JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.90.122.15

91.90.122.15 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 13%: ?

13%

ISP	M247 LTD, Liechtenstein Infra
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.90.122.15

Whois 91.90.122.15

IP Abuse Reports for 91.90.122.15:

This IP address has been reported a total of 123 times from 63 distinct sources. 91.90.122.15 was first reported on February 21st 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sastre	2026-05-27 06:47:00 (2 weeks ago)		Port Scan Web App Attack Hacking
🇩🇪 F242	2026-05-22 05:39:14 (3 weeks ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇮🇹 VHosting	2026-04-26 07:06:18 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇭🇺 Lacika555	2026-03-30 19:57:44 (2 months ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 stinpriza	2026-03-27 14:06:02 (2 months ago)	Web App Attack	Web App Attack
🇱🇻 garmtech.com	2026-03-16 09:50:34 (2 months ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇺🇸 Ghost Rider	2026-02-15 16:23:58 (3 months ago)	RdpGuard detected brute-force attempt on FTP	Brute-Force
🇺🇸 xmission.com	2026-02-14 00:59:09 (3 months ago)	Blocked by UFW (TCP on 633) Source port: 60725 TTL: 29 Packet length: 44 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 633) Source port: 60725 TTL: 29 Packet length: 44 TOS: 0x00 This report (for 91.90.122.15) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇪 cmbplf	2026-01-03 02:58:55 (5 months ago)	5 /?xkvpj=gtbfs (4mos1w4d)	Brute-Force Bad Web Bot
🇳🇱 jjnxpct	2025-12-23 04:48:50 (5 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /download.php (Rule ID: 930120) - OS File Access Attempt [Suspicious: etc/passwd found within ARGS:file: /etc/passwd] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-22 15:33:39 (5 months ago)	(mod_security) mod_security (id:211190) triggered by 91.90.122.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:211190) triggered by 91.90.122.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 10:33:31.938006 2025] [security2:error] [pid 21985:tid 21985] [client 91.90.122.15:30001] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|cruisingforsex.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /download.php?file=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cruisingforsex.com"] [uri "/download.php"] [unique_id "aUlky4D2-_JeMXZ-Y_hJ8wAAACw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-22 14:33:33 (5 months ago)	(mod_security) mod_security (id:211190) triggered by 91.90.122.15 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:211190) triggered by 91.90.122.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 09:33:28.185480 2025] [security2:error] [pid 12936:tid 12936] [client 91.90.122.15:29826] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|alexgitlin.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /download.php?file=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexgitlin.com"] [uri "/download.php"] [unique_id "aUlWuIK83HUo55jQuZUO6gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-22 14:25:47 (5 months ago)	sql injection	Web App Attack
🇺🇸 bigscoots.com	2025-12-21 09:01:39 (5 months ago)	(smtpauth) Failed SMTP AUTH login from 91.90.122.15 (LI/Liechtenstein/-): 5 in the last 3600 secs; P ... show more (smtpauth) Failed SMTP AUTH login from 91.90.122.15 (LI/Liechtenstein/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-12-21 04:01:28 dovecot_login authenticator failed for (ADMIN) [91.90.122.15]:43166: 535 Incorrect authentication data ([email protected]) 2025-12-21 04:01:37 dovecot_login authenticator failed for (ADMIN) [91.90.122.15]:37634: 535 Incorrect authentication data ([email protected]) 2025-12-21 04:01:37 dovecot_login authenticator failed for (ADMIN) [91.90.122.15]:4922: 535 Incorrect authentication data ([email protected]) 2025-12-21 04:01:37 dovecot_login authenticator failed for (ADMIN) [91.90.122.15]:5921: 535 Incorrect authentication data ([email protected]) 2025-12-21 04:01:37 dovecot_login authenticator failed for (ADMIN) [91.90.122.15]:61529: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-12-18 00:52:49 (5 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/91.90.122.15 2025 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/91.90.122.15 2025-12-17 04:10:48 / show less	Web App Attack

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇵🇭 119.92.76.210

🇫🇷 91.196.152.115

🇺🇸 63.46.42.51

🇫🇷 193.70.40.178

🇨🇳 124.221.82.17

🇻🇳 123.25.97.130

🇬🇧 81.19.219.196

🇺🇸 66.132.186.183

🇺🇸 66.132.172.133

🇨🇳 49.235.115.19

🇮🇩 36.95.221.140

🇬🇧 2a06:4880::1b

🇹🇼 198.235.24.47

🇩🇪 194.187.176.165

🇫🇷 176.149.246.125

🇷🇴 92.118.39.62

🇷🇺 91.244.113.178

🇩🇪 91.239.211.89

🇺🇸 66.240.236.119