JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.229.120.3

91.229.120.3 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 17%: ?

17%

ISP	PP Malta Plus
Usage Type	Fixed Line ISP
ASN	AS196953
Hostname(s)	91-229-120-3.novograd.biz
Domain Name	malta.zt.ua
Country	🇺🇦 Ukraine
City	Zvyahel, Zhytomyr Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.229.120.3

Whois 91.229.120.3

IP Abuse Reports for 91.229.120.3:

This IP address has been reported a total of 12 times from 5 distinct sources. 91.229.120.3 was first reported on April 13th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-10-15 05:55:30 (2 days ago)	[Thu Oct 15 12:55:12.859020 2026] [security2:error] [pid 218424:tid 139626568218304] [client 91.229. ... show more [Thu Oct 15 12:55:12.859020 2026] [security2:error] [pid 218424:tid 139626568218304] [client 91.229.120.3:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=473&id=660%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-19-24-agustus-2015&start=30 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=473&id=660%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-19-24-agustus-2015&start=3..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "atBqwCRAIQTnD ... show less	Email Spam Hacking
🇺🇸 鬼影233	2026-09-24 12:20:26 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 04:58:05 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-18 03:19:30 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-31 18:04:02 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-27 02:30:43 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-25 06:41:04 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-11 00:02:18 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-09 17:48:32 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇷🇴 INTEQ	2026-07-26 04:16:42 (2 months ago)	Web attack from 91.229.120.3	Web App Attack
🇺🇸 kosada.com	2026-07-06 17:33:04 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-13 15:22:49 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 91.229.120.3 (91-229-120-3.novograd.biz): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 91.229.120.3 (91-229-120-3.novograd.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 11:22:44.411805 2026] [security2:error] [pid 3625867:tid 3625867] [client 91.229.120.3:41316] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|alexgitlin.com\|F\|2"] [data ".thehighwaystar.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alexgitlin.com"] [uri "/npp/www.thehighwaystar.com"] [unique_id "ad0KREIjmoCtwV1AcYXcewAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 171.22.217.230

🇨🇭 86.106.84.167

🇮🇳 66.116.248.73

🇧🇪 35.240.100.200

🇷🇴 2.57.121.25

🇺🇸 209.87.169.173

🇧🇷 191.98.239.130

🇲🇽 177.236.71.88

🇳🇱 138.226.239.10

🇮🇳 122.184.78.199

🇮🇩 103.187.165.26

🇭🇺 92.249.171.141

🇳🇱 91.148.247.10

🇫🇷 79.135.105.134

🇳🇱 77.239.124.63

🇳🇱 77.239.124.31

🇨🇳 211.137.108.74

🇺🇸 185.198.240.178

🇺🇸 136.107.213.72

🇨🇳 112.66.135.24