JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.107.252.136

91.107.252.136 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 0%: ?

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.136.252.107.91.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nurnberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.107.252.136

Whois 91.107.252.136

IP Abuse Reports for 91.107.252.136:

This IP address has been reported a total of 8 times from 4 distinct sources. 91.107.252.136 was first reported on August 17th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 nyuuzyou	2024-11-08 19:39:27 (1 year ago)	Intensive scraping: /web?s=Categories%20PageIndex%20Recent%20Changes%20Recently%20Commented%20%22Log ... show more Intensive scraping: /web?s=Categories%20PageIndex%20Recent%20Changes%20Recently%20Commented%20%22Login%2FRegister%22%20%22%5BSource%5D%22%20%22%5BHistory%5D%22&country=ga-ga&scraper=wiby. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68. show less	Bad Web Bot
🇬🇧 PulseServers	2024-11-07 05:06:34 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUK2 ... show less	DDoS Attack Exploited Host
🇺🇸 PulseServers	2024-11-05 23:10:24 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1 ... show less	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2024-10-16 14:12:00 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 91.107.252.136 (static.136.252.107.91.clients.y ... show more (mod_security) mod_security (id:240335) triggered by 91.107.252.136 (static.136.252.107.91.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 16 10:11:53.527487 2024] [security2:error] [pid 16052:tid 16052] [client 91.107.252.136:49144] [client 91.107.252.136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 134.19.178.167 (+1 hits since last alert)\|www.nationalenq.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.nationalenq.com"] [uri "/xmlrpc.php"] [unique_id "Zw_JqYCs_tomhOZuTrXzjAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-16 07:36:07 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇫🇮 nyuuzyou	2024-10-07 04:28:04 (1 year ago)	Intensive scraping: /web?s=%22Did%20not%20find%20what%20you%20were%20looking%20for%3F%20Please%2C%20 ... show more Intensive scraping: /web?s=%22Did%20not%20find%20what%20you%20were%20looking%20for%3F%20Please%2C%20post%20your%20question%22&scraper=mwmbl. User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36. show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-08-25 00:03:28 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 91.107.252.136 (static.136.252.107.91.clients.y ... show more (mod_security) mod_security (id:240335) triggered by 91.107.252.136 (static.136.252.107.91.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 24 20:03:21.992860 2024] [security2:error] [pid 9300:tid 9300] [client 91.107.252.136:41010] [client 91.107.252.136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 141.98.102.179 (1+1 hits since last alert)\|www.puckerbackbikini.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.puckerbackbikini.com"] [uri "/xmlrpc.php"] [unique_id "Zsp0yeGi6Qv5_QBcc7hQfwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-17 06:14:47 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 213.35.120.133

🇭🇰 165.154.70.130

🇨🇳 123.14.122.120

🇨🇳 119.179.19.254

🇨🇳 113.206.128.243

🇳🇱 85.11.167.7

🇱🇹 81.30.98.62

🇨🇳 59.52.103.33

🇺🇸 45.39.4.107

🇳🇱 195.178.110.30

🇺🇸 162.216.149.168

🇺🇸 162.144.60.19

🇰🇷 150.109.254.122

🇵🇹 85.245.76.180

🇪🇬 41.38.203.146

🇺🇸 31.57.86.242

🇩🇪 217.160.64.240

🇱🇹 185.36.81.23

🇳🇱 176.65.148.93

🇫🇷 167.86.87.228