JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.192.10.86

91.192.10.86 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

ISP	Dominic Scholz trading as ITP-Solutions GmbH & Co. KG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213250
Domain Name	itp-solutions.de
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.192.10.86

Whois 91.192.10.86

IP Abuse Reports for 91.192.10.86:

This IP address has been reported a total of 46 times from 37 distinct sources. 91.192.10.86 was first reported on April 3rd 2026, and the most recent report was 28 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 mravb	2026-07-09 17:24:29 (28 minutes ago)	91.192.10.86 - - [09/Jul/2026:20:24:29 +0300] "GET /api/.env HTTP/1.1" 404 93 "-" "Mozilla/5.0 (Wind ... show more 91.192.10.86 - - [09/Jul/2026:20:24:29 +0300] "GET /api/.env HTTP/1.1" 404 93 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇨🇭 leo1305	2026-07-09 17:07:28 (45 minutes ago)	CrowdSec detection \| scenario: http-probing	Port Scan Web App Attack
🇩🇪 dbmwebdesign	2026-07-09 16:35:26 (1 hour ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 rsa	2026-07-09 16:20:00 (1 hour ago)	excessive crawling ddos	DDoS Attack Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-07-09 16:07:54 (1 hour ago)	2026/07/09 17:07:51 [error] 2483228#2483228: 191466 access forbidden by rule, client: 91.192.10.86, ... show more 2026/07/09 17:07:51 [error] 2483228#2483228: 191466 access forbidden by rule, client: 91.192.10.86, server: simetria.org, request: "GET /category/all-feeds/.env HTTP/2.0", host: "blog.simetria.org", referrer: "https://portal.simetria.org/.env" 2026/07/09 17:07:52 [error] 2483228#2483228: 191482 access forbidden by rule, client: 91.192.10.86, server: simetria.org, request: "GET /category/all-feeds/api/.env HTTP/2.0", host: "blog.simetria.org", referrer: "https://portal.simetria.org/api/.env" 2026/07/09 17:07:53 [error] 2483228#2483228: 191483 access forbidden by rule, client: 91.192.10.86, server: simetria.org, request: "GET /category/all-feeds/backend/.env HTTP/2.0", host: "blog.simetria.org", referrer: "https://portal.simetria.org/backend/.env" show less	Brute-Force Web App Attack
🇫🇮 YF	2026-07-09 16:00:54 (1 hour ago)	Environment file probe	Web App Attack
🇮🇩 Burayot	2026-07-09 15:26:00 (2 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 91.192.10.86 (DE/Germany/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 91.192.10.86 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 15:04:10 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 91.192.10.86 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 91.192.10.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 11:04:05.714956 2026] [security2:error] [pid 25895:tid 25895] [client 91.192.10.86:34202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prestigedomainsales.com"] [uri "/.git/HEAD"] [unique_id "ak-4ZbJO8WMd9j19ggh4rwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-09 14:52:05 (3 hours ago)	91.192.10.86 - - [09/Jul/2026:17:52:04 +0300] "GET /.env HTTP/1.1" 404 734 "-" "Mozilla/5.0 (Windows ... show more 91.192.10.86 - - [09/Jul/2026:17:52:04 +0300] "GET /.env HTTP/1.1" 404 734 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 91.192.10.86 - - [09/Jul/2026:17:52:04 +0300] "GET /api/.env HTTP/1.1" 404 4733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" ... show less	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-09 14:32:05 (3 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Mangelot Hosting	2026-07-09 14:02:26 (3 hours ago)	(modsecurity) srv102 ModSecurity 91.192.10.86 (DE/Germany/-): 10 in the last 3600 secs; Ports: ; Di ... show more (modsecurity) srv102 ModSecurity 91.192.10.86 (DE/Germany/-): 10 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 thesimonmanuel	2026-07-09 08:03:42 (9 hours ago)	91.192.10.86 - - [09/Jul/2026:13:33:42 +0530] "GET /.git/HEAD HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Wi ... show more 91.192.10.86 - - [09/Jul/2026:13:33:42 +0530] "GET /.git/HEAD HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" "-" 91.192.10.86 - - [09/Jul/2026:13:33:42 +0530] "GET /.git/HEAD HTTP/1.1" 404 143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" "-" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 08:03:05 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 91.192.10.86 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 91.192.10.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:03:01.689812 2026] [security2:error] [pid 5288:tid 5288] [client 91.192.10.86:56452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andysrecyclebin.com"] [uri "/.git/HEAD"] [unique_id "ak9VtfhIn5OEo85rbKuovgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 VanKoh	2026-07-09 07:32:52 (10 hours ago)	91.192.10.86 - - [09/Jul/2026:01:32:49 -0600] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; I ... show more 91.192.10.86 - - [09/Jul/2026:01:32:49 -0600] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 91.192.10.86 - - [09/Jul/2026:01:32:49 -0600] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 91.192.10.86 - - [09/Jul/2026:01:32:51 -0600] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" ... show less	DDoS Attack Web App Attack
🇫🇷 masterguru	2026-07-09 07:25:10 (10 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.27

🇳🇱 206.123.156.179

🇮🇹 93.42.27.67

🇺🇸 34.82.209.210

🇯🇵 8.216.17.247

🇺🇸 216.25.89.81

🇳🇱 185.212.129.205

🇸🇻 143.105.123.17

🇮🇳 125.23.228.86

🇭🇰 118.26.153.102

🇨🇭 107.189.28.30

🇸🇪 93.158.90.37

🇺🇸 67.205.40.180

🇺🇸 43.166.128.187

🇬🇧 35.203.211.68

🇧🇪 34.77.161.216

🇺🇸 17.241.219.125

🇺🇸 194.187.179.237

🇲🇩 178.175.167.17

🇧🇩 157.119.184.41