JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 141.101.97.3

141.101.97.3 was found in our database!

This IP was reported 106 times. Confidence of Abuse is 0%: ?

ISP	CloudFlare CDN network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 141.101.97.3 is an IP address from within our whitelist belonging to the subnet 141.101.64.0/18, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 141.101.97.3

Whois 141.101.97.3

IP Abuse Reports for 141.101.97.3:

This IP address has been reported a total of 106 times from 21 distinct sources. 141.101.97.3 was first reported on April 11th 2024, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mawan	2026-06-23 13:05:57 (21 hours ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 09:12:04 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 141.101.97.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 141.101.97.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 05:11:59.412304 2026] [security2:error] [pid 15362:tid 15362] [client 141.101.97.3:14181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jordanware.com"] [uri "/.git/config"] [unique_id "ajETX-sYQa2TT_U_4cfcugAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Dechavanne	2026-04-04 11:00:13 (2 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇫🇷 Campus France	2026-03-23 01:05:37 (3 months ago)	[Mon Mar 23 02:05:29.622284 2026] [php:error] [pid 878749] [client 141.101.97.3:10604] script '/var/ ... show more [Mon Mar 23 02:05:29.622284 2026] [php:error] [pid 878749] [client 141.101.97.3:10604] script '/var/www/html/0x.php' not found or unable to stat [Mon Mar 23 02:05:30.083557 2026] [php:error] [pid 878749] [client 141.101.97.3:10604] script '/var/www/html/autoload_classmap.php' not found or unable to stat [Mon Mar 23 02:05:30.516668 2026] [php:error] [pid 878749] [client 141.101.97.3:10604] script '/var/www/html/fm.php' not found or unable to stat [Mon Mar 23 02:05:36.473059 2026] [php:error] [pid 876526] [client 141.101.97.3:11952] script '/var/www/html/404.php' not found or unable to stat [Mon Mar 23 02:05:36.846059 2026] [php:error] [pid 876526] [client 141.101.97.3:11952] script '/var/www/html/sx.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-03-20 05:34:01 (3 months ago)	[Fri Mar 20 06:34:00.804120 2026] [php:error] [pid 2884745] [client 141.101.97.3:12462] script '/var ... show more [Fri Mar 20 06:34:00.804120 2026] [php:error] [pid 2884745] [client 141.101.97.3:12462] script '/var/www/html/function.php' not found or unable to stat [Fri Mar 20 06:34:01.057999 2026] [php:error] [pid 2884745] [client 141.101.97.3:12462] script '/var/www/html/new.php' not found or unable to stat [Fri Mar 20 06:34:01.057999 2026] [php:error] [pid 2884745] [client 141.101.97.3:12462] script '/var/www/html/new.php' not found or unable to stat [Fri Mar 20 06:34:01.685869 2026] [php:error] [pid 2884745] [client 141.101.97.3:12462] script '/var/www/html/files.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-03-19 04:24:30 (3 months ago)	[Thu Mar 19 05:24:29.999978 2026] [php:error] [pid 2052297] [client 141.101.97.3:13823] script '/var ... show more [Thu Mar 19 05:24:29.999978 2026] [php:error] [pid 2052297] [client 141.101.97.3:13823] script '/var/www/html/test0.php' not found or unable to stat [Thu Mar 19 05:24:30.031654 2026] [php:error] [pid 2052297] [client 141.101.97.3:13823] script '/var/www/html/test1.php' not found or unable to stat [Thu Mar 19 05:24:30.043857 2026] [php:error] [pid 2052297] [client 141.101.97.3:13823] script '/var/www/html/test123.php' not found or unable to stat [Thu Mar 19 05:24:30.052916 2026] [php:error] [pid 2052297] [client 141.101.97.3:13823] script '/var/www/html/test2.php' not found or unable to stat [Thu Mar 19 05:24:30.071695 2026] [php:error] [pid 2052297] [client 141.101.97.3:13823] script '/var/www/html/test3.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇩🇪 ReporTR	2026-03-16 14:18:16 (3 months ago)	Fail2Ban plesk-modsecurity: 3 attempts from 141.101.97.3 (Country: <country>, <rdns>)	Hacking Web App Attack
🇫🇷 domainemporium	2026-02-12 00:27:10 (4 months ago)	(mod_security) mod_security triggered on hostname [redacted] 141.101.97.3 (FR/France/-): (CF_ENABLE ... show more (mod_security) mod_security triggered on hostname [redacted] 141.101.97.3 (FR/France/-): (CF_ENABLE) show less	SQL Injection
