141.98.252.191

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
75 reports
53 reporters · latest 11 minutes ago
ISP
31173 Services AB infrastructure in London, GB.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS39351
Domain Name
31173.se
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
London, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
75 from 53 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 18 🇫🇮 Finland 10 🇺🇦 Ukraine 9
Most common categories Brute-Force 60 SSH 39 Hacking 29 IoT Targeted 26 Exploited Host 14
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇮 syscfg
Cowrie SSH honeypot: 619 attempt(s) from 141.98.252.191. Period: 2026-11-05T14:17:43 to 2026-11-05T14:28:56 UTC. Usernames tried: root. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇫🇮 syscfg
Cowrie SSH honeypot: 619 attempt(s) from 141.98.252.191. Period: 2026-11-05T14:17:43 to 2026-11-05T14:28:56 UTC. Usernames tried: root. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇫🇮 syscfg
Cowrie SSH honeypot: 619 attempt(s) from 141.98.252.191. Period: 2026-11-05T14:17:43 to 2026-11-05T14:28:56 UTC. Usernames tried: root. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇫🇮 syscfg
Cowrie SSH honeypot: 619 attempt(s) from 141.98.252.191. Period: 2026-11-05T14:17:43 to 2026-11-05T14:28:56 UTC. Usernames tried: root. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
Anonymous
SSL VPN Brute Force
Brute-Force
🇦🇺 Klaverstyn
SSL VPN brute force: 8 fails, 8 users
Brute-Force
🇫🇮 syscfg
Cowrie SSH honeypot: 619 attempt(s) from 141.98.252.191. Period: 2026-11-05T14:17:43 to 2026-11-05T14:28:56 UTC. Usernames tried: root. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇪🇸 librebit
Brute force
Brute-Force
🇫🇮 syscfg
Cowrie SSH honeypot: 619 attempt(s) from 141.98.252.191. Period: 2026-11-05T14:17:43 to 2026-11-05T14:28:56 UTC. Usernames tried: root. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇫🇮 syscfg
Cowrie SSH honeypot: 619 attempt(s) from 141.98.252.191. Period: 2026-11-05T14:17:43 to 2026-11-05T14:28:56 UTC. Usernames tried: root. Source: Cowrie honeypot (SSH/Telnet)
Brute-Force SSH
🇺🇸 sargetun
Honeypot: Auto-ban: 24 hour idle after honeypot interaction. Auto-reported from VPS honeypot.
Brute-Force SSH Hacking
🇺🇸 rjdefrancisco
Unwanted traffic detected by honeypot on November 05, 2026: brute force and hacking attacks (3 over telnet).
Port Scan Brute-Force SSH
🇺🇸 genjikai666
Automated honeypot & gateway log: Honeypot probe: 19 automated probe connections. Detected on honeypot/firewall sensors.
Port Scan Brute-Force
🇩🇪 EnthecSolutions
Detected by Enthec Solutions. | Attempts: 55 in 24h | Target port: 23
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 157.230.187.238
🇺🇸 147.185.132.111
🇨🇳 121.199.163.136
🇮🇹 94.177.98.118
🇹🇷 88.235.219.100
🇳🇱 77.67.26.112
🇵🇱 194.180.49.41
🇲🇴 182.93.7.194
🇺🇸 170.205.31.193
🇺🇸 157.230.11.53
🇺🇸 154.83.199.51
🇮🇳 139.84.162.169
🇺🇸 136.87.45.130
🇸🇬 129.212.229.229
🇮🇹 89.32.163.57
🇫🇷 85.217.140.28
🇫🇷 85.217.140.3
🇨🇳 49.71.100.193
🇸🇬 47.128.112.214
🇬🇧 45.142.244.217
feedback