JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.242.73.196

91.242.73.196 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 16%: ?

16%

ISP	OrgName: NJ IX
Usage Type	Fixed Line ISP
ASN	AS53856
Domain Name	nj-ix.net
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.242.73.196

Whois 91.242.73.196

IP Abuse Reports for 91.242.73.196:

This IP address has been reported a total of 20 times from 9 distinct sources. 91.242.73.196 was first reported on April 14th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-05-27 07:54:34 (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.73.196 2026-05-27T08:16:47+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.73.196 2026-05-27T08:16:47+02:00 vpn Access-Reject 'meribelm' station: 91.242.73.196 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-05-26 22:52:19 (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.73.196 2026-05-26T23:47:59+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.73.196 2026-05-26T23:47:59+02:00 vpn Access-Reject 'mvandoren' station: 91.242.73.196 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-05-26 06:25:24 (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.73.196 2026-05-26T07:27:36+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.73.196 2026-05-26T07:27:36+02:00 vpn Access-Reject 'rtrue' station: 91.242.73.196 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 Countryman	2026-05-25 00:10:02 (2 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 Countryman	2026-05-24 13:55:13 (2 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 lp	2026-05-23 12:24:46 (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.73.196 2026-05-23T13:45:23+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.73.196 2026-05-23T13:45:23+02:00 vpn Access-Reject 'labrockington' station: 91.242.73.196 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-05-22 07:53:20 (3 weeks ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 91.242.73.196 2026-05-21T23:57:02+02: ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 91.242.73.196 2026-05-21T23:57:02+02:00 vpn Access-Reject 'sgabrielli' station: 91.242.73.196 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-05-22T09:40:29+02:00 vpn Access-Reject 'collyerd' station: 91.242.73.196 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2026-04-15 04:40:08 (1 month ago)	\| [Dangerous/Moldova] Aggressive IP 91.242.73.196 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Moldova] Aggressive IP 91.242.73.196 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
Anonymous	2026-02-22 22:38:19 (3 months ago)	"Failed password for invalid user against VPN Portal"	Brute-Force
Anonymous	2026-02-22 16:32:55 (3 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.02.22 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.02.22 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 MichelAngel SecPhish	2026-01-31 00:09:05 (4 months ago)	Credential stuffing detected: 18 failed login attempts targeting 6 unique usernames. Location: US, A ... show more Credential stuffing detected: 18 failed login attempts targeting 6 unique usernames. Location: US, ASN: –. Status: Suspicious show less	Hacking
Anonymous	2026-01-08 19:52:26 (5 months ago)	Attempted brute force login to web vpn 7 time(s); last attempt for 2026.01.08 is noted in report tim ... show more Attempted brute force login to web vpn 7 time(s); last attempt for 2026.01.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-18 19:49:06 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.18 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-18 18:31:50 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-25 20:03:48 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 91.242.73.196 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 91.242.73.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 16:03:40.175250 2025] [security2:error] [pid 8513:tid 8513] [client 91.242.73.196:32314] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cnprcertificationreviews.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/twitter.com"] [unique_id "aP0tHOrQHwz59dtNTYNTHQAAAAc"], referer: https://cnprcertificationreviews.org/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 185.166.25.150

🇬🇧 172.70.160.154

🇩🇪 148.153.140.126

🇬🇧 141.101.99.87

🇺🇸 128.8.124.68

🇸🇬 97.74.87.152

🇸🇬 47.128.58.9

🇬🇧 35.203.210.50

🇰🇷 34.50.54.149

🇯🇵 204.93.184.224

🇲🇽 187.190.183.37

🇬🇧 172.68.229.43

🇺🇸 162.158.167.129

🇲🇽 138.122.96.234

🇮🇳 135.13.28.35

🇨🇳 119.96.193.72

🇨🇳 116.31.63.192

🇮🇳 103.194.243.199

🇺🇸 91.230.168.144

🇫🇷 85.217.140.32