JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.114.111.103

188.114.111.103 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	CloudFlare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 188.114.111.103 is an IP address from within our whitelist belonging to the subnet 188.114.96.0/20, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 188.114.111.103

Whois 188.114.111.103

IP Abuse Reports for 188.114.111.103:

This IP address has been reported a total of 30 times from 12 distinct sources. 188.114.111.103 was first reported on December 15th 2020, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chrisj	2026-09-16 15:01:59 (6 hours ago)	[Wed Sep 16 15:01:58.397050 2026] [proxy_fcgi:error] [pid 20771:tid 20790] [remote 188.114.111.103:1 ... show more [Wed Sep 16 15:01:58.397050 2026] [proxy_fcgi:error] [pid 20771:tid 20790] [remote 188.114.111.103:11304] AH01071: Got error 'Primary script unknown' [Wed Sep 16 15:01:58.556612 2026] [proxy_fcgi:error] [pid 20771:tid 20789] [remote 188.114.111.103:11304] AH01071: Got error 'Primary script unknown' [Wed Sep 16 15:01:58.777270 2026] [proxy_fcgi:error] [pid 20771:tid 20791] [remote 188.114.111.103:11304] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇺🇸 chrisj	2026-09-15 18:37:22 (1 day ago)	[Tue Sep 15 18:37:19.667959 2026] [proxy_fcgi:error] [pid 9043:tid 9048] [remote 188.114.111.103:114 ... show more [Tue Sep 15 18:37:19.667959 2026] [proxy_fcgi:error] [pid 9043:tid 9048] [remote 188.114.111.103:11426] AH01071: Got error 'Primary script unknown' [Tue Sep 15 18:37:20.436142 2026] [proxy_fcgi:error] [pid 9043:tid 9058] [remote 188.114.111.103:11426] AH01071: Got error 'Primary script unknown' [Tue Sep 15 18:37:22.388067 2026] [proxy_fcgi:error] [pid 9043:tid 9054] [remote 188.114.111.103:11426] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇫🇷 arsonist	2026-09-14 23:59:58 (1 day ago)	[fail2ban] 2026-09-14T23:59:58.639254+00:00 arson caddy[1890453]: {"level":"info","ts":1789430398.63 ... show more [fail2ban] 2026-09-14T23:59:58.639254+00:00 arson caddy[1890453]: {"level":"info","ts":1789430398.639228,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"188.114.111.103","remote_port":"11848","client_ip":"188.114.111.103","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.env","headers":{"Cf-Visitor":["{\"scheme\":\"https\"}"],"Accept":["/"],"Accept-Encoding":["gzip, br"],"Cf-Connecting-Ip":["94.143.143.250"],"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"],"Cf-Ipcountry":["ES"],"X-Forwarded-For":["94.143.143.250"],"X-Forwarded-Proto":["https"],"Cf-Ray":["a3b35936edb3d929-MAD"],"Cdn-Loop":["cloudflare; loops=1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"ayuworks.xyz", ... show less	Bad Web Bot
🇧🇪 madeit	2026-09-08 07:18:04 (1 week ago)		Web App Attack
🇫🇷 arsonist	2026-09-03 02:24:28 (1 week ago)	[fail2ban] 2026-09-03T02:24:27.344098+00:00 arson caddy[1890453]: {"level":"info","ts":1788402267.34 ... show more [fail2ban] 2026-09-03T02:24:27.344098+00:00 arson caddy[1890453]: {"level":"info","ts":1788402267.3440557,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"188.114.111.103","remote_port":"11587","client_ip":"188.114.111.103","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/src/.git/config","headers":{"Cf-Connecting-Ip":["34.175.80.46"],"X-Forwarded-Proto":["https"],"Cf-Ray":["a3514c5a5d840269-MAD"],"Cf-Ipcountry":["ES"],"X-Forwarded-For":["34.175.80.46"],"Accept":["/"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Accept-Encoding":["gzip, br"],"User-Agent":["crusader-worker/1.0"],"Cdn-Loop":["cloudflare; loops=1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"ayuworks.xyz","ech":false}},"bytes_read":0,"user_id":"","duration":0.000097915,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\ ... show less	Bad Web Bot
