JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.132.125.14

91.132.125.14 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 12%: ?

12%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.132.125.14

Whois 91.132.125.14

IP Abuse Reports for 91.132.125.14:

This IP address has been reported a total of 16 times from 10 distinct sources. 91.132.125.14 was first reported on October 29th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-05-31 11:43:51 (4 weeks ago)	(mod_security) mod_security (id:900177) triggered by 91.132.125.14 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:900177) triggered by 91.132.125.14 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇨🇭 backslash	2026-05-20 01:27:00 (1 month ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-16 22:16:30 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 91.132.125.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 91.132.125.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 18:16:26.852213 2026] [security2:error] [pid 30787:tid 30787] [client 91.132.125.14:13101] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Bristol II/Thumbs.db"] [unique_id "agjsukHmF7bGAIyu8nJuHQAAABI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Bristol%20II/ show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-05-08 13:43:06 (1 month ago)	(mod_security) mod_security (id:900209) triggered by 91.132.125.14 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:900209) triggered by 91.132.125.14 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇨🇭 backslash	2026-04-17 00:06:26 (2 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-04 23:27:55 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 91.132.125.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.132.125.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 18:27:49.557856 2026] [security2:error] [pid 28766:tid 28766] [client 91.132.125.14:47489] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|zodiacwin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zodiacwin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYPV9ZWbB-ofyBHG3P85xAAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-01-31 15:41:08 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.675 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.675 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.3 show less	Bad Web Bot Web App Attack
Anonymous	2026-01-30 17:47:48 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.30 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.30 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2026-01-04 22:38:22 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-12-16 16:18:25 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.16 is noted in report timestamp show less	Hacking Brute-Force
🇨🇿 lp	2025-12-03 23:50:49 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 91.132.125.14 2025-12-03T23:38:59+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 91.132.125.14 2025-12-03T23:38:59+01:00 vpn Access-Reject 'test' station: 91.132.125.14 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2025-12-03 14:29:35 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.03 is noted in report timestamp show less	Hacking Brute-Force
🇸🇪 OnTheEdge	2025-11-30 20:15:53 (7 months ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
Anonymous	2025-11-30 16:58:49 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.30 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-11-15 09:29:47 (7 months ago)	GlobalProtect login attempts with user tom.	VPN IP Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.165

🇮🇩 202.51.202.242

🇹🇼 198.235.24.51

🇮🇩 182.23.87.242

🇺🇸 172.171.241.192

🇺🇸 98.199.138.219

🇹🇷 85.105.202.77

🇬🇧 2.223.144.177

🇺🇸 2607:fc50:3000:2::3dd

🇪🇬 212.103.187.41

🇧🇪 198.235.24.238

🇹🇼 198.235.24.41

🇪🇬 196.221.146.218

🇦🇱 185.224.103.166

🇺🇸 172.234.199.93

🇮🇹 151.33.68.59

🇫🇷 91.196.152.243

🇮🇳 69.62.85.89

🇺🇸 45.33.42.25

🇬🇧 217.146.80.107