JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.217.249.54

91.217.249.54 was found in our database!

This IP was reported 263 times. Confidence of Abuse is 52%: ?

52%

ISP	VPN Consumer Frankfurt, Germany
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.217.249.54

Whois 91.217.249.54

IP Abuse Reports for 91.217.249.54:

This IP address has been reported a total of 263 times from 102 distinct sources. 91.217.249.54 was first reported on March 17th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-06 16:06:10 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇳🇱 Site.eu	2026-07-05 22:23:19 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Site.eu	2026-07-05 16:02:28 (5 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 Baking333	2026-07-04 12:05:04 (6 days ago)	[redacted] 91.217.249.54 - - [04/Jul/2026:13:05:00 +0100] "GET /[redacted] HTTP/1.1" 302 6783 0/5721 ... show more [redacted] 91.217.249.54 - - [04/Jul/2026:13:05:00 +0100] "GET /[redacted] HTTP/1.1" 302 6783 0/57218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" [redacted] 91.217.249.54 - - [04/Jul/2026:13:05:02 +0100] "GET /wp-admin/ HTTP/1.1" 301 5837 0/649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" show less	Bad Web Bot Web App Attack
Anonymous	2026-06-24 07:53:48 (2 weeks ago)	[Wed Jun 24 09:53:45.053654 2026] [proxy_fcgi:error] [pid 68725:tid 68791] [client 91.217.249.54:612 ... show more [Wed Jun 24 09:53:45.053654 2026] [proxy_fcgi:error] [pid 68725:tid 68791] [client 91.217.249.54:61221] AH01071: Got error 'Primary script unknown', referer: http://akcurate.de/license.php [Wed Jun 24 09:53:45.451170 2026] [proxy_fcgi:error] [pid 68725:tid 68821] [client 91.217.249.54:61221] AH01071: Got error 'Primary script unknown', referer: http://akcurate.de/content.php [Wed Jun 24 09:53:46.159255 2026] [proxy_fcgi:error] [pid 68725:tid 68828] [client 91.217.249.54:61221] AH01071: Got error 'Primary script unknown', referer: http://akcurate.de/install.php [Wed Jun 24 09:53:47.037540 2026] [proxy_fcgi:error] [pid 68725:tid 68818] [client 91.217.249.54:61221] AH01071: Got error 'Primary script unknown', referer: http://akcurate.de/inputs.php [Wed Jun 24 09:53:47.546195 2026] [proxy_fcgi:error] [pid 68725:tid 68785] [client 91.217.249.54:61221] AH01071: Got error 'Primary script unknown', referer: http://akcurate.de/style2.php ... show less	Brute-Force Web App Attack
Anonymous	2026-06-23 02:30:38 (2 weeks ago)	91.217.249.54 - - [23/Jun/2026:04:29:22 +0200] "POST /xmlrpc.php HTTP/1.1" 302 7758 "-" "Mozilla/5.0 ... show more 91.217.249.54 - - [23/Jun/2026:04:29:22 +0200] "POST /xmlrpc.php HTTP/1.1" 302 7758 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.217.249.54 - - [23/Jun/2026:04:29:23 +0200] "POST /xmlrpc.php HTTP/1.1" 302 705 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 OPR/114.0.0.0" 91.217.249.54 - - [23/Jun/2026:04:29:34 +0200] "POST /xmlrpc.php HTTP/1.1" 302 8224 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.217.249.54 - - [23/Jun/2026:04:29:35 +0200] "POST /xmlrpc.php HTTP/1.1" 302 872 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.217.249.54 - - [23/Jun/2026:04:29:36 +0200] "POST /xmlrpc.php HTTP/1.1" 302 872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.217.249.54 - - [23/Jun/2026:04:2 ... show less	Brute-Force
🇫🇷 ELYAZ	2026-06-23 01:56:26 (2 weeks ago)	(wordpress) Failed wordpress login from 91.217.249.54 (DE/Germany/-): (CF_ENABLE)	Brute-Force
🇩🇪 Ba-Yu	2026-06-15 11:57:58 (3 weeks ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2026-06-15 08:48:02 (3 weeks ago)	91.217.249.54 - - [15/Jun/2026:11:48:02 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 404 71 ... show more 91.217.249.54 - - [15/Jun/2026:11:48:02 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 404 711 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-15 02:28:31 (3 weeks ago)	91.217.249.54 - - [15/Jun/2026:05:28:30 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 404 706 "-" ... show more 91.217.249.54 - - [15/Jun/2026:05:28:30 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 91.217.249.54 - - [15/Jun/2026:05:28:31 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 404 706 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" ... show less	Web App Attack
🇳🇱 Site.eu	2026-06-14 01:27:43 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 BestFans.com	2026-06-12 21:14:47 (4 weeks ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇺🇦 URAN Publishing Service	2026-06-11 01:21:55 (1 month ago)	91.217.249.54 - - [11/Jun/2026:04:21:54 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 404 712 ... show more 91.217.249.54 - - [11/Jun/2026:04:21:54 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 404 712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 91.217.249.54 - - [11/Jun/2026:04:21:55 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 404 712 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
🇬🇧 consul.to	2026-06-09 16:08:22 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-06-09 13:49:31 (1 month ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 263 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 192.95.10.217

🇷🇴 80.94.92.234

🇺🇸 66.132.172.120

🇰🇷 211.223.107.86

🇨🇳 183.191.224.59

🇹🇷 176.90.54.171

🇷🇴 92.118.39.52

🇨🇦 85.217.149.39

🇺🇸 66.132.195.25

🇺🇸 44.223.115.10

🇳🇱 185.136.15.12

🇳🇱 185.93.89.24

🇨🇳 113.62.131.50

🇸🇬 74.114.28.23

🇨🇳 43.248.108.137

🇬🇧 35.203.211.191

🇺🇸 2a09:bac5:9447:3af::5e:4b

🇩🇪 51.116.2.95

🇩🇪 51.116.2.89

🇺🇸 35.170.253.13