JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.143.136.216

149.143.136.216 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 0%: ?

ISP	WiredISP Inc.
Usage Type	Fixed Line ISP
ASN	AS7029
Domain Name	wiredisp.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.143.136.216

Whois 149.143.136.216

IP Abuse Reports for 149.143.136.216:

This IP address has been reported a total of 46 times from 19 distinct sources. 149.143.136.216 was first reported on April 19th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-18 23:12:28 (3 months ago)	(caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.143.136.216 - - [18/May/2026:23:12:23 +0000] "GET /.env.testing HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [18/May/2026:23:12:23 +0000] "GET /.env.example HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [18/May/2026:23:12:23 +0000] "GET /.env.docker HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [18/May/2026:23:12:23 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [18/May/2026:23:12:23 +0000] "GET /.env.release HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-17 13:00:48 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 09:00:44.112122 2026] [security2:error] [pid 27451:tid 27451] [client 149.143.136.216:59557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rewirenetworks.com"] [uri "/.git/config"] [unique_id "agm7_NIAqhVZV1ikWtHX8gAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 08:30:40 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:30:30.285590 2026] [security2:error] [pid 15878:tid 15878] [client 149.143.136.216:40233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aandbnaturalfoods.com"] [uri "/.env~"] [unique_id "agbZplimVeeNv4o56WNMAwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 06:27:11 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:26:46.377726 2026] [security2:error] [pid 12372:tid 12372] [client 149.143.136.216:49425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonefrog.com"] [uri "/.env.dist"] [unique_id "aga8pv7epFtFXMul-YuR0QAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Progetto1	2026-05-13 22:01:02 (3 months ago)	Detected via HAProxyScanner at 2026-05-13 22:01:02 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-05-13 22:01:02 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
Anonymous	2026-05-13 08:07:52 (3 months ago)	(caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.143.136.216 - - [13/May/2026:07:20:30 +0000] "GET /.env.demo HTTP/1.1" [REDACTED] 200 0 149.143.136.216 - - [13/May/2026:08:07:44 +0000] "HEAD /.env.sample HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [13/May/2026:08:07:47 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [13/May/2026:08:07:47 +0000] "GET /.env.yml HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [13/May/2026:08:07:49 +0000] "GET /.env~ HTTP/1.1" show less	Port Scan
Anonymous	2026-05-13 02:36:16 (3 months ago)	(caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.143.136.216 - - [13/May/2026:02:36:10 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [13/May/2026:02:36:11 +0000] "GET /root/.aws/credentials HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [13/May/2026:02:36:11 +0000] "GET /.env.test HTTP/1.1" [REDACTED] 200 0 149.143.136.216 - - [13/May/2026:02:36:13 +0000] "HEAD /.env.local HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [13/May/2026:02:36:13 +0000] "GET /actuator/env HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-12 13:53:37 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 09:52:41.996960 2026] [security2:error] [pid 13326:tid 13326] [client 149.143.136.216:42983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peanutcarvings.com"] [uri "/.env.project"] [unique_id "agMwqcvBj8op-_AMzTW5nwAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-12 03:28:49 (3 months ago)	(caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.143.136.216 - - [12/May/2026:03:28:45 +0000] "GET /.env.json HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [12/May/2026:03:28:45 +0000] "GET /.env.preview HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [12/May/2026:03:28:45 +0000] "GET /.env.dist HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [12/May/2026:03:28:45 +0000] "GET /.env.qa HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [12/May/2026:03:28:45 +0000] "GET /.env.production HTTP/1.1" show less	Port Scan
🇫🇷 masterguru	2026-05-11 13:13:02 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 149.143.136.216 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 149.143.136.216 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-05-10 21:13:35 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 17:13:13.425746 2026] [security2:error] [pid 6711:tid 6711] [client 149.143.136.216:36393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thedieselgroupllc.com"] [uri "/.env.yaml"] [unique_id "agD06dJl6uVQf9p79_GskQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-10 18:39:08 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 149.143.136.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 14:38:58.468608 2026] [security2:error] [pid 25586:tid 25586] [client 149.143.136.216:41911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carepage.pro"] [uri "/.env"] [unique_id "agDQwlmh32CH_NX5XoNJ7wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-09 14:47:30 (3 months ago)	(caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.143.136.216 - - [09/May/2026:14:16:44 +0000] "GET /.aws/config HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [09/May/2026:14:18:28 +0000] "GET /phpMyAdmin/ HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [09/May/2026:14:18:35 +0000] "GET /.env.orig HTTP/1.1" [REDACTED] 200 0 149.143.136.216 - - [09/May/2026:14:47:29 +0000] "HEAD /.env.backup HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [09/May/2026:14:47:29 +0000] "GET /.env.production HTTP/1.1" show less	Port Scan
Anonymous	2026-05-09 12:05:40 (3 months ago)	(caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.143.136.216 - - [09/May/2026:11:14:53 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [09/May/2026:11:15:21 +0000] "GET /.env.dev HTTP/1.1" [REDACTED] 200 0 149.143.136.216 - - [09/May/2026:12:05:21 +0000] "HEAD /.env~ HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [09/May/2026:12:05:35 +0000] "GET /.env.ini HTTP/1.1" [REDACTED] 200 2627 149.143.136.216 - - [09/May/2026:12:05:37 +0000] "GET /.env.conf HTTP/1.1" show less	Port Scan
Anonymous	2026-05-09 01:08:32 (3 months ago)	(caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 149.143.136.216 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 6042200.wildcardprobe-1777274223773844929.bicities.org 200 2627 149.143.136.216 - - [09/May/2026:00:35:59 +0000] "GET /.aws/credentials HTTP/1.1" 6042200.wildcardprobe-1777274223773844929.bicities.org 200 0 149.143.136.216 - - [09/May/2026:00:36:12 +0000] "HEAD /app/.env.production HTTP/1.1" mlwildcardprobe-1777273352273162956.mlkjidgfedcbimayz8765876103218ee1-d870-48a9-ac27-a7908a88c817.bicities.org 200 2627 149.143.136.216 - - [09/May/2026:00:55:21 +0000] "GET /.env.php HTTP/1.1" 987705326042wildcardprobe-1777099674053724881.bicities.org 200 2627 149.143.136.216 - - [09/May/2026:01:08:29 +0000] "GET /.env.uat HTTP/1.1" 987705326042wildcardprobe-1777099674053724881.bicities.org 200 0 149.143.136.216 - - [09/May/2026:01:08:29 +0000] "HEAD /root/.aws/config HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 213.128.81.245

🇳🇬 196.1.182.130

🇸🇦 176.44.139.48

🇫🇮 170.168.96.251

🇺🇸 104.194.9.81

🇧🇬 91.191.209.118

🇳🇱 91.92.40.40

🇳🇱 85.121.55.228

🇩🇪 84.200.125.102

🇹🇷 213.128.81.246

🇹🇷 213.128.81.127

🇲🇽 206.135.5.152

🇬🇧 193.163.125.196

🇦🇷 191.81.55.81

🇳🇱 185.226.197.12

🇵🇰 175.107.3.190

🇺🇸 172.233.178.66

🇩🇪 157.230.18.133

🇺🇸 150.107.38.102

🇺🇸 147.185.132.41