JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.122.91.71

190.122.91.71 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 35%: ?

35%

ISP	Servicios y Telecomunicaciones S.A.
Usage Type	Fixed Line ISP
ASN	AS273096
Domain Name	syt.net
Country	🇦🇷 Argentina
City	Buenos Aires, Buenos Aires F.D.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.122.91.71

Whois 190.122.91.71

IP Abuse Reports for 190.122.91.71:

This IP address has been reported a total of 24 times from 21 distinct sources. 190.122.91.71 was first reported on March 10th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Tilellit.PRO	2026-08-27 03:11:16 (2 hours ago)	PrestaShop faceted search filter flooding attempt	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-20 01:08:11 (1 week ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /49-velo-electrique-route \| query: order=product.reference.asc&q=Marque-Scott%2FCapacit%C3%A9+batterie-520+Wh&resultsPerPage=36 show less	DDoS Attack Web App Attack
🇫🇷 Zkillu	2026-08-19 22:11:44 (1 week ago)	UDP flood (DDoS) vs AS215599: 14 pkts / 0.02 MB to UDP 8443 across 9 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 14 pkts / 0.02 MB to UDP 8443 across 9 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:11:44 (1 week ago)	UDP flood (DDoS) vs AS215599: 14 pkts / 0.02 MB to UDP 8443 across 9 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 14 pkts / 0.02 MB to UDP 8443 across 9 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
Anonymous	2026-08-17 23:44:51 (1 week ago)	apache vulnerability scan	Web App Attack
🇺🇸 kosada.com	2026-07-31 04:06:50 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-11 08:56:10 (1 month ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp show less	Exploited Host Bad Web Bot
🇺🇸 kosada.com	2026-07-06 19:32:31 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-02 19:51:42 (2 months ago)	[Wed Jun 03 02:51:38.360708 2026] [security2:error] [pid 160627:tid 139947282454208] [client 190.122 ... show more [Wed Jun 03 02:51:38.360708 2026] [security2:error] [pid 160627:tid 139947282454208] [client 190.122.91.71:50782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.baidu.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.baidu.go.id found within REQUEST_HEADERS:Referer: http://www.baidu.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "ah80Sget9oQyjUtZOu2ieQABDhM"], referer http://www.baidu.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[160675] [/+CGo4oUeio] [ah80Sget9oQyjUtZOu2ieQABDhM] keep_alive=[1] [2026-06-03 02:51:38.360712] [R:ah80Sget9oQyjUtZOu2ieQABDhM] UA:'Mozilla/5.0 (Linux; Android ... show less	Email Spam Hacking
🇩🇪 SMARTNET	2026-05-27 06:03:53 (2 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 1175168a-7e6d-467e-bb9a-dd1cdfa3fb9e	DDoS Attack
🇩🇪 phil2k	2026-05-25 02:14:48 (3 months ago)	Firewall: Within 2026-05-24 06:14:36 - 2026-05-24 06:14:36 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-05-24 06:14:36 - 2026-05-24 06:14:36 CEST(+0200) identified: unallowed access from 190.122.91.71 on port 23(telnet) (1 trial) Fail2ban: Within 2026-05-24 06:14:36 - 2026-05-24 06:14:36 CEST(+0200) banned: 1 times by fail2ban[firewall] show less	Port Scan Brute-Force
🇨🇦 DRI	2026-05-24 00:58:18 (3 months ago)	Unsolicited TCP traffic on Honeypot, srcport=22698 dstport=23	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-05-18 22:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇯🇵 jay hung	2026-05-13 00:34:49 (3 months ago)	2026-05-13T00:34:48.638885+00:00 quarktech kernel: [928339.835325] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-05-13T00:34:48.638885+00:00 quarktech kernel: [928339.835325] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=190.122.91.71 DST=172.237.20.248 LEN=60 TOS=0x00 PREC=0x40 TTL=42 ID=14867 DF PROTO=TCP SPT=59070 DPT=2323 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 sashan	2026-05-11 16:36:56 (3 months ago)	2026-05-11T19:36:55.414757+03:00 gate kernel: nftables: JAIL-MSS IN=wan OUT= MAC= SRC=190.122.91.71 ... show more 2026-05-11T19:36:55.414757+03:00 gate kernel: nftables: JAIL-MSS IN=wan OUT= MAC= SRC=190.122.91.71 DST=xxx.xxx.xxx.xxx LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=49985 PROTO=TCP SPT=44614 DPT=23 WINDOW=22946 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.63

🇱🇹 213.176.26.44

🇳🇱 204.76.203.7

🇭🇰 199.45.154.61

🇺🇸 195.184.76.181

🇬🇧 192.250.239.215

🇲🇽 187.174.238.116

🇲🇾 172.197.248.20

🇭🇰 156.225.14.74

🇬🇧 85.234.140.125

🇬🇧 82.17.5.7

🇳🇱 62.164.177.54

🇺🇸 47.85.8.171

🇬🇧 37.10.113.215

🇨🇦 208.96.233.67

🇺🇸 195.184.76.241

🇺🇸 195.184.76.122

🇺🇸 195.184.76.103

🇨🇳 175.9.34.127

🇸🇬 152.42.167.131