JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.124.88.21

91.124.88.21 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 40%: ?

40%

ISP	JSC Ukrtelecom
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	ukrtelecom.ua
Country	🇦🇺 Australia
City	Adelaide, South Australia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.124.88.21

Whois 91.124.88.21

IP Abuse Reports for 91.124.88.21:

This IP address has been reported a total of 67 times from 34 distinct sources. 91.124.88.21 was first reported on September 17th 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-08 05:52:18 (10 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 13:07:26 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 91.124.88.21 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 91.124.88.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 09:07:19.665509 2026] [security2:error] [pid 24226:tid 24253] [client 91.124.88.21:26123] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|trinketjar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "trinketjar.com"] [uri "/images/stories/themes.php"] [unique_id "akURB37ZqqVR4Ko-rHwm4wAAAZU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-01 03:43:08 (1 week ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-06-30 00:10:37 (1 week ago)	alfa-rex.php	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 17:53:56 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 91.124.88.21 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 91.124.88.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 13:53:49.583726 2026] [security2:error] [pid 2268:tid 2268] [client 91.124.88.21:28849] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|thelostfruit.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "thelostfruit.com"] [uri "/images/stories/themes.php"] [unique_id "akAOLcx7Mds42KkOj4M_WwAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-06-27 14:54:52 (1 week ago)	Aggressive web search of vulnerable pages: /.well-known/acme-challenge/install.php /.well-known/acme ... show more Aggressive web search of vulnerable pages: /.well-known/acme-challenge/install.php /.well-known/acme-challenge/plugins.php /.well-known/acme-ch ... show less	Web App Attack
Anonymous	2026-06-27 06:33:44 (1 week ago)	91.124.88.21 - - [27/Jun/2026:14:33:44 +0800] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 30 ... show more 91.124.88.21 - - [27/Jun/2026:14:33:44 +0800] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 301 268 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-26 16:59:36 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 consul.to	2026-06-24 18:43:29 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-23 15:30:12 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-05-05 15:13:57 (2 months ago)	[redacted] 91.124.88.21 - - [05/May/2026:17:13:48 +0200] "GET /admin.php HTTP/1.1" 404 1873 "-" "Moz ... show more [redacted] 91.124.88.21 - - [05/May/2026:17:13:48 +0200] "GET /admin.php HTTP/1.1" 404 1873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" [redacted] 91.124.88.21 - - [05/May/2026:17:13:52 +0200] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 404 1873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" [redacted] 91.124.88.21 - - [05/May/2026:17:13:53 +0200] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 404 1873 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" [redacted] 91.124.88.21 - - [05/May/2026:17:13:53 +0200] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 404 1873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" [redacted] 91.124.88.21 - - [05/May/2026:17:13:54 +0 ... show less	Hacking Web App Attack
Anonymous	2026-04-26 00:11:27 (2 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
Anonymous	2026-03-16 22:16:12 (3 months ago)	91.124.88.21 - - [16/Mar/2026:23:15:31 +0100] "GET /assets/css/dist/ HTTP/1.1" 404 495 "-" "Mozilla/ ... show more 91.124.88.21 - - [16/Mar/2026:23:15:31 +0100] "GET /assets/css/dist/ HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.124.88.21 - - [16/Mar/2026:23:15:31 +0100] "GET /wp-includes/js/jquery/ HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 91.124.88.21 - - [16/Mar/2026:23:15:32 +0100] "GET /wp-includes/Requests/ HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 91.124.88.21 - - [16/Mar/2026:23:15:32 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.124.88.21 - - [16/Mar/2026:23:15:32 +0100] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 ... show less	DDoS Attack
🇳🇱 Site.eu	2026-03-16 11:30:01 (3 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 dynamix	2026-03-15 22:00:00 (3 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.126.225.6

🇸🇻 201.150.84.242

🇨🇴 181.53.99.86

🇳🇱 93.123.109.102

🇱🇹 77.90.185.20

🇺🇸 65.49.20.95

🇱🇹 62.60.130.219

🇰🇷 59.9.61.228

🇸🇪 2a04:4e40:4400:0:f98:da10:c82e:5be

🇩🇪 185.242.3.195

🇲🇾 175.137.213.174

🇵🇰 163.61.145.206

🇮🇳 163.61.39.40

🇺🇸 142.93.0.66

🇨🇳 120.1.4.193

🇨🇳 116.255.252.44

🇫🇷 91.231.89.168

🇯🇵 202.212.191.16

🇵🇰 153.117.13.33

🇨🇳 119.146.91.181