This IP address has been reported a total of
42
times from
28 distinct
sources.
52.128.241.109 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 9
reports;
Germany
with 7
reports;
United Kingdom of Great Britain and Northern Ireland
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
26
times;
Brute-Force
14
times;
Bad Web Bot
9
times;
Hacking
7
times;
Port Scan
4
times;
Other
11
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20.
show less
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 52.128.241.109 - - [21/Oct/2026:03:07:55 +0200] "GET /.env HTTP/1.1" 301 6342 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15"
...
show less
Email: Login failures from Bad Reputation IP: 52.128.241.109. Threat Score: 5.1/10 (MEDIUM). Reporte ...
show moreEmail: Login failures from Bad Reputation IP: 52.128.241.109. Threat Score: 5.1/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
