JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.132.124.102

91.132.124.102 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 18%: ?

18%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.132.124.102

Whois 91.132.124.102

IP Abuse Reports for 91.132.124.102:

This IP address has been reported a total of 13 times from 10 distinct sources. 91.132.124.102 was first reported on October 28th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-06-04 20:26:49 (1 week ago)	Fail2Ban banned 91.132.124.102 for security violations in jail wp-armour. Log: 2026/06/04 20:26:48 [ ... show more Fail2Ban banned 91.132.124.102 for security violations in jail wp-armour. Log: 2026/06/04 20:26:48 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 91.132.124.102 \| Target: wplogin" , client: 91.132.124.102, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-05-31 21:11:00 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 91.132.124.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 91.132.124.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 17:10:55.225866 2026] [security2:error] [pid 31821:tid 31821] [client 91.132.124.102:49745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vaezi.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vaezi.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahyj36Yb1ecXW9HpRji82AAAAA0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-05-16 15:24:13 (4 weeks ago)	[Sat May 16 17:24:10.829952 2026] [proxy_fcgi:error] [pid 2164147:tid 2164219] [remote 91.132.124.10 ... show more [Sat May 16 17:24:10.829952 2026] [proxy_fcgi:error] [pid 2164147:tid 2164219] [remote 91.132.124.102:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com [Sat May 16 17:24:13.369403 2026] [proxy_fcgi:error] [pid 2162360:tid 2162422] [remote 91.132.124.102:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-01 21:45:08 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 91.132.124.102 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 91.132.124.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 16:45:00.620732 2026] [security2:error] [pid 31316:tid 31316] [client 91.132.124.102:25129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|admin.turedinmobiliaria.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "admin.turedinmobiliaria.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX_JXF88AygavuTlMNuwIQAAAAY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-01 02:12:19 (4 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.02.01 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.02.01 is noted in report timestamp show less	Hacking Brute-Force
🇪🇸 el-brujo	2026-01-12 18:05:50 (5 months ago)	[Mon Jan 12 19:05:48.995886 2026] [proxy_fcgi:error] [pid 985376:tid 985729] [remote 91.132.124.102: ... show more [Mon Jan 12 19:05:48.995886 2026] [proxy_fcgi:error] [pid 985376:tid 985729] [remote 91.132.124.102:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com [Mon Jan 12 19:05:50.114935 2026] [proxy_fcgi:error] [pid 985379:tid 985981] [remote 91.132.124.102:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com ... show less	Hacking Web App Attack
🇮🇩 Burayot	2026-01-12 14:38:51 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 91.132.124.102 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 91.132.124.102 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2025-12-26 00:39:27 (5 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.26 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.26 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 11:13:06 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 91.132.124.102 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 91.132.124.102 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇨🇿 lp	2025-11-28 23:51:45 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 91.132.124.102 2025-11-28T23:35:51+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 91.132.124.102 2025-11-28T23:35:51+01:00 vpn Access-Reject 'ecaterina' station: 91.132.124.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-11-28 07:16:30 (6 months ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
Anonymous	2025-11-04 13:39:02 (7 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 fbarela	2025-10-28 14:00:44 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.56.103.223

🇸🇬 139.59.109.204

🇨🇳 117.50.130.240

🇺🇸 64.62.197.164

🇰🇷 59.15.58.148

🇩🇪 51.75.149.221

🇹🇷 45.136.5.254

🇹🇷 45.136.5.28

🇺🇸 34.83.15.18

🇧🇪 198.235.24.196

🇩🇪 192.109.200.215

🇺🇸 173.247.226.62

🇻🇳 160.187.240.90

🇺🇸 159.65.221.214

🇦🇷 138.118.215.192

🇨🇳 117.143.167.181

🇺🇸 91.230.168.150

🇺🇸 67.220.85.98

🇹🇼 59.115.196.66

🇮🇪 54.217.136.168