JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.143.137.40

Neutral Activity

Abuse Confidence Score

0% Low Risk

39 reports

15 reporters · latest 5 months ago

ISP: WiredISP Inc.
Usage Type: Fixed Line ISP
ASN: AS6079
Domain Name: wiredisp.com
Country: 🇺🇸 United States of America
City: Hershey, Pennsylvania

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

149.143.137.40 has been reported 39 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

39 from 15 distinct reporters

First reported

April 20th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-19 14:48:43 UTC · (5 months ago)	(caddyscan) Scanner path probe from 149.143.137.40 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 0 149.143.137.40 - - [19/May/2026:14:48:33 +0000] "HEAD /.env.swp HTTP/1.1" ... show more (caddyscan) Scanner path probe from 149.143.137.40 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 0 149.143.137.40 - - [19/May/2026:14:48:33 +0000] "HEAD /.env.swp HTTP/1.1" [REDACTED] 200 2627 149.143.137.40 - - [19/May/2026:14:48:38 +0000] "GET /.env.default HTTP/1.1" [REDACTED] 200 2627 149.143.137.40 - - [19/May/2026:14:48:38 +0000] "GET /.env.yml HTTP/1.1" [REDACTED] 200 2627 149.143.137.40 - - [19/May/2026:14:48:38 +0000] "GET /.env.toml HTTP/1.1" [REDACTED] 200 2627 149.143.137.40 - - [19/May/2026:14:48:38 +0000] "GET /.env.demo HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-16 11:18:59 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 07:18:50.233781 2026] [security2:error] [pid 3598:tid 3598] [client 149.143.137.40:47815] M ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 07:18:50.233781 2026] [security2:error] [pid 3598:tid 3598] [client 149.143.137.40:47815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nodepotgroup.nodepot.com"] [uri "/.env.example"] [unique_id "aghSmvj95UaIq72YsCQtFQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 08:48:38 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:48:20.263771 2026] [security2:error] [pid 6369:tid 6369] [client 149.143.137.40:42433] M ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:48:20.263771 2026] [security2:error] [pid 6369:tid 6369] [client 149.143.137.40:42433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "z-mgmt.com"] [uri "/wp-config.php.bak"] [unique_id "agbd1OTgd99QigXfW9SMPAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 07:40:27 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:40:06.468658 2026] [security2:error] [pid 12329:tid 12329] [client 149.143.137.40:46401] ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:40:06.468658 2026] [security2:error] [pid 12329:tid 12329] [client 149.143.137.40:46401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cabwebs.com"] [uri "/.env.example"] [unique_id "agbN1l5bqWyHcbWrpmN2vAAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 06:37:45 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:36:18.586399 2026] [security2:error] [pid 2203:tid 2203] [client 149.143.137.40:45999] M ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:36:18.586399 2026] [security2:error] [pid 2203:tid 2203] [client 149.143.137.40:45999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koshland.us"] [uri "/.git/config"] [unique_id "aga-4jNBEVgl6jQFFefpegAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 06:20:33 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:18:57.963338 2026] [security2:error] [pid 25305:tid 25305] [client 149.143.137.40:33261] ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:18:57.963338 2026] [security2:error] [pid 25305:tid 25305] [client 149.143.137.40:33261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blanchebb.com"] [uri "/.env.preview"] [unique_id "aga60V1jlZtRC4pLj1PlwQAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 09:50:10 UTC · (5 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 05:50:01.936836 2026] [security2:error] [pid 11574:tid 11582] [client 149.143.137.40:37891] ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 05:50:01.936836 2026] [security2:error] [pid 11574:tid 11582] [client 149.143.137.40:37891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.absurdotron.com"] [uri "/.env.docker"] [unique_id "agWayVzB4YgePmwij7_m2AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 07:51:57 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 03:51:39.963160 2026] [security2:error] [pid 10759:tid 