JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

151.240.95.147

Recent Activity

Abuse Confidence Score

100% Critical

38 reports

24 reporters · latest 12 minutes ago

ISP: GSL Networks Pty LTD
Usage Type: Data Center/Web Hosting/Transit
ASN: AS137409
Domain Name: globalsecurelayer.com
Country: 🇺🇸 United States of America
City: Seattle, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

38 from 24 distinct reporters

First reported

May 9th 2026

Most recent report

12 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 12 🇩🇪 Germany 4 🇫🇮 Finland 3

Most common categories Web App Attack 25 Bad Web Bot 11 Brute-Force 8 Hacking 6 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 sibahota	2026-11-15 22:29:31 UTC · (12 minutes ago)	151.240.95.147 - - [15/Nov/2026:22:29:27 +0000] uniquestorerxl.com "GET /.env HTTP/1.1" 403 37 0.000 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" - - - "http://uniquestorerxl.com" ...	Web App Attack Brute-Force
🇨🇭 zynex	2026-11-15 21:37:23 UTC · (1 hour ago)	URL Probing: /.env	Web App Attack
🇨🇦 Anytech	2026-11-15 21:29:29 UTC · (1 hour ago)	Blocked by Conn-Monitor: env-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-11-15 20:28:19 UTC · (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 151.240.95.147 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 15:28:11.567999 2026] [security2:error] [pid 3005:tid 3005] [client 151.240.95.147:62849] M ... show more (mod_security) mod_security (id:210492) triggered by 151.240.95.147 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 15:28:11.567999 2026] [security2:error] [pid 3005:tid 3005] [client 151.240.95.147:62849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rimworld.com"] [uri "/notra//.env"] [unique_id "avoV23MOTPV96SflSVxDjgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-11-15 19:23:22 UTC · (3 hours ago)	Web scan: request for a sensitive file (.env, .git, wp-config...)	Web App Attack Bad Web Bot
Anonymous	2026-11-15 19:14:30 UTC · (3 hours ago)	path attack /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-11-15 19:12:34 UTC · (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 151.240.95.147 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:12:27.137390 2026] [security2:error] [pid 20825:tid 20825] [client 151.240.95.147:27579] ... show more (mod_security) mod_security (id:210492) triggered by 151.240.95.147 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:12:27.137390 2026] [security2:error] [pid 20825:tid 20825] [client 151.240.95.147:27579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vincetronics.com"] [uri "/google0e1ebbf943a1894d.html/.env"] [unique_id "avoEG0k3ZBF3pMvmj5ZmUAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-11-15 19:00:47 UTC · (3 hours ago)	Environment file probe	Web App Attack
🇺🇸 sandra361	2026-11-15 18:50:04 UTC · (3 hours ago)	Cloudflare WAF: 1 request from AS137409/US \| Action: block \| GET HTTP/1.1 \| Path: /.env \| User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0	Web App Attack
🇺🇸 ambor	2026-11-15 18:33:55 UTC · (4 hours ago)	L0ss Honeypot: Environment file access attempt. Path: /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-11-15 18:32:27 UTC · (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 151.240.95.147 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 13:32:24.184686 2026] [security2:error] [pid 9494:tid 9494] [client 151.240.95.147:0] ModSe ... show more (mod_security) mod_security (id:210492) triggered by 151.240.95.147 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 13:32:24.184686 2026] [security2:error] [pid 9494:tid 9494] [client 151.240.95.147:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sportsbookcommission.com"] [uri "/.env"] [unique_id "avn6uHanymBLGNpZMwReewAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 bdkreatif	2026-11-15 17:32:46 UTC · (5 hours ago)	Automated block: probing for .env files	Web App Attack
🇩🇪 hidemail.app	2026-11-15 16:21:13 UTC · (6 hours ago)	Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-11-15 16:19:57 UTC · (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 151.240.95.147 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:19:49.814022 2026] [security2:error] [pid 28204:tid 28226] [client 151.240.95.147:47971] ... show more (mod_security) mod_security (id:210492) triggered by 151.240.95.147 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:19:49.814022 2026] [security2:error] [pid 28204:tid 28226] [client 151.240.95.147:47971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magazineofwallstreet.com"] [uri "/.env"] [unique_id "avnbpQ8Jp3Q_i1e04SrUJgAAAMo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-11-15 16:14:07 UTC · (6 hours ago)	(credential-hunter) Failed credential-hunter trigger with match [redacted] from 151.240.95.147 (US/United States/-): (CF_ENABLE)	Hacking

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 163.0.40.53

🇺🇸 159.223.121.202

🇵🇰 153.117.127.230

🇳🇱 82.29.208.125

🇺🇸 73.120.154.235

🇸🇦 51.39.217.84

🇸🇦 51.39.99.26

🇧🇴 190.129.101.200

🇹🇭 165.154.120.89

🇺🇸 154.197.56.163

🇺🇸 137.184.110.174

🇰🇷 42.82.180.58

🇧🇪 34.62.88.169

🇨🇭 209.99.190.186

🇳🇱 195.178.110.78

🇫🇮 170.168.99.159

🇮🇶 169.224.116.44

🇺🇸 136.67.155.32

🇺🇸 134.209.53.197

🇺🇸 54.82.92.52