91.148.190.72

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
150 reports
72 reporters · latest 1 hour ago
ISP
Tamatiya EOOD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS50360
Hostname(s)
ip-190-72.4vendeta.com
Domain Name
4vendeta.com
Country
🇧🇬 Bulgaria
City
Samokov, Sofia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
150 from 72 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 35 🇺🇸 United States of America 35 🇩🇪 Germany 25
Most common categories Port Scan 121 Brute-Force 46 Hacking 26 Exploited Host 17 Web App Attack 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇮 dnsbd.tech
nftables: Port scan (TCP:8996) [srv2]
Port Scan Hacking
🇩🇪 london2038.com
Port Scan
🇫🇷 noi
portscan proto=TCP dpt=49405,4793,17327,57166,33674,18257,3080,40170 flags=SYN hits=10 window=10m
Port Scan
🇵🇱 mkey
Source IP from blacklist is still actively scanning our network. (9 hits in last hour, last seen 2026-11-08 17:39:52)
Port Scan
🇨🇦 Arpan Sen
Network port/address scan: probed 1 distinct port(s) across 19 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan
🇳🇱 StopAbuse
tcp/3389
Port Scan
🇺🇸 mibbsdevs
(ric-sv) CoffeePot: Connection attempt detected on closed service bait ports (22/23/3306/3389/5432).
Port Scan
🇫🇷 uthul
T-Pot honeypot: 74 hits on ports [3389, 4328, 16515, 18067, 32094, 33198, 33638, 42915, 50453, 50513] (automated)
Port Scan Brute-Force
Anonymous
fail2ban:mail3:14,18
Port Scan Brute-Force
🇩🇪 kingjan1999
Blocked by UFW [22374/tcp] | SPT: 40002 | TTL: 249 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 noi
portscan proto=TCP dpt=15265,55400,26139,28887,35969,44159,34443,45829 flags=SYN hits=10 window=10m
Port Scan
🇬🇧 Aetherweb Ark
*Port Scan* detected from 91.148.190.72 (BG/Bulgaria/ip-190-72.4vendeta.com). N in the last X seconds
Port Scan
🇺🇸 Cherryh4ck
Blocked by UFW [55879/tcp] | SPT: 40000 | TTL: 242 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇮🇹 matthew_eli
Keenetic Firewall Subnet Block: Entire subnet 91.148.190.72/31 blocked (98 hits in 24h). Reporting network ID.
Port Scan DDoS Attack
🇺🇸 baltic-lab.com
Firewall Detection, US2, Either a port scan or continued brute-force attack by a previously blocked offender ...
Brute-Force Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇾 178.168.197.90
🇳🇱 200.138.46.208
🇨🇴 186.86.110.187
🇮🇷 185.206.92.239
🇵🇱 162.158.172.194
🇻🇳 103.176.146.10
🇫🇷 89.92.129.27
🇺🇿 82.215.103.58
🇺🇸 71.105.31.16
🇺🇸 68.225.58.251
🇳🇱 45.148.10.157
🇧🇷 181.216.89.14
🇮🇶 130.255.95.177
🇨🇳 115.55.228.22
🇨🇳 114.219.157.97
🇩🇪 109.160.32.43
🇺🇸 34.135.130.152
🇺🇸 3.147.122.184
🇫🇷 194.5.53.37
🇩🇪 185.220.101.14
feedback