JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

91.234.6.162

Neutral Activity

Abuse Confidence Score

0% Low Risk

45 reports

30 reporters · latest 7 months ago

ISP: SOLLUTIUM EU Sp z.o.o.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS30860
Hostname(s): dedicated.vsys.host
Domain Name: sollutium.com
Country: 🇺🇦 Ukraine
City: Kyiv, Kyiv City

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

91.234.6.162 has been reported 45 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

45 from 30 distinct reporters

First reported

August 15th 2025

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-11 03:48:14 UTC · (7 months ago)		Bad Web Bot
Anonymous	2026-04-09 03:46:09 UTC · (7 months ago)		Bad Web Bot
Anonymous	2026-04-08 02:00:23 UTC · (7 months ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇬🇧 openstrike.co.uk	2026-04-07 05:13:41 UTC · (7 months ago)	2 attacks on env grabbing URLs: GET /backend/.env HTTP/1.1	Hacking
Anonymous	2026-04-07 03:46:08 UTC · (7 months ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-06 11:51:46 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 91.234.6.162 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 07:51:40.126689 2026] [security2:error] [pid 7139:tid 7139] [client 91.234. ... show more (mod_security) mod_security (id:210492) triggered by 91.234.6.162 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 07:51:40.126689 2026] [security2:error] [pid 7139:tid 7139] [client 91.234.6.162:51535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.seebeexee.scottwithers.xyz"] [uri "/shared/.env"] [unique_id "adOeTG-RJIQPXM0EAz797AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 XICTRON	2026-04-06 10:20:07 UTC · (7 months ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇩🇪 todix	2026-04-06 08:27:28 UTC · (7 months ago)	WebAttack or semilar from 91.234.6.162	Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 07:35:46 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 91.234.6.162 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 03:35:38.234604 2026] [security2:error] [pid 4684:tid 4801] [client 91.234. ... show more (mod_security) mod_security (id:210492) triggered by 91.234.6.162 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 03:35:38.234604 2026] [security2:error] [pid 4684:tid 4801] [client 91.234.6.162:57373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rawhabitat.philacentric.com"] [uri "/core/.env"] [unique_id "adNiSrIhfSlDTXFGerC9_QAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 06:04:17 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 91.234.6.162 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 02:04:10.871955 2026] [security2:error] [pid 7796:tid 7796] [client 91.234. ... show more (mod_security) mod_security (id:210492) triggered by 91.234.6.162 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 02:04:10.871955 2026] [security2:error] [pid 7796:tid 7796] [client 91.234.6.162:35435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pwinfreyrealty.com.4ehardware.com"] [uri "/.env.example"] [unique_id "adNM2rngd28w9I0tl_YgbwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 05:44:51 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 91.234.6.162 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 01:44:48.495145 2026] [security2:error] [pid 12657:tid 12657] [client 91.23 ... show more (mod_security) mod_security (id:210492) triggered by 91.234.6.162 (dedicated.vsys.host): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 01:44:48.495145 2026] [security2:error] [pid 12657:tid 12657] [client 91.234.6.162:40145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ptfea.aquascapes.net"] [uri "/.env.example"] [unique_id "adNIUC_NWKuYQS_0s_BXoQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 omartin	2026-04-06 05:34:05 UTC · (7 months ago)	Critical Vulnerability Scan detected	Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2026-04-06 05:01:14 UTC · (7 months ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
Anonymous	2026-04-06 05:00:37 UTC · (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 webko.si	2026-04-06 04:49:35 UTC · (7 months ago)	pridenmozic.si: Bruteforce web app access, URI detail: '/.git/config'.	Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 194.44.250.195

🇳🇱 109.160.32.147

🇺🇸 45.79.225.32

🇺🇸 66.132.172.205

🇳🇱 51.124.171.14

🇹🇭 43.173.248.207

🇺🇸 34.96.49.179

🇷🇴 193.46.255.86

🇲🇽 187.133.87.218

🇩🇪 151.243.11.149

🇨🇳 58.222.86.210

🇸🇬 47.128.115.133

🇧🇷 189.114.136.231

🇨🇳 183.47.100.219

🇦🇷 181.20.75.33

🇺🇸 162.216.150.23

🇨🇳 123.207.65.62

🇰🇷 112.162.111.205

🇱🇻 83.99.206.68

🇳🇱 77.239.124.43