JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.217.249.55

91.217.249.55 was found in our database!

This IP was reported 236 times. Confidence of Abuse is 52%: ?

52%

ISP	VPN Consumer Frankfurt, Germany
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.217.249.55

Whois 91.217.249.55

IP Abuse Reports for 91.217.249.55:

This IP address has been reported a total of 236 times from 91 distinct sources. 91.217.249.55 was first reported on March 31st 2024, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-05 21:58:15 (16 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-07-05 16:03:35 (22 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 ELYAZ	2026-07-04 10:22:06 (2 days ago)	(y4) Failed scan -byebye- from 91.217.249.55 (DE/Germany/-): (CF_ENABLE)	Hacking
Anonymous	2026-06-23 02:29:15 (1 week ago)	91.217.249.55 - - [23/Jun/2026:04:29:05 +0200] "POST /xmlrpc.php HTTP/1.1" 302 8242 "-" "Mozilla/5.0 ... show more 91.217.249.55 - - [23/Jun/2026:04:29:05 +0200] "POST /xmlrpc.php HTTP/1.1" 302 8242 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.217.249.55 - - [23/Jun/2026:04:29:06 +0200] "POST /xmlrpc.php HTTP/1.1" 302 890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.217.249.55 - - [23/Jun/2026:04:29:08 +0200] "POST /xmlrpc.php HTTP/1.1" 302 890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.217.249.55 - - [23/Jun/2026:04:29:10 +0200] "POST /xmlrpc.php HTTP/1.1" 302 890 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 OPR/114.0.0.0" 91.217.249.55 - - [23/Jun/2026:04:29:11 +0200] "POST /xmlrpc.php HTTP/1.1" 302 890 "-" "Mozilla/5.0 (Linux; Android 11; Nokia G50) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.61 Mobile Safari/537.36" 91.2 ... show less	Brute-Force
🇨🇭 backslash	2026-06-15 07:12:00 (3 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇳🇱 Site.eu	2026-06-14 01:25:48 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇫🇮 as211431.net	2026-06-14 01:08:25 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/product.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 dynamix	2026-06-12 04:24:27 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-06-11 08:48:13 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-11 01:22:28 (3 weeks ago)	91.217.249.55 - - [11/Jun/2026:04:22:27 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTT ... show more 91.217.249.55 - - [11/Jun/2026:04:22:27 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 404 712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 91.217.249.55 - - [11/Jun/2026:04:22:28 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 404 712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" ... show less	Web App Attack
🇫🇷 Octopuce	2026-06-09 19:32:09 (3 weeks ago)	Aggressive web search of vulnerable pages: /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp-c ... show more Aggressive web search of vulnerable pages: /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp-content/plugins/ubh/up.php /wp-admin/images/ ... show less	Web App Attack
🇬🇧 consul.to	2026-06-03 17:34:21 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Ba-Yu	2026-06-03 13:25:12 (1 month ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇳🇱 Site.eu	2026-06-03 02:13:08 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TAY	2026-06-01 17:14:53 (1 month ago)	91.217.249.55 - - [02/Jun/2026:01:14:11 +0800] "POST //xmlrpc.php HTTP/1.1" 200 4464 "-" "Mozilla/5. ... show more 91.217.249.55 - - [02/Jun/2026:01:14:11 +0800] "POST //xmlrpc.php HTTP/1.1" 200 4464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.217.249.55 - - [02/Jun/2026:01:14:24 +0800] "POST //xmlrpc.php HTTP/1.1" 200 4464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.217.249.55 - - [02/Jun/2026:01:14:52 +0800] "POST //xmlrpc.php HTTP/1.1" 200 4464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Brute-Force

Showing 1 to 15 of 236 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.146

🇳🇱 45.148.10.183

🇺🇸 205.185.125.209

🇺🇸 195.184.76.86

🇳🇱 185.242.226.87

🇻🇳 160.191.243.188

🇨🇳 112.94.252.104

🇨🇳 111.113.88.239

🇸🇮 102.220.160.26

🇫🇷 91.196.152.109

🇫🇷 91.196.152.104

🇺🇸 66.132.172.231

🇺🇸 65.218.72.181

🇺🇸 52.167.144.216

🇺🇸 52.157.33.129

🇭🇰 47.82.117.76

🇳🇱 45.148.10.141

🇺🇸 44.139.155.131

🇺🇸 44.101.253.153

🇺🇸 20.64.104.164