JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.148.228.65

91.148.228.65 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 100%: ?

100%

ISP	Base IP B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS34343
Domain Name	baseip.com
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.148.228.65

Whois 91.148.228.65

IP Abuse Reports for 91.148.228.65:

This IP address has been reported a total of 42 times from 41 distinct sources. 91.148.228.65 was first reported on July 29th 2022, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 MWA SOC	2026-09-21 00:11:06 (1 minute ago)		Hacking
🇺🇸 etu brutus	2026-09-20 23:28:44 (43 minutes ago)	91.148.228.65 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇳🇿 Tripwire	2026-09-20 19:29:12 (4 hours ago)	Fake referrer "www.google.com"	Bad Web Bot
Anonymous	2026-09-20 19:22:04 (4 hours ago)	Bot / scanning and/or hacking attempts: GET //images/images/images/images/images/images/images/cache ... show more Bot / scanning and/or hacking attempts: GET //images/images/images/images/images/images/images/cache.ph, GET //images/images/images/images/images/images/cache.php HTTP/, GET //cache/cache/cache.php HTTP/1.1, GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1, GET //images/images/images/images/images/images/images/images/c, GET //images/images/images/images/cache.php HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 LRob	2026-09-20 19:16:35 (4 hours ago)	Walking a list of paths that do not exist (scanning) \| method: GET \| path: /images/images/cache.php ... show more Walking a list of paths that do not exist (scanning) \| method: GET \| path: /images/images/cache.php (+5 more) \| 2026-09-20 19:16 UTC show less	Port Scan Web App Attack
🇱🇺 conseilgouz	2026-09-20 17:53:06 (6 hours ago)	are-7 : Trying access unauthorized files/dir=>/wp-content/plugins/plugins/cache.php	Hacking
Anonymous	2026-09-20 16:10:17 (8 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇮🇹 ciccio diddo	2026-09-20 15:53:53 (8 hours ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇫🇮 6kilowatti	2026-09-20 15:12:53 (8 hours ago)	2026/09/20 18:12:51 [error] 1239473#1239473: 67602 FastCGI sent in stderr: "Primary script unknown" ... show more 2026/09/20 18:12:51 [error] 1239473#1239473: 67602 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 91.148.228.65, server: oh6ah.fi, request: "GET //images/images/cache.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi", referrer: "www.google.com" 2026/09/20 18:12:51 [error] 1239473#1239473: *67604 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 91.148.228.65, server: oh6ah.fi, request: "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi", referrer: "www.google.com" ... show less	Web App Attack
🇩🇪 AetherFox	2026-09-20 14:29:12 (9 hours ago)	AetherFox VoidGuard detected: [Sun Sep 20 14:29:12.133409 2026] [authz_core:error] [pid 3234461:tid ... show more AetherFox VoidGuard detected: [Sun Sep 20 14:29:12.133409 2026] [authz_core:error] [pid 3234461:tid 3234477] [client 91.148.228.65:60556] AH01630: client denied by server configuration: proxy:http://[MASKED]/images/images/cache.php, referer: www.google.com [Sun Sep 20 14:29:12.133624 2026] [authz_core:error] [pid 3234461:tid 3234477] [client 91.148.228.65:60556] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html, referer: www.google.com [Sun Sep 20 14:29:12.185759 2026] [authz_core:error] [pid 3234461:tid 3234472] [client 91.148.228.65:60576] AH01630: client denied by server configuration: proxy:http://[MASKED]/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php, referer: www.google.com [Sun Sep 20 14:29:12.186138 2026] [authz_core:error] [pid 3234461:tid 3234472] [client 91.148.228.65:60576] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html, referer: www.google.com [Sun Sep 20 14:29:12.244982 2026] [authz_c ... show less	Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-09-20 14:04:55 (10 hours ago)	2026-09-20 @ 16:04:40 (CET) ~ Blocked for trying to access: /wp-content/plugins/plugins/cache.php	Web App Attack
🇬🇧 consul.to	2026-09-20 13:50:04 (10 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇵🇱 lns.bz	2026-09-20 13:20:43 (10 hours ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇫🇷 masterguru	2026-09-20 12:42:49 (11 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-19 ... show more BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇫🇮 paissangroup	2026-09-20 12:09:36 (12 hours ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 213.215.209.101

🇩🇪 194.164.59.59

🇨🇷 181.193.24.170

🇷🇸 146.70.111.94

🇳🇱 109.160.32.40

🇳🇱 109.160.32.31

🇩🇪 45.43.62.37

🇻🇳 14.225.71.128

🇯🇵 8.216.3.87

🇳🇱 217.60.195.57

🇧🇪 207.175.170.227

🇧🇷 205.210.31.254

🇹🇼 198.235.24.51

🇿🇦 197.184.83.61

🇺🇦 194.44.50.7

🇳🇱 167.172.43.0

🇳🇱 109.160.32.102

🇺🇸 108.31.68.73

🇺🇸 91.230.168.50

🇰🇷 34.64.79.179