JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 141.11.36.49

141.11.36.49 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 56%: ?

56%

ISP	Vantiva SA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vantiva.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 141.11.36.49

Whois 141.11.36.49

IP Abuse Reports for 141.11.36.49:

This IP address has been reported a total of 72 times from 46 distinct sources. 141.11.36.49 was first reported on March 17th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-06-06 07:46:15 (2 days ago)	[SatJun0609:46:10.7072562026][security2:error][pid1117263:tid1117505][client141.11.36.49:0]ModSecuri ... show more [SatJun0609:46:10.7072562026][security2:error][pid1117263:tid1117505][client141.11.36.49:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-content/uploads/.\*\\\\\\\\.ph\(\?:p\\|tml\\|t\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"5100\"][id\"382238\"][rev\"2\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:PHPfileexecutioninuploadsdirectorydenied\"][data\"wp-content/uploads/wpforms/index.php\"][severity\"CRITICAL\"][hostname\"ruberticonsulting.ch\"][uri\"/wp-content/uploads/wpforms/index.php\"][unique_id\"aiPQQjuAsucDT61CWub3JgAAARI\"] show less	Hacking Web App Attack
🇨🇭 Origon	2026-06-06 04:07:52 (2 days ago)	http-wordpress-scan - IP: 141.11.36.49 - time="2026-06-06T06:07:51+02:00" level=info msg="(555f66b4 ... show more http-wordpress-scan - IP: 141.11.36.49 - time="2026-06-06T06:07:51+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 141.11.36.49 (IT/137409) : 4h ban on Ip 141.11.36.49" module=db show less	Web App Attack
🇩🇪 raph	2026-06-05 22:54:56 (2 days ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-05-30 01:44:17 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇬🇧 consul.to	2026-05-29 13:13:23 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇿🇦 Tokolosh Hunters	2026-05-26 15:47:02 (1 week ago)	AutoBlockWindow-Known bad useragent query-2026-05-26 15:47:01	Bad Web Bot
🇩🇪 LRob.fr	2026-05-26 02:45:13 (1 week ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 masterguru	2026-05-07 05:27:45 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-128) show less	Bad Web Bot
🇫🇷 dynamix	2026-05-06 20:17:57 (1 month ago)	Multiple WAF Violations	Web App Attack
🇳🇱 sernate	2026-05-06 18:45:38 (1 month ago)	(404blocker) 404 trigger 141.11.36.49 (IT/Italy/-): 80 in the last 3600 secs; Ports: ; Direction: i ... show more (404blocker) 404 trigger 141.11.36.49 (IT/Italy/-): 80 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force
🇩🇪 paissangroup	2026-05-04 16:39:27 (1 month ago)	Multiple WAF Violations	Web App Attack
🇧🇪 cmbplf	2026-05-04 11:34:04 (1 month ago)	1.834 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇩🇪 findlab	2026-04-24 03:00:31 (1 month ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2026-04-21 15:51:08 (1 month ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 141.11.36.49 (FR/France/ ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 141.11.36.49 (FR/France/-) show less	Port Scan
🇺🇸 lavnet.net	2026-04-18 01:03:41 (1 month ago)	141.11.36.49 - - [18/Apr/2026:01:03:39 +0000] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 2 ... show more 141.11.36.49 - - [18/Apr/2026:01:03:39 +0000] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 2066 "-" "Go-http-client/1.1" 141.11.36.49 - - [18/Apr/2026:01:03:39 +0000] "GET /wp-content/themes/Divi/404.php HTTP/1.1" 404 2028 "-" "Go-http-client/1.1" 141.11.36.49 - - [18/Apr/2026:01:03:39 +0000] "GET /wp-content/plugins/ubh/ubh.php HTTP/1.1" 404 2028 "-" "Go-http-client/1.1" 141.11.36.49 - - [18/Apr/2026:01:03:40 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 404 2028 "-" "Go-http-client/1.1" 141.11.36.49 - - [18/Apr/2026:01:03:40 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 2028 "-" "Go-http-client/1.1" 141.11.36.49 - - [18/Apr/2026:01:03:40 +0000] "GET /wp-content/plugins/about.php HTTP/1.1" 404 2028 "-" "Go-http-client/1.1" ... show less	Brute-Force

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.153.76.91

🇩🇪 172.217.34.17

🇺🇸 137.184.200.11

🇸🇬 101.47.161.2

🇱🇹 91.224.92.32

🇩🇰 85.203.47.26

🇷🇴 80.94.95.116

🇸🇦 51.36.232.132

🇺🇸 44.84.142.145

🇺🇸 172.253.1.18

🇺🇸 165.22.9.166

🇸🇬 114.119.137.146

🇷🇺 109.194.108.203

🇫🇷 90.3.201.197

🇭🇷 82.132.56.91

🇷🇴 80.94.92.165

🇺🇸 64.62.197.108

🇺🇸 44.220.93.147

🇺🇸 34.73.175.50

🇯🇵 8.216.7.74