🇫🇷 arsonist	2026-08-29 03:56:06 (2 weeks ago)	This IP accessed the path /wp-admin/css/colors/ocean/, which is banned. Powered by ListenCaddy	Bad Web Bot Web App Attack
🇫🇷 arsonist	2026-08-28 03:10:08 (2 weeks ago)	This IP accessed the path /wp-admin/css/wp-login.php, which is banned. Powered by ListenCaddy	Bad Web Bot Web App Attack
🇫🇷 arsonist	2026-08-25 00:18:23 (3 weeks ago)	This IP accessed the path /wp-admin/includes/, which is banned. Powered by ListenCaddy	Bad Web Bot Web App Attack
🇺🇸 chrisj	2026-08-19 19:18:24 (4 weeks ago)	[Wed Aug 19 19:18:23.826183 2026] [proxy_fcgi:error] [pid 1195985:tid 1196025] [remote 188.114.111.1 ... show more [Wed Aug 19 19:18:23.826183 2026] [proxy_fcgi:error] [pid 1195985:tid 1196025] [remote 188.114.111.103:10166] AH01071: Got error 'Primary script unknown' [Wed Aug 19 19:18:24.230354 2026] [proxy_fcgi:error] [pid 1195985:tid 1196026] [remote 188.114.111.103:10166] AH01071: Got error 'Primary script unknown' [Wed Aug 19 19:18:24.768740 2026] [proxy_fcgi:error] [pid 1195985:tid 1196027] [remote 188.114.111.103:10166] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇧🇪 madeit	2026-08-05 05:46:39 (1 month ago)		Web App Attack
🇺🇸 chrisj	2026-08-01 04:32:29 (1 month ago)	[Sat Aug 01 04:32:27.721262 2026] [proxy_fcgi:error] [pid 487987:tid 488003] [remote 188.114.111.103 ... show more [Sat Aug 01 04:32:27.721262 2026] [proxy_fcgi:error] [pid 487987:tid 488003] [remote 188.114.111.103:11356] AH01071: Got error 'Primary script unknown' [Sat Aug 01 04:32:28.572713 2026] [proxy_fcgi:error] [pid 487987:tid 488005] [remote 188.114.111.103:11356] AH01071: Got error 'Primary script unknown' [Sat Aug 01 04:32:29.081166 2026] [proxy_fcgi:error] [pid 487987:tid 488007] [remote 188.114.111.103:11356] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇺🇸 chrisj	2026-07-26 23:27:58 (1 month ago)	[Sun Jul 26 23:27:57.135314 2026] [proxy_fcgi:error] [pid 348766:tid 348806] [remote 188.114.111.103 ... show more [Sun Jul 26 23:27:57.135314 2026] [proxy_fcgi:error] [pid 348766:tid 348806] [remote 188.114.111.103:12735] AH01071: Got error 'Primary script unknown' [Sun Jul 26 23:27:58.231836 2026] [proxy_fcgi:error] [pid 348766:tid 348814] [remote 188.114.111.103:12735] AH01071: Got error 'Primary script unknown' [Sun Jul 26 23:27:58.501433 2026] [proxy_fcgi:error] [pid 348766:tid 348823] [remote 188.114.111.103:12735] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇳🇱 homeshowdomain.nl	2026-04-07 22:00:36 (5 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-06. show less	Web App Attack SSH Hacking
🇩🇪 ps-center	2026-02-14 05:57:19 (7 months ago)	SS1: Web Attack GET /wp-content/plugins/hellopress/wp_filemanager.php	Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 ps-center	2026-02-11 08:20:40 (7 months ago)	SS1: Web Attack GET /wp-admin/maint/about.php GET /wp-admin/network/wp-conflg.php?p=	Web Spam Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.51

🇺🇸 136.116.153.112

🇷🇴 92.118.39.50

🇮🇷 37.255.205.216

🇸🇬 34.87.79.198

🇭🇰 202.82.20.241

🇺🇦 195.26.18.82

🇲🇽 187.149.14.243

🇺🇸 152.163.205.0

🇩🇪 146.70.36.140

🇮🇳 122.187.224.28

🇺🇸 104.207.32.125

🇸🇮 102.220.160.173

🇹🇭 101.108.194.252

🇸🇬 47.79.199.84

🇺🇸 35.223.74.166

🇧🇪 35.205.100.78

🇸🇬 34.87.123.111

🇧🇪 34.14.77.138

🇺🇸 172.174.17.234