JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 148.251.71.11

148.251.71.11 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.11.71.251.148.clients.your-server.de
Domain Name	hetzner.de
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 148.251.71.11

Whois 148.251.71.11

IP Abuse Reports for 148.251.71.11:

This IP address has been reported a total of 41 times from 28 distinct sources. 148.251.71.11 was first reported on June 15th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 VXG-NET	2026-06-19 04:32:07 (3 days ago)	port=80, indicator_type=code-execution	Hacking
🇩🇪 updown.io	2026-06-18 15:02:22 (3 days ago)	{"level":"info","ts":1781794939.3016446,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781794939.3016446,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"148.251.71.11","remote_port":"54600","client_ip":"148.251.71.11","proto":"HTTP/1.1","method":"GET","host":"status.pro-epic.com","uri":"/","headers":{"Accept-Encoding":["gzip"],"X-Client-Ip":["127.0.0.1"],"X-Real-Ip":["127.0.0.1"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0 Safari/537.36"],"Forwarded":["for=127.0.0.1"],"X-Originating-Ip":["127.0.0.1"],"X-Remote-Ip":["127.0.0.1"],"X-Forwarded-For":["127.0.0.1"],"Accept":["/"],"X-Remote-Addr":["127.0.0.1"]}},"bytes_read":0,"user_id":"","duration":0.000082748,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.pro-epic.com/"],"Content-Type":[]}} {"level":"info","ts":1781794939.7999675,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"148.251.71.11","remote_port":"54748","client_ip" ... show less	DDoS Attack Web App Attack
🇩🇪 gamingkante.xyz	2026-06-18 11:43:50 (3 days ago)	[Thu Jun 18 13:43:49.946813 2026] [php:error] [pid 1663838:tid 1663838] [client 148.251.71.11:54060] ... show more [Thu Jun 18 13:43:49.946813 2026] [php:error] [pid 1663838:tid 1663838] [client 148.251.71.11:54060] script '/var/www/html/web/app_dev.php' not found or unable to stat [Thu Jun 18 13:43:49.953158 2026] [php:error] [pid 1663838:tid 1663838] [client 148.251.71.11:54060] script '/var/www/html/web/app_dev.php' not found or unable to stat [Thu Jun 18 13:43:49.959523 2026] [php:error] [pid 1663838:tid 1663838] [client 148.251.71.11:54060] script '/var/www/html/web/app_dev.php' not found or unable to stat [Thu Jun 18 13:43:49.965833 2026] [php:error] [pid 1663838:tid 1663838] [client 148.251.71.11:54060] script '/var/www/html/web/app_dev.php' not found or unable to stat [Thu Jun 18 13:43:49.972160 2026] [php:error] [pid 1663838:tid 1663838] [client 148.251.71.11:54060] script '/var/www/html/web/app_dev.php' not found or unable to stat [Thu Jun 18 13:43:49.978400 2026] [php:error] [pid 1663838:tid 1663838] [client 148.251.71.11:54060] script '/var/www/html/web/app_dev.php' not found or unable ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 07:34:06 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 148.251.71.11 (static.11.71.251.148.clients.you ... show more (mod_security) mod_security (id:210492) triggered by 148.251.71.11 (static.11.71.251.148.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 03:34:01.222403 2026] [security2:error] [pid 1057:tid 1076] [client 148.251.71.11:49930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "new.flutelesson.nl"] [uri "/wp-config.php.bak"] [unique_id "ajOfaYWqJcv42qzYNKu6uQAAAFA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-18 05:16:35 (3 days ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 05:08:16 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 148.251.71.11 (static.11.71.251.148.clients.you ... show more (mod_security) mod_security (id:210492) triggered by 148.251.71.11 (static.11.71.251.148.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 01:08:10.262344 2026] [security2:error] [pid 17008:tid 17008] [client 148.251.71.11:63576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infinite-e.com"] [uri "/wp-config.php.bak"] [unique_id "ajN9OiYC-qPu57uems7HegAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 04:28:01 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 148.251.71.11 (static.11.71.251.148.clients.you ... show more (mod_security) mod_security (id:210492) triggered by 148.251.71.11 (static.11.71.251.148.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 00:27:55.219555 2026] [security2:error] [pid 30477:tid 30477] [client 148.251.71.11:61520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.christianbroadcastingleague.com"] [uri "/wp-config.php.bak"] [unique_id "ajNzy07QAA5qSUoaNkmuvQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rdpguard.com	2026-06-18 04:20:54 (4 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 jormaster3k	2026-06-18 04:08:25 (4 days ago)	Attack against Apache (too many 404s)	Web App Attack
🇳🇱 Site.eu	2026-06-18 03:56:22 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 Starburst SysOp Team	2026-06-18 02:55:19 (4 days ago)	. Matched phrase "wp-config.php" at REQUEST_URI. (210492-srv1)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 02:22:18 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 148.251.71.11 (static.11.71.251.148.clients.you ... show more (mod_security) mod_security (id:210492) triggered by 148.251.71.11 (static.11.71.251.148.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 22:22:12.258525 2026] [security2:error] [pid 24160:tid 24160] [client 148.251.71.11:52796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smoothg.com"] [uri "/wp-config.php.bak"] [unique_id "ajNWVLk7_2FthviwcYR6ggAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-17 22:01:50 (4 days ago)	Auto-ban: >3000 req/min op 2026-06-17	Web App Attack SSH Hacking
🇺🇸 jhuisi	2026-06-17 20:53:42 (4 days ago)	Mod Security Hit	Web App Attack
🇮🇪 AutosOnShow	2026-06-17 20:53:05 (4 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-17 20:52:30.055 \|	Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 81.19.216.104

🇲🇾 47.250.43.129

🇺🇸 209.46.125.221

🇭🇰 199.45.154.177

🇺🇸 195.184.76.135

🇺🇸 195.184.76.131

🇳🇱 193.176.31.251

🇳🇱 193.176.31.220

🇳🇱 193.176.31.219

🇰🇷 121.131.220.135

🇨🇳 106.13.120.65

🇳🇱 89.21.67.152

🇳🇱 89.21.67.148

🇺🇸 65.49.1.91

🇨🇳 61.129.70.208

🇳🇱 51.15.41.182

🇳🇱 45.153.34.181

🇨🇳 39.152.240.15

🇺🇸 20.14.88.205

🇨🇳 218.63.75.44