JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

91.231.222.141

Neutral Activity

Abuse Confidence Score

0% Low Risk

21 reports

18 reporters · latest 10 months ago

ISP: Zarrin Amol Gozar Technology Development Company Ltd
Usage Type: Data Center/Web Hosting/Transit
ASN: Unknown
Domain Name: parswebserver.com
Country: 🇸🇮 Slovenia
City: Maribor, Urban Municipality of Maribor

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

91.231.222.141 has been reported 21 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

21 from 18 distinct reporters

First reported

November 13th 2025

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2025-12-29 00:17:24 UTC · (10 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇮🇩 securejdprop	2025-12-19 23:36:32 UTC · (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 14). Ip 91.231.222.141 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-19 23:36:31.86 ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 14). Ip 91.231.222.141 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-12-19 23:36:31.868543159 +0000 UTC show less	Web App Attack
🇩🇪 HandyTreff.de	2025-12-19 16:10:12 UTC · (10 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -56.548 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.11	Bad Web Bot Web App Attack
🇩🇪 Denkena Consulting	2025-12-18 16:40:19 UTC · (10 months ago)	Dec 18 17:40:18 [postfix/smtpd] NOQUEUE: reject: RCPT from unknown[91.231.222.141]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[91.231.222.141]> Dec 18 17:40:18 [postfi ... show more Dec 18 17:40:18 [postfix/smtpd] NOQUEUE: reject: RCPT from unknown[91.231.222.141]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[91.231.222.141]> Dec 18 17:40:18 [postfix/smtpd] NOQUEUE: reject: RCPT from unknown[91.231.222.141]: 554 5.7.1 <admin@localhost>: Relay access denied; from=<[email protected]> to=<admin@localhost> proto=ESMTP helo=<[91.231.222.141]> ... show less	Email Spam Brute-Force
🇮🇸 www.fransveldman.world	2025-12-18 16:31:13 UTC · (10 months ago)	Dec 18 16:31:13 ice2 postfix/postscreen[756497]: NOQUEUE: reject: RCPT from [91.231.222.141]:58405: 550 5.7.1 Service unavailable; client [91.231.222.141] blocked using zen.spamhaus.org; from=<[email protected]>, to=<[email protected]>, proto=ESMT ... show more Dec 18 16:31:13 ice2 postfix/postscreen[756497]: NOQUEUE: reject: RCPT from [91.231.222.141]:58405: 550 5.7.1 Service unavailable; client [91.231.222.141] blocked using zen.spamhaus.org; from=<[email protected]>, to=<[email protected]>, proto=ESMTP, helo=<[91.231.222.141]> Dec 18 16:31:13 ice2 postfix/postscreen[756497]: NOQUEUE: reject: RCPT from [91.231.222.141]:58405: 550 5.7.1 Service unavailable; client [91.231.222.141] blocked using zen.spamhaus.org; from=<[email protected]>, to=<admin@localhost>, proto=ESMTP, helo=<[91.231.222.141]> ... show less	Email Spam Brute-Force
🇳🇱 VMHeaven.io	2025-12-18 05:28:19 UTC · (10 months ago)	Blocked by UFW [25/tcp] Source port: 65315 TTL: 119 Packet length: 52	Email Spam Port Scan
Anonymous	2025-11-25 10:32:13 UTC · (11 months ago)	fail2ban apache-modsecurity web [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/"]	Web App Attack
🇺🇸 MirrorImageGaming	2025-11-22 17:21:39 UTC · (11 months ago)	GET / HTTP/1.1- Mozilla/5.0 (WindowsNT 10.0; Win64;x64) AppleWebKit/537.36 (KHTML,like Gecko) Chrome/83.0.4103.116Safari/537.36	Web App Attack
Anonymous	2025-11-22 11:55:15 UTC · (11 months ago)	SuspiciousC Activity detected by FMBAD System 2025-11-22 14:55:15	Hacking Bad Web Bot Web App Attack
🇺🇸 juguemosalacarioca.com	2025-11-22 04:42:12 UTC · (11 months ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
🇺🇸 mnsf	2025-11-18 03:05:09 UTC · (11 months ago)	Request Overload (107)	Brute-Force Web App Attack
🇮🇹 Progetto1	2025-11-17 20:30:10 UTC · (11 months ago)	Multiple exploit attempts	Hacking Brute-Force Exploited Host Web App Attack
🇵🇱 sefinek.net	2025-11-17 18:03:54 UTC · (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from SI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36 Th ... show more Triggered Cloudflare WAF (firewallCustom) from SI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 hbrks	2025-11-17 12:56:22 UTC · (11 months ago)	1 attack(s) detected, such as these: {"event":"nginx_block","ip":"91.231.222.141","host":"marche-be.com","request":"GET / HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Sa ... show more 1 attack(s) detected, such as these: {"event":"nginx_block","ip":"91.231.222.141","host":"marche-be.com","request":"GET / HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36","reason":"service:unknow","timestamp":"2025-11-17T12:56:22 00:00","logentry":"marche-be.com 91.231.222.141 - - [17/Nov/2025:12:56:22 0000] GET / HTTP/1.1 444 0 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36 - matched:service:unknow"} * Report Details : https://p4u.xyz/AF9UYGU5KH5/1 IP Details *: https://p4u.xyz/AF9UYGU5KH5/2 show less	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-17 06:04:50 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 91.231.222.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 01:04:43.372887 2025] [security2:error] [pid 22282:tid 22282] [client 91.231.222.141:58766] ... show more (mod_security) mod_security (id:210730) triggered by 91.231.222.141 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 01:04:43.372887 2025] [security2:error] [pid 22282:tid 22282] [client 91.231.222.141:58766] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.azcrittergetter.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.azcrittergetter.com"] [uri "/csfitz.com"] [unique_id "aRq6-4xyxgfnq6Vwh-TdJQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:73:1000:6a80:218d:99fe:6a5f

🇰🇷 211.195.108.229

🇵🇰 202.66.181.6

🇲🇽 187.189.171.85

🇳🇱 185.223.235.47

🇨🇴 181.49.103.161

🇰🇷 125.138.175.113

🇮🇹 93.47.114.225

🇷🇴 80.94.95.115

🇺🇸 66.132.186.139

🇦🇷 38.210.155.9

🇧🇪 34.53.147.106

🇮🇳 217.217.249.15

🇳🇱 213.232.114.153

🇷🇺 185.95.105.212

🇲🇽 177.224.44.155

🇧🇷 177.112.215.133

🇳🇱 172.94.9.161

🇺🇸 159.223.171.110

🇭🇰 156.225.1.10