JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.238.2.7

91.238.2.7 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 21%: ?

21%

ISP	Government Communication Agency, republic of Abkhazia
Usage Type	Government
ASN	AS58031
Domain Name	Unknown
Country	🇬🇪 Georgia
City	Sokhumi, Abkhazia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.238.2.7

Whois 91.238.2.7

IP Abuse Reports for 91.238.2.7:

This IP address has been reported a total of 67 times from 30 distinct sources. 91.238.2.7 was first reported on June 10th 2021, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-07-09 19:42:17 (1 hour ago)	🥶 Part of a DDoS attack	DDoS Attack
🇫🇷 MatStef132	2026-06-29 23:33:15 (1 week ago)	MatShield L7: blocked on dev.mathost.eu (chrome-ua-hint-missing)	DDoS Attack
🇹🇷 Threat.live	2026-05-16 22:35:09 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇳🇱 ByeByte API	2026-05-16 20:00:30 (1 month ago)	byebyte.space auth: Rate-limit escalation at 2026-05-16T20:00:28Z: 5 rejections in 300s. Firewall au ... show more byebyte.space auth: Rate-limit escalation at 2026-05-16T20:00:28Z: 5 rejections in 300s. Firewall auto-banned IP for 900s. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.164 Safari/537.36 OPR/77.0.4054.275'. Accept-Language: 'en-US,en;q=0.9'. Accept-Encoding: 'gzip, br'. Country (CF): GE. TLS info: {"scheme":"https"}. show less	Web App Attack DDoS Attack
🇮🇹 VHosting	2026-03-31 14:13:16 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇳🇱 ConsulHosting	2026-02-15 16:04:29 (4 months ago)	Part of an HTTP Flood DDoS attack and had sent at least 28 requests.	DDoS Attack Exploited Host
🇨🇦 1gz	2025-12-14 21:14:23 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from GE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from GE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /auth/register UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 05:44:26 (8 months ago)	ASN: 58031 (APS-RA-AS) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS ... show more ASN: 58031 (APS-RA-AS) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	Bad Web Bot
🇳🇱 Silly Development	2025-10-27 00:14:46 (8 months ago)	2025-10-27T01:14:31.164453+01:00 omega.nodes.sillydev.co.uk wings[1515476]: 2025/10/27 00:14:31 http ... show more 2025-10-27T01:14:31.164453+01:00 omega.nodes.sillydev.co.uk wings[1515476]: 2025/10/27 00:14:31 http: TLS handshake error from 91.238.2.7:64710: EOF 2025-10-27T01:14:38.184186+01:00 omega.nodes.sillydev.co.uk wings[1515476]: 2025/10/27 00:14:38 http: TLS handshake error from 91.238.2.7:64714: EOF 2025-10-27T01:14:45.239904+01:00 omega.nodes.sillydev.co.uk wings[1515476]: 2025/10/27 00:14:45 http: TLS handshake error from 91.238.2.7:64716: EOF ... show less	DDoS Attack
🇩🇪 Silly Development	2025-10-20 15:10:03 (8 months ago)	2025-10-20T17:09:48.066278+02:00 Raptor wings[1520817]: 2025/10/20 17:09:48 http: TLS handshake erro ... show more 2025-10-20T17:09:48.066278+02:00 Raptor wings[1520817]: 2025/10/20 17:09:48 http: TLS handshake error from 91.238.2.7:63821: EOF 2025-10-20T17:09:55.047352+02:00 Raptor wings[1520817]: 2025/10/20 17:09:55 http: TLS handshake error from 91.238.2.7:63822: EOF 2025-10-20T17:10:02.184439+02:00 Raptor wings[1520817]: 2025/10/20 17:10:02 http: TLS handshake error from 91.238.2.7:63823: EOF ... show less	DDoS Attack
🇺🇸 shabi	2025-09-26 12:28:38 (9 months ago)	IP: 91.238.2.7 [Country: GE] triggered WAF (firewallCustom). Action: block ASN: 58031 (APS-RA-AS) Pr ... show more IP: 91.238.2.7 [Country: GE] triggered WAF (firewallCustom). Action: block ASN: 58031 (APS-RA-AS) Protocol: HTTP/1.1 (method GET) Endpoint: /cc Time: 2025-09-26T12:14:49Z User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36 Edg/97.0.1072.91 --- Report generated by CFWAF2AbuseIPDB. show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 1gz	2025-09-14 18:21:27 (9 months ago)	Triggered Cloudflare WAF (firewallManaged) from GE. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from GE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-09-11 17:35:03 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 yangfan	2025-09-06 16:14:52 (10 months ago)	IP: 91.238.2.7 [Country: GE] triggered WAF (firewallCustom). Action: block ASN: 58031 (APS-RA-AS) Pr ... show more IP: 91.238.2.7 [Country: GE] triggered WAF (firewallCustom). Action: block ASN: 58031 (APS-RA-AS) Protocol: HTTP/1.1 (method GET) Endpoint: /cc.su Time: 2025-09-06T14:43:56Z User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 --- Report generated by CFWAF2AbuseIPDB. show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Silly Development	2025-09-06 13:42:50 (10 months ago)	Malicious activity detected from 58031 APS-RA-AS towards host panel.sillydev.co.uk (GET HTTP/1.1) @ ... show more Malicious activity detected from 58031 APS-RA-AS towards host panel.sillydev.co.uk (GET HTTP/1.1) @ 2025-09-06T13:42:50Z (28 occurrences) show less	DDoS Attack Exploited Host

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.178.246.43

🇭🇰 199.45.154.132

🇧🇪 198.235.24.221

🇺🇸 195.184.76.204

🇬🇧 195.96.139.104

🇺🇸 66.132.186.246

🇺🇸 64.227.99.138

🇳🇱 45.148.10.147

🇨🇳 36.163.227.186

🇳🇱 192.241.120.184

🇹🇭 147.50.103.212

🇳🇱 91.92.40.151

🇧🇷 177.99.193.135

🇨🇳 171.37.190.120

🇨🇳 121.26.29.66

🇮🇳 119.18.48.74

🇱🇹 77.90.185.20

🇺🇸 66.132.195.114

🇻🇳 42.96.20.16

🇺🇸 162.216.150.244