JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.141.56.111

209.141.56.111 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	FranTech Solutions
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53667
Hostname(s)	ambe.co
Domain Name	frantech.ca
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.141.56.111

Whois 209.141.56.111

IP Abuse Reports for 209.141.56.111:

This IP address has been reported a total of 39 times from 25 distinct sources. 209.141.56.111 was first reported on September 17th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-23 03:26:12 (10 hours ago)	[23/Sep/2026:06:26:12 +0300] -- 209.141.56.111 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /adm ... show more [23/Sep/2026:06:26:12 +0300] -- 209.141.56.111 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /administrator/components/com_jce/ HTTP/1.1 show less	Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-09-23 02:59:39 (10 hours ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /media/system/js/core.js UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Charlesiv	2026-09-22 18:00:28 (19 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 53667 (FranTech Solution ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 53667 (FranTech Solutions) Protocol: HTTP/1.1 (GET method) Endpoint: /media/com_sppagebuilder/assets/iconfont/icorilkaa/fonts/fexoxxm.PHP Timestamp: 2026-09-22T17:41:42Z Ray ID: a3f31a1b8b0a2847 UA: python-requests/2.34.2 show less	Bad Web Bot
🇩🇪 iNetWorker	2026-09-22 09:04:52 (1 day ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇮 [email protected]	2026-09-22 00:33:28 (1 day ago)	Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on hevikaraoke.fi (WP vul ... show more Attack attempt against Interwebbi servers; (WPNINJA) Ninja Firewall attack on hevikaraoke.fi (WP vulnerability) 209.141.56.111 (US/United States/ambe.co): 1 in the last 3600 secs (CF_ENABLE); IP: 209.141.56.111; Ports: *; Direction: 0; Trigger: LF_CUSTOMTRIGGER; show less	Web App Attack
🇩🇰 toolbit.online	2026-09-22 00:30:02 (1 day ago)	Automated scan for common CMS/admin/secrets-exposure paths (WordPress/Joomla/phpMyAdmin/.env/.git/cg ... show more Automated scan for common CMS/admin/secrets-exposure paths (WordPress/Joomla/phpMyAdmin/.env/.git/cgi-bin and similar) that do not exist on this server - all requests 404'd, volume stayed below any automatic ban threshold. show less	Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-09-21 19:02:38 (1 day ago)	(y3) Failed access -byebye- from 209.141.56.111 (US/United States/ambe.co): (CF_ENABLE)	Hacking
🇵🇱 Budyn	2026-09-21 15:03:21 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: sql.definitelynotahoneypot.xyz \| URI: /wp-admin/admin-ajax.php?action=updraft_central_ajaxcallback \| UA: python-requests/2.34.2 \| BODY: format=1&key_name=0.central.updraftplus.com&udrpc_message=004AA%3D%3D00000000000025ecHV%2FXwZXqofRafdym4MH67mJzKQenOy%2FoldsxoDCxajPNu1UGYmGSc4cqdMbe3gDuskqlK40De9D9nd8RFaT0RQ3IrdMZAqGOIrrzEQgKDcquSALYXilRe0mmbC%2FKQ%2FHrAOZLMD97%2FkwRf5W%2FveYF2VCytNFxGvpPGBqSO5o1woJPcpSNlYWHCPZeVuiv5uGQjmppaRWNTVw3TGi1NpFenrn2Q9s1t%2FO7sNlRX75ZUUEBDlYMUHFGDr2jw2U79bHyYk5 show less	Web Spam Web App Attack
Anonymous	2026-09-21 08:24:47 (2 days ago)	"GET /administrator/components/com_jce/ HTTP/1.1"	Hacking Web App Attack
🇵🇱 Budyn	2026-09-21 06:56:16 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: auth.goblinpot.online \| URI: /wp-admin/admin-ajax.php?action=updraft_central_ajaxcallback \| UA: python-requests/2.34.2 \| BODY: format=1&key_name=0.central.updraftplus.com&udrpc_message=004AA%3D%3D00000000000025ecHV%2FXwZXqofRafdym4MH67mJzKQenOy%2FoldsxoDCxajNLpYHm1PLgTE4VXa3rtcJJaMssb63CDmVKlgcrNACLRzhzZf%2BPW3LSkw7RhAPPOhRr5Hcgfa%2FC%2B2FduKsaglwBL%2B96%2F4q2w52btEPRTgTUsYcqbR7pR6NuHo1ZVsEfHIolcfY%2Fktt4BBgV20H2OVrqkjYncL1FuwthhtsqM78l%2B2J5gMVoKifEmVTZg4oIjoi%2BhXb8kbB67D8z9zmXWZsBAropnx show less	Web Spam Web App Attack
Anonymous	2026-09-21 03:35:48 (2 days ago)	[abuseipdb-autoban] 2026-09-21 03:35:48, Client: 209.141.56.111, Protocol: 6 (TCP), Service: HTTP, A ... show more [abuseipdb-autoban] 2026-09-21 03:35:48, Client: 209.141.56.111, Protocol: 6 (TCP), Service: HTTP, Activity: auto-banned after exceeding AbuseIPDB score threshold on visit to /index.php?option=com_jce, likely unclassified automated client, AbuseIPDB score at ban time: 100% (28 prior reports) show less	Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-09-21 00:23:16 (2 days ago)	Scanning for web/db/file exploits on www.peterkuiper.nl	SQL Injection Bad Web Bot Web App Attack
Anonymous	2026-09-20 17:27:42 (2 days ago)	Web application attack detected.	Web App Attack
🇩🇪 FeG Deutschland	2026-09-20 15:55:24 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇺🇸 kosada.com	2026-09-20 14:32:44 (2 days ago)	Repeated requests for suspicious nonexistent URLs, for example: /administrator/components/com_jce/ ( ... show more Repeated requests for suspicious nonexistent URLs, for example: /administrator/components/com_jce/ (HTTP port 443, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36") show less	Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇨🇴 181.56.174.63

🇮🇳 103.158.138.179

🇱🇦 103.150.75.74

🇫🇷 91.196.152.127

🇺🇸 57.141.0.44

🇺🇸 43.172.86.92

🇺🇸 35.192.116.191

🇯🇵 34.84.171.165

🇺🇸 216.254.254.253

🇧🇷 189.56.0.19

🇷🇺 188.234.242.48

🇧🇷 170.238.160.191

🇺🇸 165.154.235.9

🇰🇷 115.139.229.214

🇵🇭 103.86.185.250

🇺🇸 73.86.128.139

🇺🇸 64.62.156.43

🇱🇹 62.60.130.201

🇺🇸 40.124.187.35