JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 141.94.36.11

141.94.36.11 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-9dafe7d4.vps.ovh.net
Domain Name	ovh.net
Country	🇫🇷 France
City	Lille, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 141.94.36.11

Whois 141.94.36.11

IP Abuse Reports for 141.94.36.11:

This IP address has been reported a total of 25 times from 20 distinct sources. 141.94.36.11 was first reported on August 26th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 SkyDancer	2026-09-01 11:47:30 (1 hour ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇫🇷 Omar Martínez	2026-09-01 09:52:30 (3 hours ago)	141.94.36.11 - - [01/Sep/2026:03:52:29 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 7314 "-" "M ... show more 141.94.36.11 - - [01/Sep/2026:03:52:29 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 7314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Phishing Email Spam Blog Spam
Anonymous	2026-09-01 06:23:02 (6 hours ago)	Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /login.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 00:54:56 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 141.94.36.11 (vps-9dafe7d4.vps.ovh.net): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 141.94.36.11 (vps-9dafe7d4.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:54:51.587198 2026] [security2:error] [pid 7348:tid 7348] [client 141.94.36.11:55322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pcga.golf"] [uri "/wp-config.php.old"] [unique_id "apYiW43gHZBpC7AWCJjARQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-08-31 23:18:58 (13 hours ago)	[Tue Sep 01 01:18:58.222214 2026] [proxy_fcgi:error] [pid 748939:tid 138818057377472] [client 141.94 ... show more [Tue Sep 01 01:18:58.222214 2026] [proxy_fcgi:error] [pid 748939:tid 138818057377472] [client 141.94.36.11:35312] AH01071: Got error 'Primary script unknown' [Tue Sep 01 01:18:58.376626 2026] [proxy_fcgi:error] [pid 748939:tid 138817503753920] [client 141.94.36.11:35314] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 19:03:44 (17 hours ago)	[ns31.kdns.gr] httpd-config-scan: sites=www.savouras.gr; logs=/var/log/httpd/access_log,/var/log/htt ... show more [ns31.kdns.gr] httpd-config-scan: sites=www.savouras.gr; logs=/var/log/httpd/access_log,/var/log/httpd/domains/savouras.gr.log; samples=/wp-config.php.bak \| /wp-config.php~ \| /wp-config.php.save show less	Hacking Web App Attack
🇺🇸 TAY	2026-08-31 11:55:38 (1 day ago)	141.94.36.11 - - [31/Aug/2026:19:55:30 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 34938 "-" "Mozil ... show more 141.94.36.11 - - [31/Aug/2026:19:55:30 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 34938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 141.94.36.11 - - [31/Aug/2026:19:55:32 +0800] "GET /wp-config.php~ HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 141.94.36.11 - - [31/Aug/2026:19:55:33 +0800] "GET /wp-config.php.save HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 141.94.36.11 - - [31/Aug/2026:19:55:34 +0800] "GET /wp-config.php.old HTTP/1.1" 404 34922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 141.94.36.11 - - [31/Aug/2026:19:55:35 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 34906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Brute-Force
🇫🇮 [email protected]	2026-08-31 04:03:20 (1 day ago)	Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on mail.poolpoint.fi (WP ... show more Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on mail.poolpoint.fi (WP vulnerability) 141.94.36.11 (FR/France/vps-9dafe7d4.vps.ovh.net): 1 in the last 3600 secs (CF_ENABLE); IP: 141.94.36.11; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER; show less	Web App Attack
🇫🇷 masterguru	2026-08-31 03:22:09 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 141.94.36.11 (FR/France/vps-9dafe7d4. ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 141.94.36.11 (FR/France/vps-9dafe7d4.vps.ovh.net): 1 in the last 3600 secs (0-195) show less	Hacking
🇿🇦 conure.sh	2026-08-31 01:40:45 (1 day ago)	csagent: score 19.9: wp-config backup grab x2; 1 domain(s) in 1s	Web App Attack
🇩🇪 LRob	2026-08-30 16:35:38 (1 day ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /index.php/wp-json/batch/v1 \| 2026-08-30 16:35 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 14:37:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 141.94.36.11 (vps-9dafe7d4.vps.ovh.net): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 141.94.36.11 (vps-9dafe7d4.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 10:37:16.424147 2026] [security2:error] [pid 15873:tid 15873] [client 141.94.36.11:37698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.fgrotary.org"] [uri "/wp-config.php.orig"] [unique_id "apRAHNDlWromnhJFXWum9wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-30 10:34:46 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇫🇷 masterguru	2026-08-30 07:55:09 (2 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 141.94.36.11 (FR/France/vps-9dafe7d4. ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 141.94.36.11 (FR/France/vps-9dafe7d4.vps.ovh.net): 2 in the last 3600 secs (0-196) show less	Hacking
Anonymous	2026-08-30 07:00:48 (2 days ago)	ITDATINE WEBEXPLOIT 141.94.36.11 (vps-9dafe7d4.vps.ovh.net)	Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a01:e0a:11ae:5230:e4dd:29e3:b033:4520

🇺🇸 199.195.252.209

🇨🇱 186.105.229.42

🇺🇸 35.223.197.93

🇧🇪 34.140.157.11

🇺🇸 209.87.169.22

🇷🇺 178.178.222.52

🇳🇬 154.120.88.163

🇮🇹 94.88.180.210

🇺🇸 93.177.95.252

🇫🇷 77.239.124.181

🇺🇸 74.207.249.162

🇮🇩 36.92.166.242

🇨🇳 1.57.185.134

🇦🇫 149.54.62.58

🇨🇳 112.38.56.217

🇳🇱 93.123.109.165

🇫🇷 91.231.89.151

🇺🇸 74.125.186.88

🇺🇸 64.59.125.121