JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

91.234.6.153

Neutral Activity

Abuse Confidence Score

0% Low Risk

47 reports

31 reporters · latest 6 months ago

ISP: SOLLUTIUM EU Sp z.o.o.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS30860
Hostname(s): dedicated.vsys.host
Domain Name: sollutium.com
Country: 🇺🇦 Ukraine
City: Kyiv, Kyiv City

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

91.234.6.153 has been reported 47 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

47 from 31 distinct reporters

First reported

April 5th 2026

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-05 06:00:00 UTC · (6 months ago)	Confirmed malicious by STILWaters CTI platform (score=86, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-04-06 10:52:36 UTC · (7 months ago)	Automated report (2026-04-06T18:52:36+08:00). Caught probing for exposed Git data.	Hacking Web App Attack Open Proxy
Anonymous	2026-04-06 10:52:35 UTC · (7 months ago)	Automated report (2026-04-06T18:52:35+08:00). Caught probing for env file.	Hacking Web App Attack Open Proxy
🇩🇪 Ba-Yu	2026-04-06 05:53:48 UTC · (7 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 Matthew Ping	2026-04-06 05:45:01 UTC · (7 months ago)	ModSecurity rule 949110 triggered on dedicated4785. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-04-06 05:15:00 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 91.234.6.153 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 01:14:53.148446 2026] [security2:error] [pid 17255:tid 17255] [client 91.23 ... show more (mod_security) mod_security (id:210492) triggered by 91.234.6.153 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 01:14:53.148446 2026] [security2:error] [pid 17255:tid 17255] [client 91.234.6.153:51251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.isyourcompanysafe.com.alanmariotti.com"] [uri "/.env.old"] [unique_id "adNBTbq7yWKK2f0O9iiyWgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-04-06 05:14:55 UTC · (7 months ago)	Automated probe detected by Ody Sentinel / WellSpr.ing. Type: env_leak. Path: /shared/.env. Auto-blocked after threshold exceeded. Dossier: https://wellspr.ing/dossier/sentinel-91-234-6-153	Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 04:40:23 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 91.234.6.153 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 00:40:15.475629 2026] [security2:error] [pid 1458:tid 1458] [client 91.234. ... show more (mod_security) mod_security (id:210492) triggered by 91.234.6.153 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 00:40:15.475629 2026] [security2:error] [pid 1458:tid 1458] [client 91.234.6.153:48539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.interoperabilitysolutions.motioncontrolpartners.com"] [uri "/.env.example"] [unique_id "adM5Lym102dKr3eguT1YQQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-06 04:27:53 UTC · (7 months ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .d ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-195) show less	Hacking
🇫🇷 dynamix	2026-04-06 04:06:42 UTC · (7 months ago)	Multiple WAF Violations	Web App Attack
🇧🇷 Halux	2026-04-06 02:56:20 UTC · (7 months ago)	91.234.6.153 Probing protected path or service	Web App Attack
🇨🇿 huginet	2026-04-06 02:27:52 UTC · (7 months ago)	91.234.6.153 - - [06/Apr/2026:04:27:50 +0200] "GET /.env.development HTTP/1.1" 404 44366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.153 - - [06/Apr/2026:04:27:50 +0200] "GET /.env.development HTTP/1.1" 404 82701 "-" " ... show more 91.234.6.153 - - [06/Apr/2026:04:27:50 +0200] "GET /.env.development HTTP/1.1" 404 44366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.153 - - [06/Apr/2026:04:27:50 +0200] "GET /.env.development HTTP/1.1" 404 82701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web Spam Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 02:12:02 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 91.234.6.153 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 22:11:54.287534 2026] [security2:error] [pid 20862:tid 20867] [client 91.23 ... show more (mod_security) mod_security (id:210492) triggered by 91.234.6.153 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 22:11:54.287534 2026] [security2:error] [pid 20862:tid 20867] [client 91.234.6.153:41529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.houston-plastic-surgeon.aafm.us"] [uri "/.env.staging"] [unique_id "adMWapYatk2vt1XxDxHMPQAAAQI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-06 02:09:59 UTC · (7 months ago)	Configuration snooping (/.env): 91.234.6.153 - - [06/Apr/2026:03:09:59 +0100] "GET /.env.backup HTTP/1.1" 200 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 01:49:44 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 91.234.6.153 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:49:36.732562 2026] [security2:error] [pid 22327:tid 22327] [client 91.23 ... show more (mod_security) mod_security (id:210492) triggered by 91.234.6.153 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:49:36.732562 2026] [security2:error] [pid 22327:tid 22327] [client 91.234.6.153:37631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hooks-n-hearts.michaelsabbey.org"] [uri "/.env.production"] [unique_id "adMRMJlXJjEv4HAiFqndjgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 125.91.33.72

🇮🇩 103.159.199.43

🇨🇦 45.198.224.32

🇧🇷 179.63.147.75

🇨🇳 117.160.212.186

🇺🇸 20.40.251.169

🇰🇭 203.223.35.190

🇺🇸 165.154.134.98

🇺🇸 162.216.150.27

🇺🇸 146.190.117.241

🇳🇱 109.160.32.115

🇳🇱 77.67.26.251

🇺🇸 72.215.33.42

🇳🇱 45.148.10.157

🇺🇸 43.166.255.102

🇧🇪 34.77.99.151

🇺🇸 34.34.225.94

🇺🇸 192.253.209.90

🇳🇱 109.160.32.104

🇺🇸 54.146.52.98