JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.124.88.66

91.124.88.66 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 52%: ?

52%

ISP	JSC Ukrtelecom
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	ukrtelecom.ua
Country	🇦🇺 Australia
City	Adelaide, South Australia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.124.88.66

Whois 91.124.88.66

IP Abuse Reports for 91.124.88.66:

This IP address has been reported a total of 65 times from 36 distinct sources. 91.124.88.66 was first reported on June 30th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-29 04:28:44 (1 day ago)	Brute force	Brute-Force
🇹🇷 neron	2026-07-29 00:19:38 (1 day ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-28 20:00:52 (1 day ago)	WP2Shell activity detected (Success: 200).. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3. ... show more WP2Shell activity detected (Success: 200).. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 5/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 75%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-07-28 19:00:52 (1 day ago)	WP2Shell activity detected (Success: 200).. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: ... show more WP2Shell activity detected (Success: 200).. Threat Score: 6.5/10 (HIGH). Confidence: 40%. CVSS v3.1: 5/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 75%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇨🇦 Mediashaker	2026-07-27 11:06:21 (2 days ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 91.124.88.66 (AU/Austral ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 91.124.88.66 (AU/Australia/-) show less	Port Scan
🇩🇪 ghostwarriors	2026-07-27 02:20:26 (3 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-07-27 02:15:26 (3 days ago)	91.124.88.66 - - [27/Jul/2026:04:15:18 +0200] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 563 "- ... show more 91.124.88.66 - - [27/Jul/2026:04:15:18 +0200] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 91.124.88.66 - - [27/Jul/2026:04:15:18 +0200] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 91.124.88.66 - - [27/Jul/2026:04:15:19 +0200] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 581 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 91.124.88.66 - - [27/Jul/2026:04:15:19 +0200] "GET /wp-admin/media-new.php HTTP/1.1" 301 553 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 91.124.88.66 - - [27/Jul/2026:04:15:20 +0200] "GET /media-new.php HTTP/1.1" 301 535 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727 show less	Web App Attack Brute-Force
🇹🇷 neron	2026-07-25 04:27:07 (5 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇬🇧 consul.to	2026-07-20 21:43:11 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-07-20 08:02:14 (1 week ago)	Multiple WAF Violations	Web App Attack
🇫🇷 masterguru	2026-06-29 18:43:22 (1 month ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-195)	Hacking
🇪🇸 masterguru	2026-06-24 07:54:37 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇨🇭 backslash	2026-06-24 02:51:00 (1 month ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇫🇷 Octopuce	2026-06-24 02:35:44 (1 month ago)	Aggressive web search of vulnerable pages: /install.php /inputs.php /style2.php /simple.php /chosen. ... show more Aggressive web search of vulnerable pages: /install.php /inputs.php /style2.php /simple.php /chosen.php /bypass.php /config.php /themes.php /ad ... show less	Web App Attack
🇺🇸 mnsf	2026-04-27 03:05:17 (3 months ago)	Too many Status 40X (12)	Brute-Force Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.176.26.166

🇬🇧 195.96.139.73

🇧🇷 179.94.133.39

🇨🇳 120.225.79.56

🇻🇳 115.77.111.30

🇳🇵 113.199.252.145

🇬🇧 87.236.176.175

🇺🇸 74.197.220.5

🇺🇸 67.173.58.47

🇮🇳 49.43.117.99

🇧🇷 45.205.1.244

🇯🇵 43.167.215.46

🇬🇧 2a06:4880:c000::e0

🇺🇿 213.230.92.50

🇳🇱 138.124.30.187

🇻🇳 116.118.4.222

🇻🇳 116.110.15.224

🇨🇳 115.190.223.207

🇿🇦 102.214.233.166

🇺🇸 65.110.40.43