This IP address has been reported a total of
526
times from
422 distinct
sources.
52.141.61.40 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 140
reports;
United States of America
with 89
reports;
France
with 53
reports.
The most common categories in these recent reports were:
Web App Attack
408
times;
Bad Web Bot
136
times;
Brute-Force
122
times;
Hacking
99
times;
Port Scan
55
times;
Other
85
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1792041550.0779238,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792041550.0779238,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"52.141.61.40","remote_port":"59633","client_ip":"52.141.61.40","proto":"HTTP/1.1","method":"GET","host":"status.partsbox.io","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000073169,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.partsbox.io/wp-content/plugins/hellopress/wp_filemanager.php"],"Content-Type":[]}}
{"level":"info","ts":1792041552.1178293,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"52.141.61.40","remote_port":"45117","client_ip":"52.141.61.40","proto":"HTTP/1.1","method":"GET","host":"status.partsbox.io","uri":"/this_is_a_new_hello_world.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000060173,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://status.par
...
show less
[URL BRUTE-FORCE] f2b match %{+Q}r for ^.*haproxy\[[0-9]+\]: <HOST>:[0-9].*[\d]+\/[\d]+\/[\d]+\/[\d] ...
show more[URL BRUTE-FORCE] f2b match %{+Q}r for ^.*haproxy\[[0-9]+\]: <HOST>:[0-9].*[\d]+\/[\d]+\/[\d]+\/[\d]+\/[\d]+ 40(4|3).*(GET |POST )/[A-Za-z0-9]\.php HTTP/1.1$
show less
Web vulnerability scanning: automated requests without User-Agent. Blocked by firewall on 27 differe ...
show moreWeb vulnerability scanning: automated requests without User-Agent. Blocked by firewall on 27 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /1.php, /chosen.php, /radio.php, /z70.php, /3PJcpMFsD8B.php. Automated report.
show less
Automated attack blocked by eryilmaz WAF/fail2ban: 4 event(s) [waf.autoban,waf.block] in the last 1 ...
show moreAutomated attack blocked by eryilmaz WAF/fail2ban: 4 event(s) [waf.autoban,waf.block] in the last 1 days, e.g. /wp-content/plugins/hellopress/wp_filemanager.php
show less
Blocked by UFW (TCP on 80)
Source port: 3024
TTL: 108
Packet length: 52
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 80)
Source port: 3024
TTL: 108
Packet length: 52
TOS: 0x00
This report (for 52.141.61.40) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[Wed Oct 14 18:54:46.743380 2026] [php:error] [pid 583297] [client 52.141.61.40:62495] script '/var/ ...
show more[Wed Oct 14 18:54:46.743380 2026] [php:error] [pid 583297] [client 52.141.61.40:62495] script '/var/www/html/campus-perpignan/3PJcpMFsD8B.php' not found or unable to stat
[Thu Oct 15 01:54:29.285488 2026] [php:error] [pid 786961] [client 52.141.61.40:12550] script '/var/www/html/desk.radio-campus.org/desk/www/this_is_a_new_hello_world.php' not found or unable to stat
[Thu Oct 15 01:54:29.511557 2026] [php:error] [pid 786961] [client 52.141.61.40:12550] script '/var/www/html/desk.radio-campus.org/desk/www/3PJcpMFsD8B.php' not found or unable to stat
...
show less
