JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 147.124.214.112

147.124.214.112

Recent Activity

42 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Majestic Hosting Solutions, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS396073

Domain Name

spinservers.com

Country

🇺🇸 United States of America

City

Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 147.124.214.112:

This IP address has been reported a total of 42 times from 24 distinct sources. 147.124.214.112 was first reported on February 6th 2026, and the most recent report was 7 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 13 reports; Germany with 5 reports; Netherlands with 4 reports. The most common categories in these recent reports were: Web App Attack 30 times; Bad Web Bot 15 times; Brute-Force 13 times; Hacking 5 times; Port Scan 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-09-12 12:33:56 (7 minutes ago)	cloudlinux2 fail2ban: 2026-09-12 14:28:49,244 fail2ban.filter [1606]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-09-12 14:28:49,244 fail2ban.filter [1606]: INFO [plesk-wordpress] Found 193.56.116.108 - 2026-09-12 14:28:48cloudlinux2 fail2ban: 2026-09-12 14:28:53,409 fail2ban.filter [1606]: INFO [plesk-wordpress] Found 193.56.116.108 - 2026-09-12 14:28:53cloudlinux2 fail2ban: 2026-09-12 14:29:12,679 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 93.34.146.226 - 2026-09-12 14:29:12cloudlinux2 fail2ban: 2026-09-12 14:29:13,031 fail2ban.actions [1606]: NOTICE [plesk-modsecurity] Ban 93.34.146.226cloudlinux2 fail2ban: 2026-09-12 14:29:13,021 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 93.34.146.226 - 2026-09-12 14:29:13cloudlinux2 fail2ban: 2026-09-12 14:29:12,662 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 93.34.146.226 - 2026-09-12 14:29:12cloudlinux2 fail2ban: 2026-09-12 14:29:13,033 fail2ban.filter [1606]: INFO [recidive] Found 93.34.146.226 - 2026-09-12 14:29:13cloudlinux2 fail2ban: 2026-09- show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 11:52:15 (48 minutes ago)	(mod_security) mod_security (id:210492) triggered by 147.124.214.112 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 147.124.214.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 07:52:12.016848 2026] [security2:error] [pid 1182:tid 1182] [client 147.124.214.112:35662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prezence.com"] [uri "/.env"] [unique_id "aqU87B8qJneghfzXPWfzcgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 11:33:53 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 147.124.214.112 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 147.124.214.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 07:33:46.471887 2026] [security2:error] [pid 16987:tid 16987] [client 147.124.214.112:37352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loupgaroupress.freerein.info"] [uri "/.env"] [unique_id "aqU4mv9EVKwVgLGkAa765AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2026-09-12 11:29:55 (1 hour ago)	Login credentials theft attempt	Hacking
🇩🇪 Teufel100	2026-09-12 11:21:42 (1 hour ago)	ModSecurity rejected a query	Brute-Force Hacking Web App Attack
🇳🇱 Alt255	2026-09-12 10:13:58 (2 hours ago)	147.124.214.112 - - [12/Sep/2026:12:13:57 +0200] "GET /.env HTTP/1.1" 404 11844 "-" "Mozilla/5.0 (X1 ... show more 147.124.214.112 - - [12/Sep/2026:12:13:57 +0200] "GET /.env HTTP/1.1" 404 11844 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-12 10:10:43 (2 hours ago)	Repeated exploit attempts, for example: / Access denied with code 406 (phase 2), Failed to lock glob ... show more Repeated exploit attempts, for example: / Access denied with code 406 (phase 2), Failed to lock global mutex: Invalid argument (HTTP/1.1 port 443) show less	Web App Attack
Anonymous	2026-09-12 00:57:29 (11 hours ago)	SecLists/Fuzzing Scanner detected (SecLists/Fuzzer Hedef Dosya Taraması (/.env)). Subnet karantinaya ... show more SecLists/Fuzzing Scanner detected (SecLists/Fuzzer Hedef Dosya Taraması (/.env)). Subnet karantinaya alındı. show less	Port Scan Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-11 23:31:39 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 147.124.214.112 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 147.124.214.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 19:31:34.122240 2026] [security2:error] [pid 26781:tid 26781] [client 147.124.214.112:36754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "egelfitness.nl"] [uri "/.env"] [unique_id "aqSPVnCqUdkKrIJWqcaPGgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2026-09-11 22:15:05 (14 hours ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-11 21:59:21 (14 hours ago)	Auto-ban: >3000 req/min op 2026-09-11	Web App Attack SSH Hacking
🇳🇱 e.fierstra	2026-09-11 21:47:15 (14 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-09-11 20:38:56 (16 hours ago)	cloudlinux2 fail2ban: 2026-09-11 22:34:48,243 fail2ban.filter [1606]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-11 22:34:48,243 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 147.124.214.112 - 2026-09-11 22:34:48cloudlinux2 fail2ban: 2026-09-11 22:34:48,295 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 147.124.214.112 - 2026-09-11 22:34:48cloudlinux2 fail2ban: 2026-09-11 22:37:04,276 fail2ban.filter [1606]: INFO [plesk-wordpress] Found 186.189.88.2 - 2026-09-11 22:37:03cloudlinux2 fail2ban: 2026-09-11 22:37:45,557 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 136.66.243.136 - 2026-09-11 22:37:45cloudlinux2 fail2ban: 2026-09-11 22:37:46,087 fail2ban.filter [1606]: INFO [recidive] Found 136.66.243.136 - 2026-09-11 22:37:46cloudlinux2 fail2ban: 2026-09-11 22:37:46,025 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 136.66.243.136 - 2026-09-11 22:37:46cloudlinux2 fail2ban: 2026-09-11 22:37:45,810 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 136.66.243.136 - 2026-09-11 22:37:4 show less	Web App Attack
🇱🇻 garmtech.com	2026-09-11 19:54:35 (16 hours ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 19:06:21 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 147.124.214.112 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 147.124.214.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 15:06:13.211905 2026] [security2:error] [pid 5040:tid 5040] [client 147.124.214.112:41928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joesteiner.com"] [uri "/.env"] [unique_id "aqRRJYwsTZccJSoKwmt07gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.228.162

🇱🇰 203.189.184.122

🇰🇭 203.189.134.85

🇮🇩 203.175.125.185

🇮🇩 203.175.125.179

🇮🇩 203.175.125.130

🇦🇷 181.84.135.186

🇫🇮 147.185.133.25

🇳🇱 91.92.42.230

🇸🇬 84.75.148.75

🇷🇺 79.137.225.83

🇧🇬 79.124.58.90

🇺🇸 64.95.14.238

🇩🇪 34.179.242.246

🇨🇳 14.29.181.34

🇮🇩 203.175.125.120

🇳🇱 203.159.90.218

🇳🇱 203.159.90.217

🇳🇱 203.159.90.184

🇳🇱 203.159.90.116