JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.90.126.52

91.90.126.52 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 10%: ?

10%

ISP	M247 LTD Panama Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.90.126.52

Whois 91.90.126.52

IP Abuse Reports for 91.90.126.52:

This IP address has been reported a total of 48 times from 27 distinct sources. 91.90.126.52 was first reported on November 8th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-05-31 16:48:59 (1 week ago)	Blocked by UFW (TCP on 1) Source port: 21047 TTL: 118 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 1) Source port: 21047 TTL: 118 Packet length: 52 TOS: 0x00 This report (for 91.90.126.52) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 consul.to	2026-04-18 00:12:50 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇦🇺 brocococonut	2026-03-30 13:01:19 (2 months ago)	2026-03-30 22:00:45 dovecot_login authenticator failed for (ADMIN) [91.90.126.52]: 535 Incorrect aut ... show more 2026-03-30 22:00:45 dovecot_login authenticator failed for (ADMIN) [91.90.126.52]: 535 Incorrect authentication data ([email protected]) 2026-03-30 22:00:45 dovecot_login authenticator failed for (ADMIN) [91.90.126.52]: 535 Incorrect authentication data ([email protected]) 2026-03-30 22:00:45 dovecot_login authenticator failed for (ADMIN) [91.90.126.52]: 535 Incorrect authentication data ([email protected]) 2026-03-30 22:00:45 dovecot_login authenticator failed for (ADMIN) [91.90.126.52]: 535 Incorrect authentication data ([email protected]) 2026-03-30 22:00:45 dovecot_login authenticator failed for (ADMIN) [91.90.126.52]: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force
🇺🇸 xmission.com	2026-03-02 16:39:48 (3 months ago)	Blocked by UFW (TCP on 11427) Source port: 61328 TTL: 52 Packet length: 64 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 11427) Source port: 61328 TTL: 52 Packet length: 64 TOS: 0x08 This report (for 91.90.126.52) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-01-30 16:30:59 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 xmission.com	2026-01-10 23:13:26 (5 months ago)	Blocked by UFW (TCP on 55328) Source port: 56587 TTL: 116 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 55328) Source port: 56587 TTL: 116 Packet length: 52 TOS: 0x08 This report (for 91.90.126.52) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-10-25 22:00:36 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-10-22 21:55:13 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-10-19 21:50:16 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-10-16 21:45:13 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 TPI-Abuse	2025-10-13 14:57:55 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 91.90.126.52 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 91.90.126.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 10:57:49.878276 2025] [security2:error] [pid 23674:tid 23674] [client 91.90.126.52:64062] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cnprcertificationreviews.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/instagram.com"] [unique_id "aO0TbUpmZv-FJ3zxsBY0AwAAAAE"], referer: https://cnprcertificationreviews.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2025-10-11 19:48:44 (8 months ago)	(mysaslmatch) Failed SASL login from 91.90.126.52 (PA/Panama/-): 2 in the last 4600 secs; Ports: ; ... show more (mysaslmatch) Failed SASL login from 91.90.126.52 (PA/Panama/-): 2 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Oct 11 22:48:40 anak postfix/smtpd[1800190]: warning: unknown[91.90.126.52]: SASL LOGIN authentication failed: authentication failure Oct 11 22:48:40 anak postfix/smtpd[1800199]: warning: unknown[91.90.126.52]: SASL LOGIN authentication failed: authentication failure show less	Port Scan
Anonymous	2025-09-08 09:40:13 (9 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇩🇪 marzzzello	2025-08-26 01:27:52 (9 months ago)	Ports: 25x 47693	Port Scan
🇺🇸 mnsf	2025-08-17 19:05:34 (9 months ago)	Too many Status 40X (20)	Brute-Force Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇪 94.200.95.18

🇪🇸 46.35.117.110

🇩🇪 45.135.141.17

🇺🇸 20.172.240.136

🇮🇷 5.232.102.176

🇰🇷 210.222.46.15

🇩🇪 79.215.44.35

🇩🇪 34.32.85.41

🇺🇸 20.118.32.47

🇨🇳 14.103.104.36

🇺🇸 216.25.89.89

🇸🇬 104.248.158.72

🇬🇧 35.203.210.234

🇯🇵 210.156.0.132

🇫🇷 173.249.10.85

🇨🇳 116.167.200.102

🇹🇼 114.34.130.221

🇻🇳 103.186.101.231

🇭🇰 43.154.195.142

🇺🇸 34.63.255.223