91.90.216.159
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- NETKA TELEKOM LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS21001
- Domain Name
- netco.uz
- Country
- ๐บ๐ฟ Uzbekistan
- City
- Tashkent, Tashkent
Abuse Reports
Total reports
10 from
8 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ฉ๐ช datajt |
Web login brute-force or user enumeration (CrowdSec scenario crowdsecurity/http-wordpress_user-enum).
|
Brute-Force Web App Attack | |
| ๐ฉ๐ช london2038.com |
Attacking WordPress
91.90.216.159 - - [23/Oct/2026:20:22:43 +0200] "POST /wp-login.php HTTP/1.1" 503 19311 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
|
Brute-Force Web App Attack | |
| ๐ฒ๐ฝ octageeks.com |
Wordpress malicious attack:[octaflood]
|
Web App Attack | |
| ๐ฉ๐ช Marc |
|
Brute-Force Web App Attack | |
| ๐บ๐ธ lostswordfish.com |
Wordfence waf block on ohrsol
|
Web App Attack | |
| ๐ฉ๐ช london2038.com |
Attacking WordPress
91.90.216.159 - - [21/Oct/2026:17:49:59 +0200] "POST /wp-login.php HTTP/1.1" 503 19311 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
|
Brute-Force Web App Attack | |
| ๐ณ๐ด jad-abuse |
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 5 hits.
|
Brute-Force Web App Attack | |
| ๐ซ๐ท masterguru |
(modsec_5015) ModSec 5015: Suspicious User-Agent from 91.90.216.159 (UZ/Uzbekistan/-): 1 in the last 3600 secs (0-195)
|
Hacking | |
| ๐ฒ๐ฝ octageeks.com |
Wordpress malicious attack:[octawpauthor]
|
Web App Attack | |
| ๐บ๐ธ www.serverprotection.dev |
Repeated RDP login failures. Last user: pc
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown