JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.52.41.11

154.52.41.11 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	Cogent Communications, LLC
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	cogentco.com
Country	🇧🇪 Belgium
City	Bierbeek, Flanders

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.52.41.11

Whois 154.52.41.11

IP Abuse Reports for 154.52.41.11:

This IP address has been reported a total of 14 times from 12 distinct sources. 154.52.41.11 was first reported on October 4th 2021, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2021-10-13 17:14:08 (4 years ago)	Restricted File Access Requests	Hacking Brute-Force
🇺🇸 TheMadBeaker	2021-10-13 11:32:21 (4 years ago)	Fail2Ban Ban Triggered HTTP Exploit Attempt	Brute-Force Web App Attack
🇧🇷 Renato Freitas	2021-10-07 07:13:00 (4 years ago)	Web Attack: Laravel Framework CVE-2017-16894	Web App Attack
Anonymous	2021-10-06 23:59:10 (4 years ago)	ModSecurity detections (a)	Bad Web Bot Web App Attack
🇳🇱 nick	2021-10-06 16:25:42 (4 years ago)	[06/Oct/2021:20:25:41 +0000] YV4GRSQ1p5RUpaHIebfS5gAAAAw 154.52.41.11 32852 5.2.65.207 7080 06/Oct/2 ... show more [06/Oct/2021:20:25:41 +0000] YV4GRSQ1p5RUpaHIebfS5gAAAAw 154.52.41.11 32852 5.2.65.207 7080 06/Oct/2021:20:25:41 +0000X-Real-IP: 154.52.41.11 06/Oct/2021:20:25:41 +0000Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 154.52.41.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "5.2.65.207"] [uri "/.env"] [unique_id "YV4GRSQ1p5RUpaHIebfS5gAAAAw"] [06/Oct/2021:20:25:41 +0000] YV4GRSQ1p5RUpaHIebfS5wAAAAo 154.52.41.11 38734 5.2.65.207 7081 06/Oct/2021:20:25:41 +0000X-Real-IP: 154.52.41.11 show less	Web App Attack
🇳🇱 nick	2021-10-06 10:03:55 (4 years ago)	[06/Oct/2021:14:03:54 +0000] YV2syoBqavLtqxmUd4NXOQAAAMc 154.52.41.11 54074 5.2.65.207 7080 06/Oct/2 ... show more [06/Oct/2021:14:03:54 +0000] YV2syoBqavLtqxmUd4NXOQAAAMc 154.52.41.11 54074 5.2.65.207 7080 06/Oct/2021:14:03:54 +0000X-Real-IP: 154.52.41.11 06/Oct/2021:14:03:54 +0000Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 154.52.41.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "5.2.65.207"] [uri "/.env"] [unique_id "YV2syoBqavLtqxmUd4NXOQAAAMc"] [06/Oct/2021:14:03:55 +0000] YV2sy4BqavLtqxmUd4NXOgAAANU 154.52.41.11 59956 5.2.65.207 7081 06/Oct/2021:14:03:55 +0000X-Real-IP: 154.52.41.11 show less	Web App Attack
🇩🇪 zeitschel.net	2021-10-06 05:44:15 (4 years ago)	2021-10-06 11:44:14 multiple 404 on /.env	Hacking Web App Attack
🇧🇪 taivas.nl	2021-10-06 00:32:11 (4 years ago)	Many_bad_calls	Web App Attack
🇨🇦 MonaNot	2021-10-05 23:38:08 (4 years ago)	Repeated attempts to gain admin, injection and port scans	Port Scan Hacking
🇧🇪 taivas.nl	2021-10-05 11:32:07 (4 years ago)	Bad_requests	Bad Web Bot
🇩🇪 vtibi	2021-10-04 23:41:39 (4 years ago)	154.52.41.11 - - [05/Oct/2021:05:41:39 +0200] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 404 39 ... show more 154.52.41.11 - - [05/Oct/2021:05:41:39 +0200] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 404 397 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 154.52.41.11 - - [05/Oct/2021:05:41:39 +0200] "GET /administrator/help/en-GB/toc.json HTTP/1.1" 404 397 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 154.52.41.11 - - [05/Oct/2021:05:41:39 +0200] "GET /administrator/language/en-GB/install.xml HTTP/1.1" 404 397 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 154.52.41.11 - - [05/Oct/2021:05:41:39 +0200] "GET /plugins/system/debug/debug.xml HTTP/1.1" 404 397 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" ... show less	Web App Attack
🇬🇷 Alekos Alexandrakis	2021-10-04 16:59:03 (4 years ago)	Reason: Common CMS scan Requested URI: /administrator/help/en-gb/toc.json IP address: 154.5 ... show more Reason: Common CMS scan Requested URI: /administrator/help/en-gb/toc.json IP address: 154.52.41.11 Hostname: 11-41-52-154.purecpu-network.com User agent: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0 Date (UTC): 2021-10-04 20:07:06 show less	Hacking
🇺🇸 snydr	2021-10-04 03:55:11 (4 years ago)	connection attempt port 80 TCP	Port Scan
🇫🇷 QUADEMU Abuse Dpt	2021-10-04 02:35:46 (4 years ago)	[New] Noxious/Nuisible/вредоносный Host.	Port Scan Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2603:1062:0:b6::f

🇺🇸 2601:408:c180:4120:4d95:8963:a495:2460

🇺🇸 184.105.247.200

🇰🇷 211.37.174.62

🇺🇸 192.155.88.231

🇺🇸 172.202.118.46

🇺🇸 47.251.92.23

🇩🇪 2a01:4f8:141:1252:e058:35b9:ab6b:be85

🇻🇳 103.63.108.25

🇨🇳 223.247.153.211

🇧🇷 200.101.227.62

🇨🇴 181.56.210.115

🇺🇸 173.255.214.52

🇳🇱 91.92.40.36

🇺🇿 84.54.70.42

🇺🇸 64.94.153.251

🇹🇼 59.124.222.13

🇳🇱 45.148.10.240

🇨🇳 111.55.204.10

🇺🇸 66.132.195.77