🇫🇷 Campus France	2025-12-27 17:47:42 (5 months ago)	[Sat Dec 27 18:47:12.859168 2025] [php:error] [pid 3793169] [client 141.101.97.3:9611] script '/var/ ... show more [Sat Dec 27 18:47:12.859168 2025] [php:error] [pid 3793169] [client 141.101.97.3:9611] script '/var/www/html/esp.php' not found or unable to stat [Sat Dec 27 18:47:13.384905 2025] [php:error] [pid 3793169] [client 141.101.97.3:9611] script '/var/www/html/out.php' not found or unable to stat [Sat Dec 27 18:47:28.690492 2025] [php:error] [pid 3793508] [client 141.101.97.3:12539] script '/var/www/html/wp-good.php' not found or unable to stat [Sat Dec 27 18:47:35.476461 2025] [php:error] [pid 3792846] [client 141.101.97.3:12545] script '/var/www/html/403.php' not found or unable to stat [Sat Dec 27 18:47:41.981605 2025] [php:error] [pid 3791841] [client 141.101.97.3:11992] script '/var/www/html/class.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-24 12:29:38 (5 months ago)	[Wed Dec 24 10:45:09.815428 2025] [php:error] [pid 1460270] [client 141.101.97.3:11664] script '/var ... show more [Wed Dec 24 10:45:09.815428 2025] [php:error] [pid 1460270] [client 141.101.97.3:11664] script '/var/www/html/file2.php' not found or unable to stat, referer: https://duckduckgo.com/ [Wed Dec 24 10:45:09.989268 2025] [php:error] [pid 1460270] [client 141.101.97.3:11664] script '/var/www/html/moon.php' not found or unable to stat, referer: https://www.bing.com/ [Wed Dec 24 10:45:09.989268 2025] [php:error] [pid 1460270] [client 141.101.97.3:11664] script '/var/www/html/moon.php' not found or unable to stat, referer: https://www.bing.com/ [Wed Dec 24 13:29:37.388930 2025] [php:error] [pid 1536273] [client 141.101.97.3:11912] script '/var/www/html/tx1.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-23 16:31:53 (6 months ago)	[Tue Dec 23 07:05:57.962077 2025] [php:error] [pid 658722] [client 141.101.97.3:10540] script '/var/ ... show more [Tue Dec 23 07:05:57.962077 2025] [php:error] [pid 658722] [client 141.101.97.3:10540] script '/var/www/html/num.php' not found or unable to stat, referer: https://www.google.com/ [Tue Dec 23 07:05:58.220081 2025] [php:error] [pid 658722] [client 141.101.97.3:10540] script '/var/www/html/txets.php' not found or unable to stat, referer: https://www.google.co.uk/ [Tue Dec 23 07:06:00.231038 2025] [php:error] [pid 658722] [client 141.101.97.3:10540] script '/var/www/html/admin.php' not found or unable to stat, referer: https://www.google.co.uk/ [Tue Dec 23 17:31:38.691499 2025] [php:error] [pid 944850] [client 141.101.97.3:13273] script '/var/www/html/XxX.php' not found or unable to stat [Tue Dec 23 17:31:52.748001 2025] [php:error] [pid 944789] [client 141.101.97.3:12825] script '/var/www/html/makeasmtp.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2025-12-01 10:08:30 (6 months ago)	[Mon Dec 01 11:08:15.121581 2025] [php:error] [pid 1933867] [client 141.101.97.3:10158] script '/var ... show more [Mon Dec 01 11:08:15.121581 2025] [php:error] [pid 1933867] [client 141.101.97.3:10158] script '/var/www/html/l.php' not found or unable to stat [Mon Dec 01 11:08:15.158895 2025] [php:error] [pid 1933867] [client 141.101.97.3:10158] script '/var/www/html/repeater.php' not found or unable to stat [Mon Dec 01 11:08:15.272306 2025] [php:error] [pid 1933867] [client 141.101.97.3:10158] script '/var/www/html/contacts.php' not found or unable to stat [Mon Dec 01 11:08:15.498779 2025] [php:error] [pid 1933867] [client 141.101.97.3:10158] script '/var/www/html/lv.php' not found or unable to stat [Mon Dec 01 11:08:30.281583 2025] [php:error] [pid 1933833] [client 141.101.97.3:13299] script '/var/www/html/infos.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇫🇷 sterile.network	2025-10-09 01:23:45 (8 months ago)	Blocked by UFW on ropanel1 [80/tcp] Source port: 9686 TTL: 48 Packet length: 60 TOS: 0x00	Port Scan Web App Attack
🇺🇸 thefoofighter	2025-10-06 00:45:08 (8 months ago)	[Mon Oct 06 00:45:08.285746 2025] [:error] [pid 2532180] [client 141.101.97.3:13270] [client 141.101 ... show more [Mon Oct 06 00:45:08.285746 2025] [:error] [pid 2532180] [client 141.101.97.3:13270] [client 141.101.97.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.cathalmcnally.com"] [uri "/.env.production"] [unique_id "aOMRFENC5-s60sV0u_ZOVQAAABE"] [Mon Oct 06 00:45:08.450959 2025] [:error] [pid 2532180] [client 141.101.97.3:13270] [client 141.101.97.3] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWA ... show less	Bad Web Bot Web App Attack
🇩🇪 Séfora Srl	2025-09-01 18:00:20 (9 months ago)	Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ... show more Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail show less	Bad Web Bot

Showing 1 to 15 of 106 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.206.97.139

🇷🇺 194.135.123.68

🇵🇰 101.53.229.55

🇹🇷 85.99.242.105

🇺🇸 18.97.5.73

🇺🇸 2607:f8b0:4001:c56::12e

🇷🇺 178.176.250.149

🇺🇸 172.253.251.53

🇮🇩 128.14.233.253

🇨🇳 123.88.225.125

🇳🇱 45.148.10.151

🇹🇼 202.133.247.208

🇳🇱 185.223.235.10

🇨🇳 182.54.23.254

🇷🇺 176.109.184.168

🇩🇪 151.243.11.35

🇨🇳 139.212.69.101

🇫🇷 91.196.152.111

🇷🇴 80.94.95.211

🇺🇸 34.96.52.3