JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.124.88.56

91.124.88.56 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 58%: ?

58%

ISP	JSC Ukrtelecom
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	ukrtelecom.ua
Country	🇦🇺 Australia
City	Adelaide, South Australia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.124.88.56

Whois 91.124.88.56

IP Abuse Reports for 91.124.88.56:

This IP address has been reported a total of 65 times from 37 distinct sources. 91.124.88.56 was first reported on July 20th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-30 12:20:31 (8 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇳🇿 Antinson	2026-07-30 00:48:37 (20 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 ghostwarriors	2026-07-27 02:20:21 (3 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-07-27 02:12:57 (3 days ago)	91.124.88.56 - - [27/Jul/2026:04:12:49 +0200] "GET /.well-known/pki-validation/server.php HTTP/1.1" ... show more 91.124.88.56 - - [27/Jul/2026:04:12:49 +0200] "GET /.well-known/pki-validation/server.php HTTP/1.1" 301 583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 91.124.88.56 - - [27/Jul/2026:04:12:50 +0200] "GET /autoload_classmap/install.php HTTP/1.1" 301 567 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 91.124.88.56 - - [27/Jul/2026:04:12:50 +0200] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 91.124.88.56 - - [27/Jul/2026:04:12:51 +0200] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 91.124.88.56 - - [27/Jul/2026:04:12:51 +0200] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec show less	Web App Attack Brute-Force
🇫🇷 Octopuce	2026-07-23 19:47:58 (1 week ago)	Aggressive web search of vulnerable pages: /wp-includes/about.php /wp-content/plugins/pwnd/install.p ... show more Aggressive web search of vulnerable pages: /wp-includes/about.php /wp-content/plugins/pwnd/install.php /upload/install.php /wp-head.php /vendor ... show less	Web App Attack
🇳🇱 Site.eu	2026-07-21 00:45:47 (1 week ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 consul.to	2026-07-20 21:44:58 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 LRob	2026-07-20 20:31:32 (1 week ago)	CrowdSec: crowdsecurity/http-probing \| req: /css/ \| 11 distinct paths \| UA: Go-http-client/2.0	Port Scan Web App Attack
🇫🇷 dynamix	2026-07-20 11:22:30 (1 week ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 22:26:36 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 91.124.88.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 91.124.88.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 18:26:28.708146 2026] [security2:error] [pid 4134649:tid 4134649] [client 91.124.88.56:33941] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|airei.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "airei.com"] [uri "/images/stories/themes.php"] [unique_id "al1PFLOxMXmMcZAWInpKTwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 09:05:25 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 91.124.88.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 91.124.88.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 05:05:17.736546 2026] [security2:error] [pid 2109683:tid 2109683] [client 91.124.88.56:52269] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|cydab.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "cydab.com"] [uri "/images/stories/themes.php"] [unique_id "altBzf7sT1oP5KomHNxW8QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-07-18 04:18:32 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 dynamix	2026-07-17 14:56:07 (1 week ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-07-07 14:41:44 (3 weeks ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 Octopuce	2026-06-29 22:54:04 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/wpcall-button/button-image.php /a.php ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/wpcall-button/button-image.php /a.php /ALFA_DATA/alfacgiapi/ /.tmb/ /wp-includes ... show less	Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 163.7.9.84

🇿🇦 102.64.37.151

🇩🇪 213.209.159.242

🇰🇷 211.228.97.186

🇦🇷 200.123.52.12

🇺🇸 198.199.122.181

🇺🇸 162.216.150.22

🇺🇸 146.190.175.10

🇮🇳 117.245.9.114

🇵🇱 83.142.186.133

🇷🇴 80.94.92.102

🇲🇽 45.134.9.27

🇸🇬 188.166.225.116

🇦🇷 181.192.19.9

🇧🇷 168.197.237.29

🇨🇦 165.22.225.218

🇮🇹 151.33.61.157

🇭🇰 124.156.173.135

🇮🇳 110.227.137.206

🇵🇱 91.208.133.30