10759] [client 149.143.137.40:53615] ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 03:51:39.963160 2026] [security2:error] [pid 10759:tid 10759] [client 149.143.137.40:53615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "churchtop.com"] [uri "/.git/objects/"] [unique_id "agQtiwzXr2vQOMoTtiL9RgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 16:46:19 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:45:41.084982 2026] [security2:error] [pid 31797:tid 31797] [client 149.143.137.40:51891] ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:45:41.084982 2026] [security2:error] [pid 31797:tid 31797] [client 149.143.137.40:51891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yuanwei.l3l4.com"] [uri "/.env.local"] [unique_id "agNZNS1x1WOf84T3jfHBjwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 13:52:39 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 09:52:18.605961 2026] [security2:error] [pid 12090:tid 12090] [client 149.143.137.40:33387] ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 09:52:18.605961 2026] [security2:error] [pid 12090:tid 12090] [client 149.143.137.40:33387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peanutcarvings.com"] [uri "/backend/.env"] [unique_id "agMwklSeitctQkDWnYgE-wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-09 14:44:05 UTC · (6 months ago)	(caddyscan) Scanner path probe from 149.143.137.40 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 0 149.143.137.40 - - [09/May/2026:14:43:59 +0000] "HEAD /.git/config HTTP/1. ... show more (caddyscan) Scanner path probe from 149.143.137.40 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 0 149.143.137.40 - - [09/May/2026:14:43:59 +0000] "HEAD /.git/config HTTP/1.1" [REDACTED] 200 0 149.143.137.40 - - [09/May/2026:14:43:59 +0000] "HEAD /.env.save HTTP/1.1" [REDACTED] 200 0 149.143.137.40 - - [09/May/2026:14:43:59 +0000] "HEAD /.env.dist HTTP/1.1" [REDACTED] 200 0 149.143.137.40 - - [09/May/2026:14:44:00 +0000] "HEAD /root/.aws/config HTTP/1.1" [REDACTED] 200 0 149.143.137.40 - - [09/May/2026:14:44:01 +0000] "HEAD /.env.project HTTP/1.1" show less	Port Scan
Anonymous	2026-05-09 08:16:09 UTC · (6 months ago)	(caddyscan) Scanner path probe from 149.143.137.40 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.143.137.40 - - [09/May/2026:07:47:37 +0000] "GET /.env.uat HTTP/1.1 ... show more (caddyscan) Scanner path probe from 149.143.137.40 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 149.143.137.40 - - [09/May/2026:07:47:37 +0000] "GET /.env.uat HTTP/1.1" [REDACTED] 200 2627 149.143.137.40 - - [09/May/2026:07:54:39 +0000] "GET /actuator/heapdump HTTP/1.1" [REDACTED] 200 2627 149.143.137.40 - - [09/May/2026:07:54:39 +0000] "GET /.env.uat HTTP/1.1" [REDACTED] 200 0 149.143.137.40 - - [09/May/2026:08:16:08 +0000] "HEAD /.env.production HTTP/1.1" [REDACTED] 200 0 149.143.137.40 - - [09/May/2026:08:16:08 +0000] "HEAD /.aws/config HTTP/1.1" show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-08 19:21:20 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 15:20:49.991559 2026] [security2:error] [pid 26337:tid 26337] [client 149.143.137.40:41763] ... show more (mod_security) mod_security (id:210492) triggered by 149.143.137.40 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 15:20:49.991559 2026] [security2:error] [pid 26337:tid 26337] [client 149.143.137.40:41763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ficklepassionproductions.com"] [uri "/.git/HEAD"] [unique_id "af43kRGDraLMOy5nVy-WiQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-05-08 06:08:06 UTC · (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /.env.testing UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 Th ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /.env.testing UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 ELYAZ	2026-05-07 04:58:00 UTC · (6 months ago)	(y3) Failed access -byebye- from 149.143.137.40 (US/United States/-): (CF_ENABLE)	Hacking

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2001:4860:4844:400::

🇺🇸 216.25.89.84

🇹🇭 202.44.193.197

🇬🇧 193.163.125.99

🇩🇪 139.19.117.129

🇫🇷 85.217.140.18

🇺🇸 73.74.36.39

🇷🇺 194.48.218.72

🇻🇪 190.8.164.56

🇲🇽 187.212.13.248

🇷🇺 176.209.107.194

🇫🇷 85.217.140.16

🇳🇱 77.239.124.155

🇺🇸 46.16.34.115

🇳🇱 45.148.10.157

🇵🇱 45.138.12.16

🇺🇸 23.92.26.16

🇨🇳 111.29.38.32

🇳🇱 86.38.187.61

🇫🇷 78.243.21.234