JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.239.78.219

91.239.78.219 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 49%: ?

49%

ISP	SOLLUTIUM EU Sp z.o.o.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6698
Hostname(s)	dedicated.vsys.host
Domain Name	sollutium.com
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.239.78.219

Whois 91.239.78.219

IP Abuse Reports for 91.239.78.219:

This IP address has been reported a total of 17 times from 12 distinct sources. 91.239.78.219 was first reported on May 19th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-05-21 21:59:17 (2 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-20. show less	Web App Attack SSH Hacking
🇳🇱 e.fierstra	2026-05-21 07:57:29 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 strxmpp	2026-05-21 07:47:46 (2 weeks ago)	91.239.78.219 - - [21/May/2026:09:47:46 +0200] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Window ... show more 91.239.78.219 - - [21/May/2026:09:47:46 +0200] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot
Anonymous	2026-05-21 05:21:27 (2 weeks ago)	(caddyscan) Scanner path probe from 91.239.78.219 (UA/Ukraine/dedicated.vsys.host): 5 in the last 36 ... show more (caddyscan) Scanner path probe from 91.239.78.219 (UA/Ukraine/dedicated.vsys.host): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 91.239.78.219 - - [21/May/2026:05:21:21 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [21/May/2026:05:21:21 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [21/May/2026:05:21:21 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [21/May/2026:05:21:22 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [21/May/2026:05:21:22 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
🇫🇮 as211431.net	2026-05-21 04:18:46 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from UA. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from UA. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-21 03:20:29 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 91.239.78.219 (dedicated.vsys.host): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 91.239.78.219 (dedicated.vsys.host): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 23:20:25.156912 2026] [security2:error] [pid 7862:tid 7862] [client 91.239.78.219:44143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oscarssons.com"] [uri "/.env"] [unique_id "ag55-bPzhW4502QKr2AWMQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-05-21 02:31:25 (2 weeks ago)	166 requests with url.path *.env	Brute-Force Bad Web Bot
🇦🇹 SchiWaGoA	2026-05-21 00:05:36 (2 weeks ago)	This IP was detected by CrowdSec trigger from crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 debestelapp	2026-05-20 23:10:07 (2 weeks ago)		Web App Attack
🇫🇮 inlink.ltd	2026-05-20 22:20:19 (2 weeks ago)	dot file probe	Web App Attack
Anonymous	2026-05-20 20:27:12 (2 weeks ago)	(caddyscan) Scanner path probe from 91.239.78.219 (UA/Ukraine/dedicated.vsys.host): 5 in the last 36 ... show more (caddyscan) Scanner path probe from 91.239.78.219 (UA/Ukraine/dedicated.vsys.host): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:20:27:05 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:20:27:06 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:20:27:08 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:20:27:09 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:20:27:09 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 18:57:17 (2 weeks ago)	(caddyscan) Scanner path probe from 91.239.78.219 (UA/Ukraine/dedicated.vsys.host): 5 in the last 36 ... show more (caddyscan) Scanner path probe from 91.239.78.219 (UA/Ukraine/dedicated.vsys.host): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:18:57:11 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:18:57:11 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:18:57:12 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:18:57:13 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:18:57:14 +0000] "GET /.env.staging HTTP/1.1" show less	Port Scan
Anonymous	2026-05-20 16:58:23 (2 weeks ago)	(caddyscan) Scanner path probe from 91.239.78.219 (UA/Ukraine/dedicated.vsys.host): 5 in the last 36 ... show more (caddyscan) Scanner path probe from 91.239.78.219 (UA/Ukraine/dedicated.vsys.host): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:16:58:20 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:16:58:20 +0000] "GET /.env.staging HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:16:58:20 +0000] "GET /.env.backup HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:16:58:21 +0000] "GET /.env.bak HTTP/1.1" [REDACTED] 200 2627 91.239.78.219 - - [20/May/2026:16:58:21 +0000] "GET /.env.old HTTP/1.1" show less	Port Scan
🇫🇷 masterguru	2026-05-20 14:33:59 (2 weeks ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇲🇦 amonaldo	2026-05-20 11:26:00 (2 weeks ago)	Probing for .env	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.176.114.36

🇩🇪 185.220.101.61

🇺🇸 185.191.171.13

🇭🇰 103.243.26.174

🇱🇻 87.110.46.119

🇳🇱 45.148.10.183

🇩🇪 213.209.159.11

🇨🇳 111.23.14.30

🇮🇩 103.163.230.134

🇮🇳 103.123.53.88

🇬🇭 41.242.115.84

🇬🇧 35.203.211.38

🇺🇸 195.184.76.18

🇨🇴 186.194.62.170

🇺🇦 104.28.192.94

🇭🇰 103.243.24.124

🇸🇬 43.156.71.43

🇩🇪 176.65.132.24

🇸🇬 165.154.205.128

🇿🇦 105.187.231.154