JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.148.246.200

91.148.246.200 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 32%: ?

32%

ISP	Base IP B.V.
Usage Type	Fixed Line ISP
ASN	AS34343
Domain Name	baseip.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.148.246.200

Whois 91.148.246.200

IP Abuse Reports for 91.148.246.200:

This IP address has been reported a total of 23 times from 18 distinct sources. 91.148.246.200 was first reported on April 14th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HERA - Operations	2026-08-16 23:18:15 (2 weeks ago)	club-herrmann - searching for vulnerable scripts: cache.php 2026/08/17 01:18:15	Web App Attack
Anonymous	2026-08-16 19:06:14 (2 weeks ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (12/60 min)'; Requests=12	Port Scan
🇺🇸 masterguru	2026-08-16 18:15:27 (2 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-14 ... show more BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-147) show less	Bad Web Bot
🇦🇺 nzhost.co.nz	2026-08-16 17:26:35 (2 weeks ago)	$f2bV_matches	Hacking Brute-Force
🇫🇷 Baking333	2026-08-16 15:52:51 (2 weeks ago)	[redacted] 91.148.246.200 - - [16/Aug/2026:16:52:40 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/[r ... show more [redacted] 91.148.246.200 - - [16/Aug/2026:16:52:40 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/[redacted] HTTP/1.1" 302 6743 0/35001 "[redacted]" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" [redacted] 91.148.246.200 - - [16/Aug/2026:16:52:50 +0100] "GET //wp-content/plugins/plugins/[redacted] HTTP/1.1" 302 6743 0/39070 "[redacted]" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-08-16 15:52:01 (2 weeks ago)	91.148.246.200 - - [16/Aug/2026:16:51:59 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTT ... show more 91.148.246.200 - - [16/Aug/2026:16:51:59 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 404 994 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" show less	Bad Web Bot
🇨🇳 pengpeng	2026-07-17 21:23:53 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 11984 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 11984 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 BlueWire Hosting	2025-12-21 14:17:16 (8 months ago)	Modsecurity: probe or injection attempt	SQL Injection Web App Attack
Anonymous	2025-12-18 11:59:26 (8 months ago)	91.148.246.200 - - [18/Dec/2025:12:59:26 +0100] "GET /common/download/resource?resource=/profile/../ ... show more 91.148.246.200 - - [18/Dec/2025:12:59:26 +0100] "GET /common/download/resource?resource=/profile/../../../../Windows/win.ini HTTP/1.1" 403 5466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 91.148.246.200 - - [18/Dec/2025:12:59:26 +0100] "GET /index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 403 5466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" ... show less	Hacking
🇳🇱 Mangelot Hosting	2025-12-18 05:17:46 (8 months ago)	(modsecurity) srv103 ModSecurity 91.148.246.200 (IN/India/-): 5 in the last 3600 secs; Ports: ; Dir ... show more (modsecurity) srv103 ModSecurity 91.148.246.200 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 Alboweb B.V.	2025-12-17 02:11:07 (8 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇳🇱 Alboweb B.V.	2025-12-15 11:11:38 (8 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇳🇱 jjnxpct	2025-12-14 04:52:19 (8 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /ProcessWait.aspx (Rule ID: 941100) - XSS Attack Detected via libinjection show less	SQL Injection Web App Attack
🇫🇮 Ticlem	2025-12-13 14:06:38 (8 months ago)	2025-12-13T15:06:14.565774+01:00 clement-turlure kernel: [2353943.644488] [UFW BLOCK] IN=enp0s31f6 O ... show more 2025-12-13T15:06:14.565774+01:00 clement-turlure kernel: [2353943.644488] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=91.148.246.200 DST=95.216.21.136 LEN=125 TOS=0x00 PREC=0x00 TTL=54 ID=21490 DF PROTO=UDP SPT=4576 DPT=6881 LEN=105 2025-12-13T15:06:25.201631+01:00 clement-turlure kernel: [2353954.280403] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=91.148.246.200 DST=95.216.21.136 LEN=125 TOS=0x00 PREC=0x00 TTL=54 ID=23034 DF PROTO=UDP SPT=4576 DPT=6881 LEN=105 2025-12-13T15:06:37.856332+01:00 clement-turlure kernel: [2353966.935042] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=91.148.246.200 DST=95.216.21.136 LEN=125 TOS=0x00 PREC=0x00 TTL=54 ID=24915 DF PROTO=UDP SPT=4576 DPT=6881 LEN=105 ... show less	Port Scan
🇳🇱 Alboweb B.V.	2025-12-11 00:11:15 (8 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c0e::12e

🇬🇧 195.140.214.21

🇺🇸 184.105.139.73

🇺🇸 162.216.150.238

🇫🇮 147.185.133.63

🇺🇸 147.185.132.208

🇸🇪 31.208.108.219

🇺🇸 20.118.243.156

🇧🇪 198.235.24.230

🇨🇳 182.90.206.174

🇳🇱 176.65.148.30

🇺🇸 173.239.211.45

🇺🇸 172.58.244.71

🇬🇧 123.58.207.151

🇺🇸 4.227.181.30

🇺🇸 172.253.86.84

🇨🇳 171.114.230.94

🇦🇺 149.118.68.211

🇹🇼 125.228.68.104

🇮🇩 103.155.47.50