JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.90.122.4

91.90.122.4 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 0%: ?

ISP	M247 LTD, Liechtenstein Infra
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.90.122.4

Whois 91.90.122.4

IP Abuse Reports for 91.90.122.4:

This IP address has been reported a total of 108 times from 61 distinct sources. 91.90.122.4 was first reported on June 20th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2026-04-17 12:57:49 (2 months ago)	Web App Attack	Web App Attack
Anonymous	2026-04-14 06:21:02 (2 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 nyt	2026-04-14 03:19:13 (2 months ago)	Empty UA + error	Web App Attack
🇳🇱 ipoac.nl	2026-04-06 15:36:36 (2 months ago)	2026-04-06T16:36:35.025940+01:00 ipoac.nl postfix/smtps/smtpd-: warning: unknown[91.90.122.4]:2584: ... show more 2026-04-06T16:36:35.025940+01:00 ipoac.nl postfix/smtps/smtpd-: warning: unknown[91.90.122.4]:2584: SASL LOGIN authentication failed: (reason unavailable), sasl_username=-ipoac.nl 2026-04-06T16:36:35.025950+01:00 ipoac.nl postfix/smtps/smtpd-: warning: unknown[91.90.122.4]:44851: SASL LOGIN authentication failed: (reason unavailable), sasl_username=websiteipoac.nl 2026-04-06T16:36:35.072276+01:00 ipoac.nl postfix/smtps/smtpd-: disconnect from unknown[91.90.122.4]:44851 ehlo=1 auth=0/1 quit=1 commands=2/3 2026-04-06T16:36:35.072454+01:00 ipoac.nl postfix/smtps/smtpd-: disconnect from unknown[91.90.122.4]:2584 ehlo=1 auth=0/1 quit=1 commands=2/3 show less	Brute-Force
🇳🇱 FREAKISH	2026-03-24 20:57:26 (2 months ago)	2026-03-24 21:57:26: Minecraft server scan detected from 91.90.122.4 on port 25565 of 127.0.0.1	Port Scan
🇩🇪 int8	2026-03-24 20:57:01 (2 months ago)	2026-03-24T20:57:01.152684523Z Minecraft server scanner: status request	Port Scan
🇺🇸 cpxducky	2026-03-24 20:56:51 (2 months ago)	2026-03-24 20:56:51: Minecraft server scan detected from 91.90.122.4 on port 25565 of mail.cpxducky. ... show more 2026-03-24 20:56:51: Minecraft server scan detected from 91.90.122.4 on port 25565 of mail.cpxducky.com show less	Port Scan
🇺🇸 LockBlock	2026-03-24 20:56:43 (2 months ago)	2026-03-24 20:56:43: Minecraft server scan detected from 91.90.122.4 on port 25565 of racknerd-e7e1a ... show more 2026-03-24 20:56:43: Minecraft server scan detected from 91.90.122.4 on port 25565 of racknerd-e7e1a9 show less	Port Scan
🇬🇧 consul.to	2026-03-11 22:16:28 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇦 Julio Covolato	2025-12-30 15:40:01 (5 months ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇫🇷 SpaceHost-Server	2025-12-17 23:42:21 (6 months ago)		Brute-Force Web App Attack
🇺🇸 bigscoots.com	2025-12-17 21:42:55 (6 months ago)	(smtpauth) Failed SMTP AUTH login from 91.90.122.4 (LI/Liechtenstein/-): 5 in the last 3600 secs; Po ... show more (smtpauth) Failed SMTP AUTH login from 91.90.122.4 (LI/Liechtenstein/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2025-12-17 16:41:13 dovecot_login authenticator failed for (ADMIN) [91.90.122.4]:26465: 535 Incorrect authentication data ([email protected]) 2025-12-17 16:42:18 dovecot_login authenticator failed for (ADMIN) [91.90.122.4]:37238: 535 Incorrect authentication data ([email protected]) 2025-12-17 16:42:34 dovecot_login authenticator failed for (ADMIN) [91.90.122.4]:11864: 535 Incorrect authentication data ([email protected]) 2025-12-17 16:42:39 dovecot_login authenticator failed for (ADMIN) [91.90.122.4]:11319: 535 Incorrect authentication data ([email protected]) 2025-12-17 16:42:52 dovecot_login authenticator failed for (ADMIN) [91.90.122.4]:50624: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-12-16 20:10:32 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 macrob	2025-12-16 03:16:21 (6 months ago)	2025/12/16 03:15:24 [error] 701860#701860: 169222596 access forbidden by rule, client: 91.90.122.4, ... show more 2025/12/16 03:15:24 [error] 701860#701860: 169222596 access forbidden by rule, client: 91.90.122.4, server: fastcredit.net.ua, request: "GET /wp-content/plugins/ad-widget/views/modal/?step=../../../../../../../etc/passwd%00 HTTP/2.0", host: "fastcredit.net.ua" 2025/12/16 03:15:40 [error] 701862#701862: 169223403 access forbidden by rule, client: 91.90.122.4, server: fastcredit.net.ua, request: "GET /static/..%5c..%5c..%5c..%5cetc/passwd HTTP/2.0", host: "fastcredit.net.ua" 2025/12/16 03:16:19 [error] 701859#701859: 169224109 access forbidden by rule, client: 91.90.122.4, server: fastcredit.net.ua, request: "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=/etc/passwd HTTP/2.0", host: "fastcredit.net.ua" ... show less	Web App Attack
🇧🇪 cmbplf	2025-12-16 02:24:37 (6 months ago)	15 requests with url.path *.dll	Brute-Force Bad Web Bot

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.152.161.54

🇵🇰 182.190.209.216

🇲🇴 182.93.7.194

🇱🇹 81.30.98.49

🇺🇸 66.181.36.86

🇳🇱 5.187.35.26

🇺🇸 167.99.148.102

🇺🇸 162.216.150.55

🇷🇴 141.98.83.48

🇨🇳 119.125.1.214

🇻🇳 103.179.191.206

🇮🇩 103.176.79.58

🇧🇬 94.236.136.148

🇳🇱 81.19.216.114

🇸🇬 68.183.229.3

🇺🇸 62.132.18.142

🇲🇾 47.250.95.54

🇨🇳 36.106.166.13

🇺🇸 23.119.39.215

🇺🇸 20.38.42.22