JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.89.245.198

91.89.245.198 was found in our database!

This IP was reported 120 times. Confidence of Abuse is 100%: ?

100%

ISP	Vodafone BW GmbH
Usage Type	Fixed Line ISP
ASN	AS3209
Hostname(s)	ip-091-089-245-198.um28.pools.vodafone-ip.de
Domain Name	unitymedia.de
Country	🇩🇪 Germany
City	Karlsruhe, Baden-Wurttemberg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.89.245.198

Whois 91.89.245.198

IP Abuse Reports for 91.89.245.198:

This IP address has been reported a total of 120 times from 46 distinct sources. 91.89.245.198 was first reported on May 26th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pscriptos	2026-06-24 06:53:26 (2 days ago)	{"ClientAddr":"91.89.245.198:63148","ClientHost":"91.89.245.198","ClientPort":"63148","ClientUsernam ... show more {"ClientAddr":"91.89.245.198:63148","ClientHost":"91.89.245.198","ClientPort":"63148","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":160234283,"OriginContentSize":418,"OriginDuration":154798666,"OriginStatus":403,"Overhead":5435617,"RequestAddr":"www.cleveradmin.de","RequestContentSize":716,"RequestCount":1287860,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-24T08:53:04.995142172+02:00","StartUTC":"2026-06-24T06:53:04.995142172Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-24T08:53:05+02:00"} {"ClientAddr":"91.89.245.198:63148","ClientHost":"91.89.245.198"," ... show less	Brute-Force Web App Attack
🇫🇷 francoisunix	2026-06-24 06:24:05 (2 days ago)	91.89.245.198 - - [24/Jun/2026:06:23:20 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "Jetpack/13.0 ... show more 91.89.245.198 - - [24/Jun/2026:06:23:20 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "Jetpack/13.0; WordPress/6.3; http://site94301998.com" 91.89.245.198 - - [24/Jun/2026:06:23:30 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "Jetpack/12.0; WordPress/6.2; http://site41196619.com" 91.89.245.198 - - [24/Jun/2026:06:23:41 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" 91.89.245.198 - - [24/Jun/2026:06:23:53 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "Jetpack/12.1; WordPress/6.2; http://site60740476.com" 91.89.245.198 - - [24/Jun/2026:06:24:02 +0000] "POST /xmlrpc.php HTTP/1.0" 401 415 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇩🇪 rh24	2026-06-24 01:15:28 (2 days ago)	(xmlrpc_405) XMLRPC-Bot 405 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.vodafone-ip.de)	Hacking
🇪🇸 alferez	2026-06-24 01:01:11 (2 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇳🇱 Site.eu	2026-06-22 21:46:15 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 dynamix	2026-06-22 20:43:32 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 Marc	2026-06-22 13:43:05 (3 days ago)	91.89.245.198 - - [22/Jun/2026:15:42:43 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3467 "-" "Jetpack by ... show more 91.89.245.198 - - [22/Jun/2026:15:42:43 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3467 "-" "Jetpack by WordPress.com" 91.89.245.198 - - [22/Jun/2026:15:42:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3466 "-" "Jetpack by WordPress.com" 91.89.245.198 - - [22/Jun/2026:15:43:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3465 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" show less	Brute-Force Web App Attack
🇩🇪 rh24	2026-06-22 08:03:21 (3 days ago)	(xmlrpc_405) XMLRPC-Bot 405 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.vodafone-ip.de)	Hacking
Anonymous	2026-06-22 00:33:46 (4 days ago)	(wordpress) Failed wordpress login from 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.voda ... show more (wordpress) Failed wordpress login from 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.vodafone-ip.de) show less	Brute-Force
Anonymous	2026-06-22 00:01:37 (4 days ago)	91.89.245.198 - - [22/Jun/2026:02:01:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/12.5 ... show more 91.89.245.198 - - [22/Jun/2026:02:01:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/12.5; WordPress/6.4; http://site96473741.com" 91.89.245.198 - - [22/Jun/2026:02:01:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.5; WordPress/6.4; http://site96473741.com" 91.89.245.198 - - [22/Jun/2026:02:01:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 91.89.245.198 - - [22/Jun/2026:02:01:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 91.89.245.198 - - [22/Jun/2026:02:01:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/12.5; WordPress/6.3; http://site87716593.com" ... show less	Brute-Force Web App Attack
Anonymous	2026-06-21 19:26:10 (4 days ago)	Attac	Brute-Force
🇪🇸 alferez	2026-06-21 05:26:17 (5 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 integrantservices.com	2026-06-20 16:40:02 (5 days ago)	(PERMBLOCK) 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.vodafone-ip.de) has had more tha ... show more (PERMBLOCK) 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.vodafone-ip.de) has had more than 4 temp blocks show less	Hacking
🇺🇸 integrantservices.com	2026-06-20 11:10:08 (5 days ago)	(wordpress) Failed wordpress login from 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.voda ... show more (wordpress) Failed wordpress login from 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.vodafone-ip.de) show less	Brute-Force
🇪🇸 masterguru	2026-06-20 02:12:57 (6 days ago)	(xmlrpc) Failed xmlrpc access from 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.vodafone- ... show more (xmlrpc) Failed xmlrpc access from 91.89.245.198 (DE/Germany/ip-091-089-245-198.um28.pools.vodafone-ip.de): 5 in the last 3600 secs (0-122) show less	Hacking

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 100.29.192.81

🇲🇩 45.86.86.242

🇺🇸 3.130.168.2

🇧🇴 181.115.237.19

🇫🇷 176.191.43.176

🇰🇷 118.128.122.12

🇮🇩 103.172.20.218

🇵🇰 103.166.103.167

🇭🇰 103.51.144.238

🇩🇪 69.5.169.189

🇦🇹 62.218.60.66

🇨🇳 183.191.224.101

🇧🇷 179.48.4.14

🇺🇸 162.216.150.40

🇩🇪 151.243.11.245

🇫🇮 147.185.133.100

🇺🇸 147.185.132.205

🇺🇸 109.105.210.53

🇮🇳 103.206.97.169

🇺🇸 64.62.156.212