JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.242.95.118

91.242.95.118 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 19%: ?

19%

ISP	Address: 50 Treat Pl
Usage Type	Fixed Line ISP
ASN	AS3257
Domain Name	itns.md
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.242.95.118

Whois 91.242.95.118

IP Abuse Reports for 91.242.95.118:

This IP address has been reported a total of 25 times from 11 distinct sources. 91.242.95.118 was first reported on October 19th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-05-31 18:25:06 (3 days ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 91.242.95.118 2026-05-31T18:52:58+02: ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 91.242.95.118 2026-05-31T18:52:58+02:00 vpn Access-Reject 'llarson' station: 91.242.95.118 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-05-31T19:33:57+02:00 vpn Access-Reject 'eazizi' station: 91.242.95.118 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-05-31 07:53:16 (4 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.95.118 2026-05-31T08:56:04+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.95.118 2026-05-31T08:56:04+02:00 vpn Access-Reject 'jegarcia' station: 91.242.95.118 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-05-30 13:52:53 (5 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.95.118 2026-05-30T14:51:31+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.95.118 2026-05-30T14:51:31+02:00 vpn Access-Reject 'jamoreno' station: 91.242.95.118 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-05-30 06:24:43 (5 days ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 91.242.95.118 2026-05-30T08:05:06+02: ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 91.242.95.118 2026-05-30T08:05:06+02:00 vpn Access-Reject 'jcatlin' station: 91.242.95.118 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-05-30T08:07:15+02:00 vpn Access-Reject 'mscarn' station: 91.242.95.118 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-05-29 16:52:32 (5 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.95.118 2026-05-29T18:28:57+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 91.242.95.118 2026-05-29T18:28:57+02:00 vpn Access-Reject 'jkrueger' station: 91.242.95.118 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-05-29 04:54:01 (6 days ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 91.242.95.118 2026-05-29T03:26:51+02: ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 91.242.95.118 2026-05-29T03:26:51+02:00 vpn Access-Reject 'fmoghbel' station: 91.242.95.118 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-05-29T06:22:59+02:00 vpn Access-Reject 'earmstrong' station: 91.242.95.118 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 Countryman	2026-05-23 00:10:01 (1 week ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
Anonymous	2026-04-27 05:04:35 (1 month ago)	Web Attack Palo Alto Networks GlobalProtect Portal Login Attempt	Web App Attack
Anonymous	2026-04-25 17:17:30 (1 month ago)	Web Attack Palo Alto Networks GlobalProtect Portal Login Attempt	Web App Attack
Anonymous	2026-04-23 22:05:48 (1 month ago)	Web Attack Palo Alto Networks GlobalProtect Portal Login Attempt	Web App Attack
Anonymous	2026-04-22 21:15:21 (1 month ago)	Web Attack Palo Alto Networks GlobalProtect Portal Login Attempt	Web App Attack
Anonymous	2026-04-21 15:40:53 (1 month ago)	Web Attack Palo Alto Networks GlobalProtect Portal Login Attempt	Web App Attack
Anonymous	2026-03-24 19:12:47 (2 months ago)	This IP was involved in an brute force and password spray attack on 2026/03/24 11:37:36	Port Scan Brute-Force Exploited Host Web App Attack
🇳🇱 GabrielJST	2026-03-06 21:04:31 (2 months ago)	Port Scan detected from 91.242.95.118 (US/United States/-).	Port Scan
🇺🇸 TPI-Abuse	2026-02-12 18:10:49 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 91.242.95.118 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 91.242.95.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 13:10:42.582175 2026] [security2:error] [pid 13028:tid 13028] [client 91.242.95.118:26706] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|smogsandiego.com\|F\|2"] [data ".smogsandiego.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "smogsandiego.com"] [uri "/quicksmogsandiego.smogsandiego.com"] [unique_id "aY4XogfY-pSSgdWp-Ma7VAAAAAU"], referer: http://smogsandiego.com/quicksmogsandiego.smogsandiego.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.226.232.42

🇩🇪 217.154.196.156

🇮🇩 210.87.84.26

🇫🇮 147.185.133.160

🇨🇳 116.149.251.15

🇬🇧 195.96.139.236

🇪🇬 193.227.21.166

🇺🇸 181.214.48.145

🇧🇴 181.115.208.189

🇻🇪 138.59.9.249

🇨🇳 123.165.86.96

🇱🇹 45.227.254.170

🇭🇰 42.200.78.166

🇨🇳 42.59.37.58

🇺🇸 34.72.8.60

🇷🇴 193.32.162.60

🇭🇰 152.32.187.177

🇺🇸 136.114.140.81

🇺🇸 107.150.105.116

🇧🇭 88.201.12.37