JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 141.11.36.35

141.11.36.35 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 56%: ?

56%

ISP	Vantiva SA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vantiva.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 141.11.36.35

Whois 141.11.36.35

IP Abuse Reports for 141.11.36.35:

This IP address has been reported a total of 80 times from 48 distinct sources. 141.11.36.35 was first reported on March 26th 2024, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-07-16 08:45:01 (16 hours ago)	141.11.36.35 - - [16/Jul/2026:11:45:00 +0300] "GET /wp-content/plugins/file-upload-types/assets/css/ ... show more 141.11.36.35 - - [16/Jul/2026:11:45:00 +0300] "GET /wp-content/plugins/file-upload-types/assets/css/403x.php HTTP/1.1" 404 718 "-" "Go-http-client/1.1" 141.11.36.35 - - [16/Jul/2026:11:45:00 +0300] "GET /wp-content/plugins/penci-bookmark-follow/inc/admin/forms/penci-bf-users-logs-profile.php HTTP/1.1" 404 718 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇫🇷 IRISIO	2026-07-16 08:02:27 (16 hours ago)	scans/SQL injection/spam posts : 3 queries	Web App Attack SQL Injection
🇺🇸 Lee Daniel	2026-07-16 01:21:01 (23 hours ago)	141.11.36.35 - - [15/Jul/2026:21:20:57 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 404 2706 ... show more 141.11.36.35 - - [15/Jul/2026:21:20:57 -0400] "GET /templates/ja_purity/index.php HTTP/1.1" 404 27060 "-" "Go-http-client/2.0" 141.11.36.35 - - [15/Jul/2026:21:20:58 -0400] "GET /templates/protostar/error.php HTTP/1.1" 404 27060 "-" "Go-http-client/2.0" 141.11.36.35 - - [15/Jul/2026:21:20:58 -0400] "GET /templates/beez3/jsstrings.php HTTP/1.1" 404 27056 "-" "Go-http-client/2.0" 141.11.36.35 - - [15/Jul/2026:21:20:59 -0400] "GET /templates/atomic/index.php HTTP/1.1" 404 27045 "-" "Go-http-client/2.0" 141.11.36.35 - - [15/Jul/2026:21:20:59 -0400] "GET /templates/beez3/error.php HTTP/1.1" 404 27040 "-" "Go-http-client/2.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-15 21:32:24 (1 day ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇮 danskefilm.dk	2026-07-10 05:30:01 (6 days ago)	wordpress login attempts	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 22:26:58 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 141.11.36.35 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 141.11.36.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 18:26:52.917445 2026] [security2:error] [pid 23380:tid 23380] [client 141.11.36.35:47507] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|iconconstructors.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iconconstructors.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alAgLONqwCD93MKcAKmO5QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-07-09 04:31:50 (1 week ago)	6.082 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-07-06 20:22:04 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-23 20:21:10 (3 weeks ago)	141.11.36.35 - - [23/Jun/2026:23:21:09 +0300] "GET /wp-content/fonts/index.php HTTP/1.1" 404 708 "-" ... show more 141.11.36.35 - - [23/Jun/2026:23:21:09 +0300] "GET /wp-content/fonts/index.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" 141.11.36.35 - - [23/Jun/2026:23:21:09 +0300] "GET /wp-content/index.php HTTP/1.1" 404 708 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇬🇧 consul.to	2026-06-09 12:57:33 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Lino Project	2026-06-09 05:29:14 (1 month ago)	141.11.36.35 - - [09/Jun/2026:07:29:11 +0200] "GET /wp-includes/main.php HTTP/2.0" 403 282 "http://w ... show more 141.11.36.35 - - [09/Jun/2026:07:29:11 +0200] "GET /wp-includes/main.php HTTP/2.0" 403 282 "http://www.biomakeup.it/wp-includes/main.php" "Go-http-client/2.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-06-05 22:52:58 (1 month ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-05-30 08:44:11 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇪🇸 masterguru	2026-05-30 01:41:06 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
Anonymous	2026-05-29 20:59:39 (1 month ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 146.88.241.85

🇷🇺 87.251.66.118

🇺🇸 64.62.156.10

🇮🇷 5.237.127.195

🇸🇪 192.36.71.188

🇻🇳 180.93.36.101

🇦🇺 170.64.193.29

🇺🇸 162.216.150.164

🇺🇸 159.203.179.159

🇰🇷 118.39.219.45

🇨🇳 113.194.1.254

🇩🇪 69.5.169.89

🇺🇸 44.203.101.204

🇸🇬 15.235.162.23

🇪🇹 196.190.10.252

🇹🇭 159.192.99.12

🇰🇷 122.35.192.33

🇺🇸 91.230.168.26

🇫🇷 85.217.140.18

🇺🇸 64.62.197.91