026-06-29 06:17:22 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 xmission.com	2026-06-28 19:44:39 (2 weeks ago)	Blocked by UFW (TCP on 9101) Source port: 57824 TTL: 51 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 57824 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 142.54.236.97) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 oncord	2026-06-22 19:30:28 (2 weeks ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-06-21 04:18:07 (3 weeks ago)	(mod_security) mod_security (id:210831) triggered by 142.54.236.97 (ip-142-54-236-97.hosts.zerolag.c ... show more (mod_security) mod_security (id:210831) triggered by 142.54.236.97 (ip-142-54-236-97.hosts.zerolag.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 00:18:02.052619 2026] [security2:error] [pid 17824:tid 17824] [client 142.54.236.97:59888] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/"] [unique_id "ajdl-oW4qTGu_hXJtlpCLwAAAAE"], referer: http://backstore.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-11 06:53:48 (1 month ago)	Try to access /xmlrpc.php	Web App Attack
🇫🇷 masterguru	2026-06-11 01:15:43 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 142.54.236.97 (US/United States/ip-142-54-236- ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 142.54.236.97 (US/United States/ip-142-54-236-97.hosts.zerolag.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 bescared	2026-06-10 09:35:00 (1 month ago)	WAF (2) - Malicious activity detected: URL probing.	Bad Web Bot Web App Attack Hacking
Anonymous	2026-06-08 13:02:47 (1 month ago)	VELIEDE WEBFORM SPAM 142.54.236.97 (ip-142-54-236-97.hosts.zerolag.com)	Web Spam
🇫🇷 masterguru	2026-06-07 06:39:11 (1 month ago)	(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 142.54.236.97 (US/United States/ip- ... show more (modsec_2000110) ModSec 2000110: Malicious username admlnlx from 142.54.236.97 (US/United States/ip-142-54-236-97.hosts.zerolag.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇬🇧 Mendip_Defender	2026-05-30 02:06:49 (1 month ago)	142.54.236.97 - - [30/May/2026:03:06:38 +0100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 400 4194 "htt ... show more 142.54.236.97 - - [30/May/2026:03:06:38 +0100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 400 4194 "https://4x4response.uk/?u=3907" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 142.54.236.97 - - [30/May/2026:03:06:40 +0100] "GET /wp-admin/admin-ajax.php?action=register HTTP/1.1" 400 4356 "https://4x4response.uk/wp-admin/admin-ajax.php" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 142.54.236.97 - - [30/May/2026:03:06:46 +0100] "POST /xmlrpc.php HTTP/1.1" 403 146 "https://4x4response.uk/?u=3907" "PHP/6.3.36" ... show less	Hacking Web App Attack
🇨🇭 4server	2026-05-27 03:25:48 (1 month ago)	[WedMay2705:25:40.4755912026][security2:error][pid1010605:tid1010832][client142.54.236.97:0]ModSecur ... show more [WedMay2705:25:40.4755912026][security2:error][pid1010605:tid1010832][client142.54.236.97:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\[\?\(url\\|link$\?=\?\\\\\"\?\?https\?://.\\\\\\\\\[\?$url\\|link$\?=\?\\\\\"\?\?https\?://.\\\\\\\\\[\?$url\\|link$\?=\?\\\\\"\?\?https\?://.\\\\\\\\\[\?$url\\|link$\?=\?\\\\\"\?\?https\?:/\\|$\\\\\\\\[\?\(url\\|link$\?\\\\\\\\]https\?://.\\\\\\\\\[\?/\?$url\\|link$\?\\\\\\\\].\*\){4\,}\)\"atARGS:message.[file\"/etc/apache2/conf.d/modsec_rules/30_asl_antispam.conf\"][line\"126\"][id\"300079\"][rev\"18\"][msg\"Atomicorp.comWAFAntiSpamRules:PossibleSpam:Multipleembeddedurlsinargument$Disableifyouwishtoallow4ormoreURLsinapost$\"][data\"4205foundwithinARGS:message:topchildpornlinkwebsites[url=https://lloyd-derm.com/about-us/the-providers/dr-jenifer-r-lloyd-do-faad/]childpornlink\,cpfortradeonly\,dmforcp\,sendcpfirst\,verifiedcptraderhttps://lloyd-derm.com/about-us/the-providers/dr-jenifer-r-lloyd-do-faad/[/url]childpornlinkpreteensexvideo\! show less	Hacking Web App Attack
🇺🇸 xmission.com	2026-05-24 07:34:19 (1 month ago)	Blocked by UFW (TCP on 9101) Source port: 49212 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 49212 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 142.54.236.97) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 473 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2404:6800:4003:c26::123

🇹🇭 150.95.82.21

🇨🇳 139.212.71.7

🇷🇺 91.219.196.17

🇮🇩 36.78.222.106

🇮🇹 156.54.169.18

🇮🇳 117.219.14.193

🇹🇷 94.154.43.181

🇳🇱 91.92.40.240

🇺🇸 74.249.177.87

🇬🇧 51.195.253.154

🇺🇸 50.84.211.204

🇨🇳 42.234.59.95

🇺🇸 40.112.183.29

🇯🇵 8.216.17.250

🇺🇸 2604:9a00:1:109:1c00:1cff:fe00:67c

🇺🇸 104.238.222.26

🇹🇷 91.227.6.61

🇱🇹 81.30.98.142

🇬🇧 81.19.219.202