AbuseIPDB » 91.199.166.56
91.199.166.56
This IP was reported 8 times. Confidence of
Abuse
is 21% : ?
ISP
UAB Linama
Usage Type
Data Center/Web Hosting/Transit
ASN
AS206766
Domain Name
ip4telcom.com
Country
🇱🇻
Latvia
City
Riga, Riga
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 91.199.166.56 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
91.199.166.56 was first reported on
July 9th 2026 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-10 08:06:34
(1 month ago)
Blocked: Reason='Possible SQL injection activity (227/60 min)'; Requests=227
SQL Injection
🇺🇸
mnsf
2026-07-10 08:06:02
(1 month ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇩🇰
TBBA
2026-07-10 05:18:00
(1 month ago)
SQL Injection
🇺🇸
TPI-Abuse
2026-07-10 02:28:22
(1 month ago)
(mod_security) mod_security (id:211030) triggered by 91.199.166.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211030) triggered by 91.199.166.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 22:28:17.843413 2026] [security2:error] [pid 7305:tid 7305] [client 91.199.166.56:60313] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||www.kountz.org|F|2"] [data "Matched Data: ('~'||( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.kountz.org"] [uri "/showmedia.php"] [unique_id "alBYwfJBEsG88ih8gCqleAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-10 01:51:13
(1 month ago)
Multiple WAF Violations
Web App Attack
🇩🇪
gadix
2026-07-10 01:50:13
(1 month ago)
[10/Jul/2026:03:50:06.106056 +0200] alBPzmQhJc_OY47comioawAAAEc 91.199.166.56 48260 127.0.0.1 7081
[ ...
show more
[10/Jul/2026:03:50:06.106056 +0200] alBPzmQhJc_OY47comioawAAAEc 91.199.166.56 48260 127.0.0.1 7081
[10/Jul/2026:03:50:07.602381 +0200] alBPz2QhJc_OY47comiodAAAAFg 91.199.166.56 48334 127.0.0.1 7081
[10/Jul/2026:03:50:07.710672 +0200] alBPz2QhJc_OY47comiodQAAAEE 91.199.166.56 48340 127.0.0.1 7081
...
show less
Web App Attack
🇺🇸
RidgeStar
2026-07-10 00:58:36
(1 month ago)
2026-07-09T17:58:36-07:00: 0 UNION ALL SELECT NULL,'qzkqqoAX8kp9UjVqkpjq',NULL-- -
2026-07 ...
show more
2026-07-09T17:58:36-07:00: 0 UNION ALL SELECT NULL,'qzkqqoAX8kp9UjVqkpjq',NULL-- -
2026-07-09T17:58:35-07:00: 0 UNION ALL SELECT NULL,'qzkqqoAX8kp9UjVqkpjq'-- -
2026-07-09T17:58:35-07:00: 0 UNION ALL SELECT 'qzkqqoAX8kp9UjVqkpjq',NULL,NULL-- -
2026-07-09T17:58:34-07:00: 0 UNION ALL SELECT 'qzkqqoAX8kp9UjVqkpjq',NULL-- -
2026-07-09T17:58:33-07:00: 0 UNION ALL SELECT 'qzkqqoAX8kp9UjVqkpjq'-- -
show less
Hacking
Web App Attack
2026-07-09 23:40:04
(1 month ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: