JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.218.45.61

91.218.45.61 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 41%: ?

41%

ISP	Ltd. DSS Group
Usage Type	Fixed Line ISP
ASN	AS48323
Domain Name	dss.cv.ua
Country	🇺🇦 Ukraine
City	Chernivtsi, Chernivtsi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.218.45.61

Whois 91.218.45.61

IP Abuse Reports for 91.218.45.61:

This IP address has been reported a total of 46 times from 25 distinct sources. 91.218.45.61 was first reported on July 27th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-21 20:47:14 (12 hours ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /program/Config/pictos/sens/230. ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /program/Config/pictos/sens/230.png \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 \| 2026-10-21 20:47 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-20 02:59:53 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 91.218.45.61 (ip-91-218-45-61.dss-group.net): 1 ... show more (mod_security) mod_security (id:210730) triggered by 91.218.45.61 (ip-91-218-45-61.dss-group.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 22:59:48.587930 2026] [security2:error] [pid 14651:tid 14651] [client 91.218.45.61:35058] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|accordionstars.com\|F\|2"] [data ".accordionfactory.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accordionstars.com"] [uri "/www.accordionfactory.com"] [unique_id "atbZJEwLFta30yvt-v5xQQAAAAA"], referer: http://accordionstars.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-10-20 00:10:17 (2 days ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 EGP Abuse Dept	2026-10-19 10:32:42 (2 days ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
Anonymous	2026-10-06 05:33:41 (2 weeks ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇺🇸 鬼影233	2026-09-12 17:44:58 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-09-12 05:58:37 (1 month ago)	unsolicited connect TCP dport 23 (sport 58268)	Hacking
🇵🇱 bart@	2026-09-11 17:40:40 (1 month ago)	Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honey ... show more Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp show less	Port Scan
🇬🇧 Vluxon, Inc.	2026-09-11 15:41:53 (1 month ago)	TELNET authentication attack detected by honeypot [Vlux-Sensor-19] on port 23 • Observed: 2026-09-11 ... show more TELNET authentication attack detected by honeypot [Vlux-Sensor-19] on port 23 • Observed: 2026-09-11T15:41:50.423Z • Number of login attempts: 1 • Source ports: 60050 • Submitted by Vlux-Sensor-19 show less	Port Scan
🇺🇸 MPL	2026-09-10 20:29:05 (1 month ago)	tcp/23 (6 or more attempts)	Port Scan
Anonymous	2026-09-10 15:07:54 (1 month ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 鬼影233	2026-08-30 15:01:15 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-30 05:48:19 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-25 00:28:14 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-21 21:21:56 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.44.6.103

🇻🇳 103.15.222.183

🇺🇸 216.25.89.140

🇧🇷 170.233.46.119

🇺🇸 162.216.150.77

🇰🇷 112.151.168.124

🇩🇪 109.160.32.156

🇿🇦 102.209.194.68

🇺🇦 79.143.45.75

🇺🇸 66.132.224.250

🇧🇷 45.179.158.165

🇧🇷 187.121.109.142

🇬🇧 185.111.174.44

🇭🇰 154.83.16.14

🇬🇧 154.16.44.188

🇺🇸 135.119.92.2

🇰🇷 112.216.120.67

🇭🇰 103.215.81.186

🇮🇩 103.187.165.26

🇺🇸 103.4.251.202