JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.242.228.183

91.242.228.183 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	BlueVPS OU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62005
Domain Name	bluevps.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.242.228.183

Whois 91.242.228.183

IP Abuse Reports for 91.242.228.183:

This IP address has been reported a total of 17 times from 6 distinct sources. 91.242.228.183 was first reported on May 19th 2024, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-10-24 03:37:10 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 91.242.228.183 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 91.242.228.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 23:37:03.349873 2025] [security2:error] [pid 18909:tid 18909] [client 91.242.228.183:17515] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPr0X9zyzsm-b6DzkbiCRAAAAA0"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-12 00:13:20 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 91.242.228.183 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 91.242.228.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 11 20:13:14.530926 2025] [security2:error] [pid 4592:tid 4592] [client 91.242.228.183:33031] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|campconcerto.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "campconcerto.com"] [uri "/"] [unique_id "aOrymmS4_016hrAiNlJGWQAAAAY"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-05-22 00:38:53 (1 year ago)	(From [email protected]) Every hour you wait, prospects buy from someone else. Imagine tomorro ... show more (From [email protected]) Every hour you wait, prospects buy from someone else. Imagine tomorrow’s sales report if today you reached 500,000 sites with one click. Now imagine explaining to your boss why you didn’t. Bypass the regret -> Grab it now: https://bit.ly/forminators show less	Phishing Web Spam
🇺🇸 oncord	2025-05-21 05:09:04 (1 year ago)	Form spam	Web Spam
Anonymous	2025-05-20 11:45:19 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 nowyouknow	2025-05-20 11:00:36 (1 year ago)	(From [email protected]) Hourly delays translate to lost prospects. Imagine tomorrow’s sales rep ... show more (From [email protected]) Hourly delays translate to lost prospects. Imagine tomorrow’s sales report if today you reached 500,000 sites with one click. Now imagine explaining to your boss why you didn’t. Skip the regret -> Buy it now: https://bit.ly/submittersform show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-05-18 07:45:45 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 91.242.228.183 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 91.242.228.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 18 03:45:38.186307 2025] [security2:error] [pid 1480761:tid 1480761] [client 91.242.228.183:27367] [client 91.242.228.183] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.proses-hr.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.proses-hr.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aCmQIl7P4Qrl3wRjXVUouQAAABA"], referer: https://www.proses-hr.com/author/admin/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-18 00:20:54 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-05-15 10:28:23 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 nowyouknow	2025-05-14 14:34:53 (1 year ago)	(From [email protected]) We’ll send your campaign to millions of contact forms. Cheap, exte ... show more (From [email protected]) We’ll send your campaign to millions of contact forms. Cheap, extensive-reach outreach is slipping away quickly. Ad costs climb daily, yet contact forms remain open roads to inboxes. Our platform fires your pitch into thousands of sites per hour. Seats for this month’s mass-mail plan are almost gone. Fix your price and surge past slower competitors - Buy Now: https://bit.ly/submitnowforms now show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-13 21:18:02 (1 year ago)	(From [email protected]) We will dispatch your message across millions of forms. The windo ... show more (From [email protected]) We will dispatch your message across millions of forms. The window for cost-effective, broad-reach outreach is closing fast. Ad costs soar daily, yet contact forms remain open roads to inboxes. Our platform delivers your campaign to thousands of sites per hour. Seats for this month’s mass-mail plan are almost gone. Hold your rate and surge past slower competitors ** Learn more: https://bit.ly/submitnowforms now show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-10 00:36:01 (1 year ago)	(From [email protected]) Your rivals are silently reclaiming leads while you’re still writin ... show more (From [email protected]) Your rivals are silently reclaiming leads while you’re still writing your outreach. Stop hesitating, start expanding—visit https://bit.ly/cformmarkety now show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-05-08 01:11:31 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 91.242.228.183 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 91.242.228.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 21:11:24.474101 2025] [security2:error] [pid 3890288:tid 3890288] [client 91.242.228.183:40137] [client 91.242.228.183] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hodlmoser.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hodlmoser.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBwEvAhyCqNM-vT1Qf6QlAAAABA"], referer: https://hodlmoser.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-21 16:16:42 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-12-20 11:09:16 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.178.172.17

🇺🇸 184.154.78.38

🇳🇱 176.65.139.47

🇭🇰 172.68.211.16

🇮🇳 125.19.245.34

🇫🇮 74.125.46.146

🇺🇸 64.62.156.184

🇺🇸 47.252.19.88

🇳🇱 45.148.10.147

🇸🇬 43.163.107.154

🇧🇪 35.233.24.35

🇧🇪 34.78.29.161

🇺🇸 205.210.31.28

🇳🇱 195.178.110.30

🇺🇸 192.185.4.81

🇭🇰 168.76.131.178

🇺🇸 159.223.131.0

🇺🇸 138.197.42.226

🇨🇳 116.179.33.143

🇮🇩 103.142.210.55