JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.208.197.253

91.208.197.253

Neutral Activity

116 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

ALEXHOST SRL

Usage Type

Data Center/Web Hosting/Transit

ASN

AS200019

Hostname(s)

vpn.kworld.ovh

Domain Name

alexhost.com

Country

🇲🇩 Moldova (the Republic of)

City

Chisinau, Chisinau Municipality

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

91.208.197.253 has been reported 116 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 91.208.197.253:

This IP address has been reported a total of 116 times from 67 distinct sources. 91.208.197.253 was first reported on October 16th 2024, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-10 21:11:40 (3 months ago)	Blocked by UFW (TCP on 60778) Source port: 46299 TTL: 41 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 60778) Source port: 46299 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 91.208.197.253) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-06-24 02:47:49 (1 year ago)	Web Probe / Attack	Web App Attack
🇩🇪 joetaylor.dev	2025-06-24 01:56:26 (1 year ago)	[24/Jun/2025:02:55:56.128928 +0100] aFoFrElC1FOxTMSI7GS3QQAAABg 91.208.197.253 39970 127.0.0.1 7081 ... show more [24/Jun/2025:02:55:56.128928 +0100] aFoFrElC1FOxTMSI7GS3QQAAABg 91.208.197.253 39970 127.0.0.1 7081 [24/Jun/2025:02:55:56.391215 +0100] aFoFrCbtSalNZNKikKXlAwAAAEc 91.208.197.253 39980 127.0.0.1 7081 [24/Jun/2025:02:55:56.754112 +0100] aFoFrCbtSalNZNKikKXlBAAAAEs 91.208.197.253 39994 127.0.0.1 7081 ... show less	Hacking Web App Attack
🇩🇪 SpaceHost-Server	2025-06-23 22:33:38 (1 year ago)		Brute-Force Web App Attack
🇵🇱 strefapi_com	2025-06-23 22:05:15 (1 year ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-06-23 20:07:18 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 Mangelot Hosting	2025-06-23 12:57:55 (1 year ago)	(modsecurity) srv101 ModSecurity 91.208.197.253 (MD/Moldova/-): 5 in the last 3600 secs; Ports: ; D ... show more (modsecurity) srv101 ModSecurity 91.208.197.253 (MD/Moldova/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 zwebvigil	2025-06-23 03:43:28 (1 year ago)	91.208.197.253 [22/Jun/2025:20:42:18 -0700] "GET /pms?module=logging&file_name=../../../../../../~/ ... show more 91.208.197.253 [22/Jun/2025:20:42:18 -0700] "GET /pms?module=logging&file_name=../../../../../../~/.aws/credentials&number_of_lines=10000 HTTP/1.1" 404 2855 "-" port=61958 "Mozilla/5.0" "-" "-" "<host>" 629 91.208.197.253 [22/Jun/2025:20:42:30 -0700] "GET /admin/config?cmd=cat+/root/.aws/credentials HTTP/1.1" 404 2751 "-" port=62474 "Mozilla/5.0" "-" "-" "<host>" 1118 91.208.197.253 [22/Jun/2025:20:42:52 -0700] "GET /.env HTTP/1.1" 404 2673 "-" port=62908 "Mozilla/5.0" "-" "-" "<host>" 1245 91.208.197.253 [22/Jun/2025:20:43:12 -0700] "GET /.env.local HTTP/1.1" 404 2685 "-" port=63783 "Mozilla/5.0" "-" "-" "<host>" 1171 91.208.197.253 [22/Jun/2025:20:43:26 -0700] "GET /.env.production HTTP/1.1" 404 2695 "-" port=64222 "Mozilla/5.0" "-" "-" "<host>" 1385 91.208.197.253 [22/Jun/2025:20:43:27 -0700] "GET /blog.env HTTP/1.1" 404 2681 "-" port=64222 "Mozilla/5.0" "-" "-" "<host>" 1021 91.208.197.253 [22/Jun/2025:20:43:28 -0700] "GET /wp-co show less	Web App Attack
🇩🇪 SpaceHost-Server	2025-06-22 22:32:56 (1 year ago)		Brute-Force Web App Attack
🇩🇪 ardexter	2025-06-22 12:38:05 (1 year ago)	Wordpress attack and DDOS	DDoS Attack Web App Attack
🇫🇷 dynamix	2025-06-22 08:49:02 (1 year ago)	Multiple WAF Violations	Web App Attack
🇩🇪 macrob	2025-06-22 08:05:30 (1 year ago)	2025/06/22 08:05:23 [error] 1146739#1146739: 29888712 access forbidden by rule, client: 91.208.197. ... show more 2025/06/22 08:05:23 [error] 1146739#1146739: 29888712 access forbidden by rule, client: 91.208.197.253, server: binixo.com.ar, request: "GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/2.0", host: "binixo.com.ar" 2025/06/22 08:05:27 [error] 1146738#1146738: 29888860 access forbidden by rule, client: 91.208.197.253, server: binixo.com.ar, request: "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/2.0", host: "binixo.com.ar" 2025/06/22 08:05:29 [error] 1146739#1146739: 29888953 access forbidden by rule, client: 91.208.197.253, server: binixo.com.ar, request: "GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=1.2.44 HTTP/2.0", host: "binixo.com.ar" ... show less	Web App Attack
Anonymous	2025-06-21 22:11:35 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 91.208.197.253 (MD/Moldova/-)	SQL Injection
🇳🇱 thedreamer.nl	2025-06-21 18:05:37 (1 year ago)	91.208.197.253 - - [21/Jun/2025:20:04:23 +0200] "GET /.env HTTP/1.1" 200 1007 "-" "Mozilla/5.0" "MD" ... show more 91.208.197.253 - - [21/Jun/2025:20:04:23 +0200] "GET /.env HTTP/1.1" 200 1007 "-" "Mozilla/5.0" "MD" "-" "47.01880" "28.81280" 91.208.197.253 - - [21/Jun/2025:20:04:54 +0200] "GET /.env.local HTTP/1.1" 200 1007 "-" "Mozilla/5.0" "MD" "-" "47.01880" "28.81280" 91.208.197.253 - - [21/Jun/2025:20:05:20 +0200] "GET /.env.production HTTP/1.1" 200 1007 "-" "Mozilla/5.0" "MD" "-" "47.01880" "28.81280" 91.208.197.253 - - [21/Jun/2025:20:05:37 +0200] "GET /wp-content/.env HTTP/1.1" 200 1007 "-" "Mozilla/5.0" "MD" "-" "47.01880" "28.81280" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-20 17:43:53 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 91.208.197.253 (MD/Moldova/-)	SQL Injection

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.23.174.202

🇨🇴 186.1.185.92

🇳🇱 185.242.226.104

🇺🇸 167.234.105.172

🇺🇸 109.105.210.60

🇮🇳 106.214.9.223

🇸🇬 101.47.159.125

🇫🇷 91.231.89.241

🇸🇪 90.230.226.175

🇸🇪 81.233.137.32

🇷🇴 80.94.95.115

🇺🇸 69.49.246.176

🇩🇪 64.89.163.235

🇱🇹 62.60.130.242

🇸🇬 51.79.199.44

🇺🇸 45.194.67.108

🇺🇸 38.154.23.112

🇧🇪 34.96.62.193

🇺🇸 24.142.170.231

🇸🇬 8.219.72.180