JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.242.228.29

91.242.228.29 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	BlueVPS OU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62005
Domain Name	bluevps.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.242.228.29

Whois 91.242.228.29

IP Abuse Reports for 91.242.228.29:

This IP address has been reported a total of 22 times from 12 distinct sources. 91.242.228.29 was first reported on April 26th 2023, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Block Rockin' Beats	2025-11-14 18:26:04 (6 months ago)	Scanning forum with forged referal	Hacking Web App Attack
Anonymous	2025-11-08 01:06:12 (6 months ago)	91.242.228.29 - - [08/Nov/2025:02:06:07 +0100] "GET /pma/ HTTP/1.1" 404 178 "https://gl-amf.org/pma/ ... show more 91.242.228.29 - - [08/Nov/2025:02:06:07 +0100] "GET /pma/ HTTP/1.1" 404 178 "https://gl-amf.org/pma/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 91.242.228.29 - - [08/Nov/2025:02:06:11 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 178 "https://gl-amf.org/phpmyadmin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-10-30 05:03:34 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 91.242.228.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.242.228.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 01:03:27.282687 2025] [security2:error] [pid 26628:tid 26628] [client 91.242.228.29:34845] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|staben.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQLxn9R34L1KMQC1KJAnYwAAABk"], referer: https://staben.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2025-10-10 02:57:53 (7 months ago)	91.242.228.29 (US/United States/-), more than 2 Apache 403 hits in the last 3600 secs	Brute-Force
🇦🇺 weblite	2025-10-07 14:51:00 (8 months ago)	WP_LOGIN_FAIL	Brute-Force Web App Attack
Anonymous	2025-08-19 23:30:27 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇧🇪 voormedia	2025-08-14 22:49:50 (9 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇺🇸 TPI-Abuse	2025-05-03 07:44:07 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 91.242.228.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 91.242.228.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 03 03:44:00.050828 2025] [security2:error] [pid 1960926:tid 1960926] [client 91.242.228.29:40369] [client 91.242.228.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|akistech.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "akistech.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aBXJQF5D4pxMnMxYc-BdbQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2024-12-31 02:25:09 (1 year ago)	(From [email protected]) Hi, I need your help with a problem I've got. I messed up with a youn ... show more (From [email protected]) Hi, I need your help with a problem I've got. I messed up with a young girl and now she's upset with me. I know I was in the wrong and I want to fix it. Can you help me figure out what to do? I'm willing to pay for your time and expertise. Please call me as soon as you can. My Whatsapp: +353877761357 My phone: +17852122012 My email: [email protected] Thanks, Angus show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-12-25 03:53:26 (1 year ago)	(From [email protected]) Hi friend i want to ask u if u need loan , i can give u up to 100k ... show more (From [email protected]) Hi friend i want to ask u if u need loan , i can give u up to 100k without any questions, fees start from 2%. u can take for long and short term, if u need please contact me My whatsapp number: +17852192072 My phone: +16057866458 My email: [email protected] show less	Phishing Web Spam
Anonymous	2024-12-18 16:37:26 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 oncord	2024-12-17 08:20:40 (1 year ago)	Form spam	Web Spam
Anonymous	2024-12-17 04:44:27 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-12-16 16:40:20 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 nowyouknow	2024-12-15 09:18:29 (1 year ago)	(From [email protected]) Hi, I need your help with a problem I've got. I messed up with a youn ... show more (From [email protected]) Hi, I need your help with a problem I've got. I messed up with a young girl and now she's upset with me. I know I was in the wrong and I want to fix it. Can you help me figure out what to do? I'm willing to pay for your time and expertise. Please call me as soon as you can. My Whatsapp: +353877761357 My phone: +17852122012 My email: [email protected] Thanks, Angus show less	Phishing Web Spam

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 2a05:d018:10df:d400:ee09:ff64:fbdf:9b51

🇷🇺 176.109.97.11

🇺🇸 151.240.67.228

🇧🇩 103.171.68.97

🇺🇸 20.115.90.159

🇷🇺 213.33.239.1

🇧🇷 190.89.234.14

🇵🇦 190.32.246.14

🇨🇱 179.60.68.40

🇮🇳 124.253.93.41

🇱🇹 91.224.92.147

🇺🇸 71.6.233.2

🇸🇳 41.82.50.218

🇧🇪 34.156.107.43

🇧🇷 20.226.80.52

🇮🇳 223.233.85.174

🇪🇸 196.196.150.6

🇬🇧 185.247.137.253

🇺🇸 150.107.36.242

🇻🇳 113.190.40.93