JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.242.228.86

91.242.228.86 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	BlueVPS OU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62005
Domain Name	bluevps.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.242.228.86

Whois 91.242.228.86

IP Abuse Reports for 91.242.228.86:

This IP address has been reported a total of 22 times from 15 distinct sources. 91.242.228.86 was first reported on January 2nd 2023, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Block Rockin' Beats	2025-10-22 22:13:04 (7 months ago)	Scanning forum with forged referal	Hacking Web App Attack
🇺🇸 [email protected]	2025-10-20 00:05:30 (7 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2025-10-20T00:05:30Z	Brute-Force
🇺🇸 TPI-Abuse	2025-10-16 05:24:43 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 91.242.228.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 91.242.228.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 01:24:36.138981 2025] [security2:error] [pid 2213:tid 2213] [client 91.242.228.86:24127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.avilade.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.avilade.com"] [uri "/"] [unique_id "aPCBlMPcfqS3tLoK-9KrlwAAAA8"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-08-19 22:46:15 (9 months ago)	Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-08-01 23:59:08 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 91.242.228.86 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 91.242.228.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 19:59:00.467766 2025] [security2:error] [pid 13268:tid 13268] [client 91.242.228.86:50097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keysenterprise.com"] [uri "/.svn/"] [unique_id "aI1UxMa8o3FN22k3taSLxgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2025-07-11 23:08:13 (10 months ago)	MYH: Web Attack GET /admin/module	Web Spam Hacking Bad Web Bot Web App Attack
🇲🇽 licjperezl	2025-06-10 19:13:35 (11 months ago)	Ataque de diccionario o DDoS en nuestros servicios en linea	Brute-Force
🇨🇦 wil.com	2025-06-08 07:50:00 (11 months ago)	GlobalProtect login attempts with user dbailey.	VPN IP Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2025-03-28 17:18:28 (1 year ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-02-25 18:35:52 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.02.25 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.02.25 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-01-24 18:40:16 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2025-01-21 07:40:21 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
🇦🇺 MAGIC	2024-12-31 16:14:35 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-12-18 22:35:31 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-11-26 15:30:28 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.71.144.25

🇺🇸 193.37.33.163

🇲🇽 186.96.145.241

🇺🇸 185.238.231.44

🇮🇷 185.113.9.199

🇮🇳 116.193.128.214

🇻🇳 113.161.39.122

🇮🇳 106.222.218.57

🇯🇵 43.165.167.69

🇨🇳 8.135.29.109

🇺🇸 164.90.151.212

🇫🇷 144.91.107.104

🇮🇳 135.13.28.35

🇲🇽 134.168.249.198

🇳🇱 20.71.254.235

🇸🇬 165.245.176.51

🇪🇸 79.116.67.219

🇪🇪 31.59.160.12

🇺🇸 24.45.233.231

🇳🇿 219.89.198.191