JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.91.173.54

80.91.173.54 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 70%: ?

70%

ISP	PRIVATE JOINT STOCK COMPANY DATAGROUP
Usage Type	Fixed Line ISP
ASN	AS3326
Hostname(s)	ll-dkt-r.newline.net.ua
Domain Name	datagroup.ua
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.91.173.54

Whois 80.91.173.54

IP Abuse Reports for 80.91.173.54:

This IP address has been reported a total of 53 times from 28 distinct sources. 80.91.173.54 was first reported on May 3rd 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 13:18:33 (19 hours ago)	(mod_security) mod_security (id:225170) triggered by 80.91.173.54 (ll-dkt-r.newline.net.ua): 1 in th ... show more (mod_security) mod_security (id:225170) triggered by 80.91.173.54 (ll-dkt-r.newline.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:18:28.165566 2026] [security2:error] [pid 32630:tid 32630] [client 80.91.173.54:57626] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|madisonjazzorchestra.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "madisonjazzorchestra.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atoNJL5Ney2yucII5dLBfgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 23:45:40 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 80.91.173.54 (ll-dkt-r.newline.net.ua): 1 in th ... show more (mod_security) mod_security (id:225170) triggered by 80.91.173.54 (ll-dkt-r.newline.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:45:35.903247 2026] [security2:error] [pid 1686:tid 1763] [client 80.91.173.54:37497] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|travelusa.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "travelusa.us"] [uri "/wp-json/wp/v2/users"] [unique_id "atlOn6sh4qoeWuQLKI8PywAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-10-21 13:05:31 (1 day ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-10-20 13:17:35 (2 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 kosada.com	2026-10-13 18:01:36 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=56&topics%5B1%5D=66&topics%5B2%5D=50&topics%5B3%5D=39 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇷🇸 Scan	2026-10-11 03:00:02 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 RAP	2026-10-10 11:39:37 (1 week ago)	2026-10-10 11:39:37 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇩🇪 tentwentyfour	2026-10-10 07:55:18 (1 week ago)	Blocked for brute-forcing WordPress log-in	Brute-Force Web App Attack
🇳🇱 EGP Abuse Dept	2026-10-10 07:21:10 (1 week ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇲🇽 octageeks.com	2026-10-10 04:56:51 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 FeG Deutschland	2026-10-08 18:50:52 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-05 19:39:31 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 80.91.173.54 (ll-dkt-r.newline.net.ua): 1 in th ... show more (mod_security) mod_security (id:210350) triggered by 80.91.173.54 (ll-dkt-r.newline.net.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 15:39:26.955931 2026] [security2:error] [pid 1851:tid 1851] [client 80.91.173.54:33152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|fastr-wellington.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fastr-wellington.com"] [uri "/"] [unique_id "asP87umtAZDPHUkzYyBJoQAAABU"], referer: https://backlinksforwebsite.shop/dir/seo-backlink-services-70701 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-10-01 03:23:53 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 80.91.173.54 2026-10-01T03:57:04+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 80.91.173.54 2026-10-01T03:57:04+02:00 vpn Access-Reject 'xsvek09' station: 80.91.173.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 鬼影233	2026-09-26 04:02:49 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 08:41:26 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2a03:2880:f352:5:face:b00c:0:79f4

🇹🇼 220.130.7.191

🇰🇷 220.116.117.213

🇦🇷 201.190.231.249

🇬🇧 200.138.46.233

🇹🇳 197.1.82.113

🇧🇷 179.109.154.169

🇯🇴 176.28.200.150

🇰🇷 175.209.156.146

🇺🇸 173.239.240.126

🇮🇳 106.222.200.74

🇳🇱 94.154.43.223

🇧🇬 62.60.134.210

🇫🇷 45.77.61.56

🇺🇸 13.219.1.233

🇷🇴 2.57.122.168

🇩🇪 213.209.159.231

🇺🇸 162.216.150.33

🇧🇩 160.191.115.186

🇻🇪 153.51.238.165