This IP address has been reported a total of
9
times from
8 distinct
sources.
88.198.20.91 was first reported on
October 24th 2026 , and the most recent report was
3 hours ago .
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Greece
with 2
reports;
Spain
with 1
report.
The most common categories in these recent reports were:
Port Scan
4
times;
Bad Web Bot
3
times;
Web App Attack
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฌ๐ท
setupgr
2026-10-24 20:16:41
(3 hours ago)
(mod_security) mod_security (id:11000011) triggered by 88.198.20.91 (DE/Germany/Saxony/Falkenstein/- ...
show more
(mod_security) mod_security (id:11000011) triggered by 88.198.20.91 (DE/Germany/Saxony/Falkenstein/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 24 23:16:37.173761 2026] [security2:error] [pid 869234:tid 869339] [client 88.198.20.91:35260] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.88-198-20-91.clients.your-server.de"] [severity "CRITICAL"] [hostname "villa-izabela.com"] [uri "/"] [unique_id "at0SJVyCdQfnu8H3uO3o8gAAA8E"]
show less
Port Scan
๐ซ๐ฎ
wpwoodo
2026-10-24 17:14:41
(6 hours ago)
Webpage crawler
Bad Web Bot
๐ฉ๐ช
LRob
2026-10-24 15:32:01
(7 hours ago)
Not following 301 redirects โ wasted requests | method: GET | path: /contact | ua: Mozilla/5.0 (Maci ...
show more
Not following 301 redirects โ wasted requests | method: GET | path: /contact | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ช๐ธ
pipeline.es
2026-10-24 13:19:26
(10 hours ago)
Web scanning / probing for vulnerable paths | URL: /contato | Evidence: geaweb.pt 88.198.20.91 - - [ ...
show more
Web scanning / probing for vulnerable paths | URL: /contato | Evidence: geaweb.pt 88.198.20.91 - - [24/Oct/2026:15:13:23 +0200] \"GET /contato HTTP/1.1\" 404 22978 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=DE 21614 | ASN: Hetzner Online GmbH | Country: DE
show less
Port Scan
Web App Attack
Anonymous
2026-10-24 13:06:56
(10 hours ago)
Blocked by ModSec and CSF
Port Scan
๐ฉ๐ช
DocNetzwerk
2026-10-24 13:02:27
(10 hours ago)
88.198.20.91 (DE/Germany/static.88-198-20-91.clients.your-server.de), more than 7 Apache 403 hits
Hacking
๐บ๐ธ
darkavenger
2026-10-24 13:01:01
(10 hours ago)
Website Scanning / Scraping | 2026-10-24 12:00:57 | 88.198.20.91 42346 | en,*;q=0.5 | Mozilla/5.0 (M ...
show more
Website Scanning / Scraping | 2026-10-24 12:00:57 | 88.198.20.91 42346 | en,*;q=0.5 | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ฌ๐ท
setupgr
2026-10-24 12:08:15
(11 hours ago)
(mod_security) mod_security (id:11000011) triggered by 88.198.20.91 (DE/Germany/Saxony/Falkenstein/- ...
show more
(mod_security) mod_security (id:11000011) triggered by 88.198.20.91 (DE/Germany/Saxony/Falkenstein/-/[AS24940 Hetzner Online GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 24 15:08:12.351351 2026] [security2:error] [pid 869602:tid 869747] [client 88.198.20.91:36506] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.88-198-20-91.clients.your-server.de"] [severity "CRITICAL"] [hostname "www.tavernadimitris.com"] [uri "/"] [unique_id "atyfrDRuWyL09A5SWclz_QAAAU0"]
show less
Port Scan
๐ฉ๐ช
iNetWorker
2026-10-24 11:02:11
(12 hours ago)
trolling for resource vulnerabilities
Web App Attack
Showing 1 to
9
of 9 reports