JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.143.131.37

Neutral Activity

Abuse confidence score ?

0% Low Risk

38 reports

15 reporters · latest 4 months ago

ISP	WiredISP Inc.
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	wiredisp.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

149.143.131.37 has been reported 38 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 149.143.131.37

Export CSV

This IP address has been reported a total of 38 times from 15 distinct sources. 149.143.131.37 was first reported on April 20th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-19 14:02:33 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 10:02:20.425589 2026] [security2:error] [pid 25047:tid 25047] [client 149.143.131.37:55655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocketcityhotwheelers.com"] [uri "/.env.bak"] [unique_id "agxtbKUiHerQrYF20S2QEwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-18 06:43:24 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 02:43:15.942452 2026] [security2:error] [pid 15386:tid 15386] [client 149.143.131.37:45317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "origenial.com"] [uri "/api/.env"] [unique_id "agq1A3sPF6EVrOQu9Ywg9gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 08:42:23 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:41:45.601809 2026] [security2:error] [pid 20655:tid 20677] [client 149.143.131.37:54873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marinkovich.org"] [uri "/.env.yaml"] [unique_id "agbcSQS8NqowuojCS1O8fgAAAVQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 08:21:57 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:21:48.287412 2026] [security2:error] [pid 9617:tid 9617] [client 149.143.131.37:49767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mitchellamazing.com"] [uri "/.env.release"] [unique_id "agbXnIm1q-STQfIZwU2GGQAAAFk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 08:00:55 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:00:26.715439 2026] [security2:error] [pid 25891:tid 25891] [client 149.143.131.37:33841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.scc1.us"] [uri "/.git/objects/"] [unique_id "agbSmgqn6Bga3ZarmWuefwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 06:39:59 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:36:22.622374 2026] [security2:error] [pid 32101:tid 32101] [client 149.143.131.37:33299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koshland.us"] [uri "/.env"] [unique_id "aga-5uJsv9UbtL-J2iFbVwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 10:54:38 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 06:54:28.301717 2026] [security2:error] [pid 13520:tid 13520] [client 149.143.131.37:50911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jikishin-kai.org"] [uri "/.env.uat"] [unique_id "agWp5H1YIdQgyNxpeve7GwAAADQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 09:50:01 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 05:49:44.000815 2026] [security2:error] [pid 14723:tid 14742] [client 149.143.131.37:54441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.absurdotron.com"] [uri "/.env.backup"] [unique_id "agWauM4OLX7WRnBMZaEGzQAAAQ4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-05-13 22:27:10 (4 months ago)		Brute-Force Web App Attack
🇺🇸 mnsf	2026-05-13 10:05:12 (4 months ago)	Scanning/Probing (95) Request Overload (101)	Brute-Force Web App Attack
🇩🇪 macrob	2026-05-13 06:50:58 (4 months ago)	2026/05/13 06:50:56 [error] 1193863#1193863: 223451185 access forbidden by rule, client: 149.143.13 ... show more 2026/05/13 06:50:56 [error] 1193863#1193863: 223451185 access forbidden by rule, client: 149.143.131.37, server: binixo.ph, request: "GET /.env.development.local HTTP/2.0", host: "binixo.ph" 2026/05/13 06:50:57 [error] 1193863#1193863: 223451185 access forbidden by rule, client: 149.143.131.37, server: binixo.ph, request: "GET /.env.production HTTP/2.0", host: "binixo.ph" 2026/05/13 06:50:57 [error] 1193863#1193863: 223451185 access forbidden by rule, client: 149.143.131.37, server: binixo.ph, request: "GET /.env.txt HTTP/2.0", host: "binixo.ph" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 16:46:23 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:45:41.095480 2026] [security2:error] [pid 31875:tid 31875] [client 149.143.131.37:39565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yuanwei.l3l4.com"] [uri "/.git/HEAD"] [unique_id "agNZNTnOvqdKgIWagTnLtgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 13:31:19 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 09:30:56.903624 2026] [security2:error] [pid 10696:tid 10696] [client 149.143.131.37:60747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lawrencehale.com"] [uri "/api/.env"] [unique_id "agMrkBxH9LT6JF2kD4GBkgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-11 00:29:11 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 20:29:04.940503 2026] [security2:error] [pid 8081:tid 8081] [client 149.143.131.37:33071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bronislawsuchanek.com"] [uri "/.htpasswd"] [unique_id "agEi0G795zgzqgJyhMcl4AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-10 18:12:55 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 149.143.131.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 14:12:40.522365 2026] [security2:error] [pid 26100:tid 26100] [client 149.143.131.37:37407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jamelrobinson.com"] [uri "/.env.testing"] [unique_id "agDKmFntlNBW1y_ubehhZAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.236

🇨🇳 211.138.96.86

🇳🇱 195.178.110.228

🇮🇩 172.232.240.202

🇫🇮 147.185.133.48

🇨🇳 101.96.205.145

🇬🇧 2a06:4880::12

🇺🇸 198.12.67.225

🇲🇦 196.64.166.34

🇨🇭 185.191.236.38

🇳🇱 185.2.80.253

🇺🇸 172.86.86.158

🇺🇸 144.225.187.68

🇮🇳 139.59.94.229

🇩🇪 130.12.180.32

🇧🇷 118.26.105.52

🇨🇳 117.72.152.142

🇨🇳 61.157.206.5

🇮🇳 4.224.122.112

🇪🇹 196.189.189.50